Privacy Policy

Last updated: July 27, 2026.

DogStack LLC (“DogStack”, “we”, “us”) operates the website at dogstack.show, the app at app.dogstack.show, and the DogStack mobile apps (together, the “service”). This policy explains what we collect, why, who we share it with, and the choices you have. It applies to the whole service.

What we collect

Information you provide.

• Account information. We collect your email address and sign-in credentials if you create an account. Passwords are held by our identity provider (AWS Cognito) in hashed form. We never store or see your password.
• Organizer content. This is the event and show information you enter or upload, including judging programs. Judging programs typically contain the names of judges and club officials as published in the official program.
• Steward access. If you sign in as a ring steward, we receive the access PIN you enter. We store PINs only as one-way cryptographic hashes.
• Agreement acceptances. When you accept an agreement in the app, we record which version you accepted, when, and the IP address and browser identifier of the request, as evidence of the acceptance.
• Email signup. We collect your email, role, and any note you include when you join our mailing list, plus a record of the exact consent text you agreed to. It is stored in our own first-party database, and we don’t hand your signup to a third-party email vendor.
• Contact form. We collect the name, email address, optional phone number, subject, and message you submit at dogstack.show/contact. We use it to answer you and to keep a record of the conversation. Submitting the form also records the automatic information described below.
• Correspondence. We keep the emails you send us, including data requests.

Information collected automatically.

• Rings and events you follow. These are tied to your account so your Watch list works across devices.
• Product analytics. We measure page views, clicks, and performance via PostHog. Session recordings mask all form inputs. We do not send your email address or free-form text to PostHog.
• Server and CDN logs. These record IP address, user-agent, request path, and timestamps, used for security and abuse prevention. API security logs are kept about 30 days, separate from your records.
• Contact-form context. When you submit the contact form we store, alongside your message, the IP address it came from and the approximate location that address maps to (typically city, region, country, postal code, and time zone), plus your browser identifier, language, and the page you submitted from. We use it to understand who is getting in touch, to route inquiries, and to block abuse of a public form. The location is worked out from the IP address by our own content-delivery network (Amazon CloudFront). It is approximate, it is not GPS, and we do not send your IP address to any third-party location-lookup service.

Payments. Organizer payments are processed by Stripe using Stripe-hosted checkout. Card details go directly to Stripe and never reach DogStack. We receive transaction records (who paid, for which show, the amount, and when).

How we use it

• Operate the service, including extracting a draft schedule from an uploaded judging program using an AI service (Amazon Bedrock) running in our own AWS environment. Uploads are not used to train AI models.
• Process organizer payments and maintain purchase records.
• Send email you asked for, until you unsubscribe.
• Secure the service and prevent abuse.
• Understand product usage and improve the service.
• Comply with legal obligations.

Public show information

Published show information (schedules, ring numbers, breed counts, judges’ names as they appear in the official judging program, and live ring progress) is displayed publicly. That is the product’s purpose. Organizers are responsible for the programs they publish. This information is event information, not spectator personal data, and viewing it requires no account.

Who we share it with

We share personal information only with the service providers that run the service, all under their own privacy commitments and only to provide their service to us:

• AWS. It provides hosting, data storage, content delivery and IP-based location lookup (CloudFront), identity (Cognito), email delivery (SES), and AI schedule extraction (Bedrock), all in US regions.
• Stripe. It handles payment processing for organizers. stripe.com/privacy
• PostHog. It provides product analytics, in the US data region. posthog.com/privacy

We may also disclose information if required by law, to protect the service or others, or as part of a merger or sale of the business (in which case this policy continues to apply to it). We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not give it to advertising networks or data brokers.

How long we keep it

• Account data and follows. We keep these until you delete your account (see below).
• Mailing-list records. We keep these until you unsubscribe or ask us to delete them. Unsubscribed addresses are kept on a suppression list so we don’t email them again.
• Security logs. We keep these about 30 days.
• Contact-form messages. We keep these while we’re in touch and as a record of the inquiry. Ask us and we’ll delete yours.
• Payment and charge records. We keep these as long as tax and accounting law requires.
• Agreement-acceptance records. We retain these as legal records of the acceptance, including after account deletion.
• Encrypted backups. These age out automatically within about 35 days.

Security

Data is encrypted in transit and at rest. Agreement-acceptance records are additionally encrypted with a dedicated managed key. Access is limited by least-privilege controls. No method of transmission or storage is completely secure, but we design for it.

Your rights and choices

• Unsubscribe from any email we send. The link is in every message.
• Opt out of analytics by visiting any DogStack page with ?internal=1 appended to the URL. We remember the choice in your browser.
• Access, correct, or delete your data. See dogstack.show/delete-account for account deletion (completed within 30 days), or use our contact form for any request. We verify requests using the email address on the account.

California residents. Under the CCPA/CPRA you have the right to know what personal information we collect (this policy is the disclosure), to access it, to correct it, to delete it, and to not be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined in the CCPA, so there is no sale or sharing to opt out of, and opt-out preference signals such as Global Privacy Control do not change how we treat your data. We do not use sensitive personal information to infer characteristics. Submit requests by the methods above, yourself or through an authorized agent. Residents of other jurisdictions with similar laws may exercise the same rights the same way.

Children

The service is not directed to children under 13, and accounts may not be created by children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, email us and we will delete it.

Changes

We’ll update this page when our practices change and revise the “last updated” date above. Material changes will also be announced by email to subscribers and account holders.

Contact

DogStack LLC · Contact us · info@dogstack.show