Last updated: September 24, 2026
Solar Stack ("we", "our", "us") respects your privacy. This policy explains what data we collect, how we use it, and your rights regarding your personal information.
We collect information you provide when using our service: your Google, Apple or Telegram account profile (name and email) when you sign in, solar equipment specifications you upload or enter manually, and calculation parameters and results you save. We also collect: feedback form submissions (email, name, category, and message), equipment issue reports, datasheet PDF uploads for equipment extraction, and your locale preference (saved automatically when you visit the site). If you use the optional location feature on the calculator, your chosen coordinates (latitude/longitude via an OpenStreetMap map) are stored with your calculation — we do not use automatic geolocation. We automatically collect basic usage data such as browser type, device type, and pages visited through Vercel Analytics. IP addresses are read from request headers solely for rate limiting and are held in server memory only — they are not stored in any database or log. When duplicate Telegram accounts are detected, they may be merged automatically to maintain a single user profile.
We use your data to provide the compatibility calculator service, save your equipment and calculation history, improve the accuracy of our extraction algorithms, and maintain service reliability. Feedback submissions and equipment reports are forwarded to our administrators via email (Fastmail) and Telegram for review. When you submit equipment for approval, you will receive email notifications about the status of your submission (approved or rejected). IP addresses are used for in-memory rate limiting to prevent abuse — they are not persisted or shared. We do not sell your personal data to third parties.
We use essential cookies for authentication (session management). Vercel Analytics collects anonymous, aggregated performance data — no personal information is tracked. We do not use advertising cookies or third-party tracking pixels.
We use the following third-party services: Neon (database hosting), Vercel (application hosting, analytics, and blob storage for uploaded PDF files), Anthropic Claude API (AI-powered datasheet extraction — uploaded PDF content may be sent to Anthropic for processing), Google/Apple/Telegram (authentication), Fastmail JMAP API (transactional email notifications to users and administrators), OpenStreetMap (map tiles loaded in your browser for the optional location feature — subject to OpenStreetMap's privacy policy), and Telegram Bot API (admin notifications and optional account linking). Each service has its own privacy policy governing their handling of data. Equipment pages also contain affiliate links to Amazon (see the Affiliate Links section below); we send no personal data to Amazon — its own privacy policy applies once you follow such a link.
Equipment pages may contain affiliate links to Amazon as part of the Amazon Associates programme. If you buy something after following such a link, Solar Stack earns a commission from Amazon at no extra cost to you — the price you pay does not change. These links open Amazon's websites, where Amazon's own privacy policy applies and Amazon may set its own cookies. We do not send Amazon any personal data, and no advertising cookies are set on this site.
If you turn on browser notifications — for example, to hear when a model you searched for is added — your browser creates a push subscription: an address at its push service (Google, Mozilla, Apple or Microsoft, depending on the browser) and two encryption keys. We store that subscription together with what you asked to be notified about and the language of the page. It is not linked to an account, a name or an email address. Notifications are encrypted, so the push service delivers them without being able to read them. A request nothing has answered is deleted after 180 days. To stop notifications, revoke the permission in your browser's site settings; the subscription is deleted the next time we try to use it.
The Solar Stack apps for iOS and Android need no account and do not ask for your name, email address or location. On first launch the app creates a key pair in your phone's secure hardware (the Secure Enclave on iOS, the Android Keystore on Android); the private key never leaves the device. To confirm that it is the genuine app on a genuine device, the app asks Apple (App Attest) or Google (Play Integrity) to vouch for it, and those services process information about the app and the device under their own privacy policies. We then keep a device record — the public key, the platform, the app version, the outcome of that check and when it was made, when the app last connected, and how many requests it made each day — to enforce the daily request limit and to stop abuse. Both apps also use Google Analytics for Firebase and Firebase Crashlytics, provided by Google. Analytics records which screens you open and actions such as switching tabs, filtering the catalogue, changing the language or theme and downloading a datasheet — never text you type — together with the device model, the operating system and app versions, the language, an app-instance identifier, the approximate country and city Google derives from the connection, and, on Android, the device's advertising ID; Crashlytics sends a technical report when the app crashes. We use this to understand how the app is used and to fix errors, not for advertising — the app shows no ads. Analytics data is kept for 14 months and crash reports for 90 days. On Android you can reset or delete the advertising ID in the phone's settings. None of this is linked to a name or an email address, and the app sets no cookies. Uninstalling the app deletes the private key, after which no one can use the device record again.
We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS), secure authentication via OAuth providers, and database access controls. However, no method of electronic transmission or storage is 100% secure.
We retain your data for the following periods: calculation history and saved equipment are retained for as long as your account exists. Feedback submissions are retained until resolved and may be kept in internal records for service improvement. Datasheet PDFs uploaded for equipment extraction are retained during the review process and may be deleted after processing. Rate-limiting data (IP addresses) is held in server memory only and is cleared when the server restarts — it is never written to a database. Account data is deleted upon request — contact us using the information below to request full account deletion.
You have the right to access, correct, or delete your personal data at any time. You can delete your uploaded equipment and calculation history through the application interface. You also have the right to data portability (request an export of your data), the right to restrict processing, and the right to withdraw consent for optional cookies at any time via the cookie consent banner. If you believe your data rights have been violated, you have the right to lodge a complaint with a supervisory authority in your jurisdiction (GDPR Article 77). To request complete account deletion or a data export, contact us using the information below.
We may update this privacy policy from time to time. We will notify users of significant changes by updating the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.
Solar Stack is operated by Roman Pohorilchuk (Ukraine), the controller of the personal data described in this policy. If you have questions about this privacy policy or your personal data, contact us at privacy@solar-stack.com.