Legal
Privacy Policy
- Effective
- September 24, 2026
Plain-English answers to what we collect, why, and what you can do about it.
Who we are
LocalStacked is a growth agency for local small businesses. When this policy says "we," "us," or "our," we mean LocalStacked. You can reach us any time at contact@localstacked.com.
This policy covers the information we collect through our website at localstacked.com and any related interactions you have with us by email.
What we collect
Information you give us through the evaluation form. When you request a free website evaluation, we collect your name and email address, plus — if you choose to share them — your phone number, business name, website address, and anything you add in the message field. We only ask for what we need to run the evaluation and get back to you.
Information you give us by email. If you email us directly, we keep a record of that conversation and the details you share so we can follow up.
Information collected automatically. When you visit the site, basic technical information is collected by our analytics providers — things like your IP address, browser type, device type, the pages you visit, how long you stay, and the site that referred you. We use this to understand what content is helpful, fix what isn't, and measure our page speed.
Which ad or search brought you here. If you reach the site by clicking one of our ads, we record the campaign parameters and the click identifier Google adds to the link, so we can tell which ads actually produce work and stop paying for the ones that don't. This is stored in a cookie on your browser and attached to your request if you go on to submit a form. It never includes anything you typed. The same value is also kept in your browser's local storage, for browsers that block the cookie.
Information from the client portal. If you are a client with access to our reporting portal, we collect the email address or Google account you sign in with, and hold a session cookie while you are signed in. Sign-in is handled by Supabase, listed below.
Photos, videos and notes clients send us. If you're a client and send us photos or videos through the portal's Upload page, we store the files along with anything you tell us about them: a note (typed, or spoken — a voice note is kept as a recording and written out by OpenAI, listed below), the service and the town. A photo can carry details your phone saved with it, such as when it was taken and, if your phone includes it, where. We keep that location privately to help us organize your work and never show or publish it. When we use one of your photos, we publish a copy without that information. Files are stored privately with Supabase, listed below.
Questions clients ask the portal's advisor. If you're a client and use the portal's Ask page, we keep your questions, the answers, and any thumbs-up or thumbs-down and note you leave, so we can check the answers and improve them. Local Stacked staff can read those chats. The answers are produced by Anthropic's Claude model from your own business data in the portal; Anthropic's API does not train on it. Nothing you type there changes your accounts or your marketing — the advisor only reads.
How we use it
The short version: we use your information to respond to your request, deliver the evaluation, run your engagement if you hire us, and improve the website. Specifically we use it to:
- Reply to your request and send you the free evaluation.
- Answer questions and coordinate work if you hire us.
- Send invoices, reports, and project updates to clients.
- Understand how visitors find and use the site.
- Measure which marketing channels produce real inquiries, so our own advertising spend is accountable — the same discipline we sell.
We do not sell your personal information. We don't send marketing emails unless you specifically ask us to.
Third-party services we use
A handful of third-party tools help us run the site. Each is governed by its own privacy policy:
Vercel
Hosts the website, and provides first-party, cookieless page-view analytics and anonymous performance metrics (load time, interactivity) from real visitor browsers.
Resend
Delivers the emails sent when you submit a form: the notification to us and your confirmation copy. Everything you typed into the form passes through Resend.
Google (Analytics, Ads, Search Console)
Google Analytics 4 measures site traffic and how visitors navigate between pages (uses cookies). When we run paid search, Google Ads measures which ads lead to an evaluation request and sets conversion-linker cookies. Search Console reports which searches show our pages, using Google's own aggregate data.
Upstash
Rate-limits form submissions to block spam. It briefly records the IP address a submission came from, and nothing else.
Supabase (database, portal sign-in and file storage)
Stores a record of evaluation requests: your name, email, optional phone and business name, the website you asked us to look at, your message, and the ad or search that brought you to the site. It's how we keep track of requests beyond the inbox. It also runs sign-in for the client portal and holds the session cookie for signed-in clients, and stores the photos, videos and notes clients send us through the portal, in private storage.
OpenAI (voice notes)
Writes out the voice notes clients record on the portal's Upload page, so they don't have to type. The recording is sent to OpenAI only to be transcribed; OpenAI's API doesn't use it to train its models or keep it.
Twilio (only if SMS alerts are enabled)
Sends us a text alert so a new request isn't missed. When enabled, your name, email, phone number (if given), and website domain are passed to Twilio. When SMS alerts are off, nothing reaches Twilio.
Cookies
A cookie is a small text file a website stores on your browser.
Google Analytics sets a few first-party cookies to tell returning visitors apart from new ones and to stitch pageviews into sessions. These tags load on every page of the site except the client portal. We do not show a cookie banner; the section below explains how to block them.
When our Google Ads tag is enabled, Google Ads also sets conversion-linker cookies so we can tell which ad led to an evaluation request.
We set one cookie of our own, named ls_attr. If you arrive from one of our ads or a tagged link, it records which one brought you here — the campaign parameters (UTM values) and the click identifier (gclid) Google attaches to the link. It lasts 90 days, contains nothing you typed into any form, and exists so we can tell which advertising is worth paying for.
You can clear or block cookies from your browser's settings at any time. Most browsers also offer private/incognito modes, and browser-level ad blockers will block Google Analytics entirely. You can control ad personalization across Google in Google's My Ad Center.
For more detail on each cookie, see our Cookie Policy.
How long we keep your information
We keep evaluation requests and related correspondence for as long as we need to service the engagement, plus a reasonable period after in case you have follow-up questions or want to work with us again. If you never hire us, we still keep the request so we don't pester you with duplicate outreach if you come back later.
Analytics data is retained according to the defaults set in our Google Analytics configuration, which we can adjust on request.
Photos, videos and voice notes clients send us are kept until you ask us to delete them, or until the engagement ends and you ask us to remove them. You can delete your own upload from the portal within a day of sending it.
Your rights
You can ask us, at any time, to:
- See what personal information we have about you.
- Correct anything that's wrong.
- Delete your information from our records (outside of anything we're legally required to keep).
- Stop contacting you.
Email contact@localstacked.com with your request and we'll get back to you within a few business days. You don't have to explain why.
Children's privacy
This site is directed at adults running or marketing a business. We don't knowingly collect personal information from children under 13. If you believe a child has submitted information to us, email contact@localstacked.com and we'll delete it.
Changes to this policy
If we change how we handle your information, we'll update the effective date at the top of this page. For material changes, we'll also post a notice on the home page or email active clients at the time.
Contact
Questions about this policy, or about anything we do with your information? Email contact@localstacked.com.