Privacy Policy
Effective 6 September 2025
This Privacy Policy describes how The Strategy Stack (“we”, “us”, “our”) handles personal information when you use the-strategy-stack.com, the Operator Vault, and related services operated by Alex Pawlowski.
1. Who we are
The Strategy Stack is a publication and advisory practice focused on business, technology, and operating models. The website the-strategy-stack.com is operated by Alex Pawlowski. For privacy-related requests, use our contact form and select a general inquiry.
2. Information we collect
Depending on how you use the site, we may process the following information:
- Contact form. Name, email address, optional company name, message content, and the phase or topic you select (for example advisory, speaking, or publication).
- Operator Vault login. Email address when you request a magic link to access paid subscriber downloads. We verify eligibility against our subscriber list.
- Analytics (with consent only). If you accept the cookie notice, we use Vercel Analytics and Vercel Speed Insights to measure page views and performance. These tools are designed to be privacy-friendly and do not use advertising cookies.
- Technical data. Our hosting provider may process server logs (such as IP address, browser type, referring URL, and timestamps) to deliver the site securely and reliably.
- Local storage. Your analytics consent choice (accept or decline) is stored in your browser so we do not ask on every visit.
3. How we use information
- To respond to messages sent through the contact form.
- To authenticate paid subscribers and deliver entitled Vault downloads.
- To understand site usage and improve performance, only if you consent to analytics.
- To maintain security, prevent abuse, and operate the website.
- To comply with legal obligations where applicable.
We do not sell your personal information.
4. Legal bases (EEA/UK visitors)
If you are in the European Economic Area or the United Kingdom, we rely on:
- Consent for analytics cookies and similar technologies loaded after you click Accept.
- Contract or pre-contract steps when you contact us about advisory, speaking, or publication services, or when you log in to access paid Vault content you are entitled to receive.
- Legitimate interests to operate, secure, and improve the website, balanced against your rights.
5. Third-party services
We use service providers that may process data on our behalf, including:
- Vercel for hosting, analytics, and speed insights.
- Email delivery for contact-form notifications and Vault magic-link messages, via our configured mail provider.
Publication subscriptions and payments are handled by Substack, which has its own privacy policy. We do not process payment card data on the-strategy-stack.com.
The site links to external services (for example book retailers and event sites). Their privacy practices apply when you leave our site.
6. Cookies and similar technologies
We show a notice on first visit asking whether to allow analytics. If you decline, analytics scripts do not load. If you accept, Vercel Analytics may use local storage or similar mechanisms as described in Vercel's documentation. We do not use advertising or cross-site tracking cookies on this site.
You can change your choice by clearing site data for the-strategy-stack.com in your browser settings.
7. Retention
Contact form submissions are kept as long as needed to handle your inquiry and any follow-up, then deleted or archived according to our operational needs. Vault login tokens are short-lived. Analytics data retention follows Vercel's policies. Subscriber eligibility is synced from our publication provider for as long as your subscription status matters for access.
8. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of your personal information, and to withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with a supervisory authority.
To exercise these rights, submit a request through our contact form.
9. International transfers
Our service providers may process data in countries outside your own. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms offered by our providers.
10. Children
The Strategy Stack is intended for professionals. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us through the contact form and we will delete it.
11. Changes
We may update this Privacy Policy from time to time. The effective date at the top of this page will change when we do. Continued use of the site after an update means you accept the revised policy.
12. Contact
Privacy questions or requests: use our contact form at the-strategy-stack.com/contact.
