Privacy Policy

This policy explains how Hamstik, provided by Blackboard Studios (“Hamstik”, “we”, “us”), handles personal information when you use the service. Hamstik is a private, proprietary project management and work-item tracking tool.

• Account information. Your email address, display name, and password (stored only as a salted hash).
• OAuth account information. If you sign in with an external identity provider, we receive only the profile fields that provider shares with us (your name and email address).
• Work data you create. Project, task, sprint, label, comment, and file metadata that you or your team create within Hamstik.
• Account identifiers. A unique user ID and the organization memberships associated with your account.
• Announcement receipts. When we publish an announcement, we record whether you have seen or dismissed it so that it does not keep returning. We do not record which pages you read alongside it.

We do not store raw card numbers, CVCs, or full payment-method data, and do not use third-party advertising trackers.

• To operate accounts, authentication, and organization membership.
• To store and display the project data you create.
• To deliver service notifications (such as sign-ins) when a service is running.
• To diagnose problems and improve the service.
• To administer organization billing, payment recovery, retention, exports, and deletion requests.

Your personal information is not sold or shared with third parties for advertising or marketing. The only external services that may process your data are:

• Identity providers (for example, GitHub or Google) — only when we offer that sign-in option and only for the purposes of authenticating you.
• Hosting and infrastructure providers necessary to run Hamstik.
• Stripe. Stripe processes payment methods, billing addresses, supported tax IDs, and tax calculation for Pro. Hamstik stores limited operational billing metadata such as Stripe customer/subscription identifiers, billing email, status, dates, and tax-related status; it does not store raw card data.
• Amazon SES. We send billing, payment-recovery, retention, and deletion lifecycle emails to organization owners and the billing contact.

We retain account and work data for as long as your account (or your organization, for its contents) exists. When paid attachment access ends, existing attachments remain available for download and native export. Temporary exports and approved cold archives may contain customer attachments and remain access-controlled. Attachment removal requires explicit workflow review and is never timer-driven. Organization deletion is requested by an owner and finalized by a platform administrator after notices and any hold/dispute process. To delete your personal account or to request a copy of your data, contact us at support@blackboardstudios.net.

We use a session cookie to keep you signed in across requests. The cookie contains a signed session token and nothing else about your device. No third-party tracking cookies are set by Hamstik. Someone reading Hamstik without an account keeps their own dismissal of an announcement in local storage on that device, which goes with it when the device is cleared. Images in an announcement are served by Hamstik rather than embedded from a third party, so reading one tells nobody else that you are here.

Passwords are hashed with a strong algorithm and never stored in plain text. Access to the service is protected by authentication and by role-based authorization. While we take reasonable measures to protect your data, no method of transmission over the Internet is completely secure.

We may update this policy from time to time. When we do, we will change the “Last updated” date at the top of this page. Continued use of Hamstik after a change constitutes acceptance of the revised policy.

Questions about this policy can be sent to support@blackboardstudios.net.