Privacy and your data

Updated 30 September 2026

This is the short version. The privacy policy has the full details.

#What StiqNote keeps

Your email address, and your name and picture if you sign in with Google.
Your comments, what they're pinned to, and the screenshots, files and recordings you add.
The address and title of pages you comment on.
Browser details with each comment: browser, OS, window and screen size, zoom.
On Pro and Agency: console and network logs, and the last-minute replay, only when you post a new comment.
On Agency: review rounds and your clients' answers, and your branding.

#What it never does

It doesn't record what you type. Replays mask every form field, and password and card fields record nothing.
It doesn't keep request or response contents, or headers, in network logs.
It doesn't send anything about pages you only visit. On pages where StiqNote is active, it asks whether the page has comments, with tracking and sign-in parameters removed from the address, and keeps nothing unless you comment.
It doesn't load at all on quiet sites like email and chat, unless you turn it on there.
No ads, no analytics or tracking scripts on the pages you visit, no selling data, and no training AI on it.

#Who sees what

Comments are visible to the team they're posted in, never to other teams.
Private notes are visible to members only, never to guests.
Logs and replays are visible to members and the person who posted the report.
Guests see only the sites they were invited to.

#Error reports

When StiqNote itself hits an error, it asks before sending a report. Choose Ask, Always or Never in Settings → Bug reports and privacy (Send error reports). A report never includes the page's address, its content or who you are.

#Where it's stored

Data is stored on Cloudflare, with the database in Western Europe. Files are served through links that expire after 24 hours. StiqNote is run by Broes Consulting BV in Belgium.

#How long it's kept

Comments, files, recordings and logs: until someone deletes them, or the team is deleted.
Replays: 30 days on Pro, 90 days on Agency.
Error reports: 30 days.
Moving to a lower plan deletes nothing.

#Your rights

You can see, correct, export or delete your data. Delete your account yourself in Settings (see delete your account); for anything else, email privacy@stiqnote.com.

Paying teams can get a data processing agreement: see stiqnote.com/dpa.

For where data lives, what's encrypted, and how to report a security issue, see Security at StiqNote.