Legal

Privacy Policy

What data we collect, why we need it, and how we protect it, written in plain language.

Last updated: October 3, 2026

1. Introduction

FullstackNotes ("we", "us") respects your privacy. This policy explains what personal data we collect on fullstacknotes.org, what we use it for, who we share it with, and your rights under the Indonesian Personal Data Protection Law (Law No. 27 of 2022).

2. Data we collect

  • Account data: name, email address, and profile photo from the Google account you use to sign in.
  • Contact data: the phone/WhatsApp number you optionally provide to receive notifications or register for certain programs. Sign-up is verified with a one-time code (OTP) sent to the email address of your Google account.
  • Transaction data: products purchased, payment amount, payment method, status, and coupon codes. We do not store your card numbers or PINs.
  • Seller data: bank name, account number, and account holder name for balance payouts.
  • Activity data: comments, questions and answers in the community, assignments and scores, and mentoring requests.
  • Technical data: device and browser type, IP address, pages viewed, and cookies or local storage (for example theme and language preferences).

3. How we use your data

  • Creating and managing accounts and verifying your identity.
  • Processing orders, payments, delivery of digital products, and seller balance payouts.
  • Sending important notifications, such as payment status, account approval, mentoring schedules, and access expiry.
  • Running the community, assignment, and mentoring features.
  • Preventing fraud and abuse and keeping our systems secure.
  • Understanding how the Site is used so we can improve our services and measure ad effectiveness.
  • Complying with legal obligations.

4. Basis for processing

We process data based on your consent, the need to perform an agreement (for example a purchase or a program you join), our legitimate interest in keeping the service secure, and applicable legal obligations.

5. Third parties involved

To keep the service running, certain data is processed by the following providers, only to the extent necessary:

  • Google: account authentication (Google Sign-In), as well as Google Tag/Ads for analytics and ad measurement.
  • Supabase and Firebase: database, storage, and authentication infrastructure.
  • Payment providers (Pakasir, Dana, and similar): process your payments.
  • Gmail (email), WhatsApp and Telegram: send verification codes and notifications to you and to administrators.
  • Hosting and CDN providers: deliver the Site and its files.

We do not sell your personal data. Data is shared only with the parties above, with authorities where required by law, or with your consent.

7. Storage and security

Data is retained while your account is active or as long as necessary for the purposes above and for legal obligations (for example transaction records). Once no longer needed, data is deleted or anonymized.

We apply reasonable security measures, such as encrypted connections (HTTPS), role-based access restrictions, and data separation. However, no system is completely immune, so please also keep your Google account secure.

8. Your rights

Under the Personal Data Protection Law, you have the right to:

  • access and obtain a copy of your personal data,
  • update or correct inaccurate data,
  • request deletion of your data or closure of your account,
  • withdraw consent and restrict certain processing, and
  • file an objection or complaint.

Send requests to fullstacknotes90@gmail.com. We will respond within a reasonable time. Certain transaction data may need to be retained to meet legal obligations.

9. Children’s data

Our services are intended for users who have legal capacity. Users under 18 should use the Site with the knowledge of a parent or guardian. If you believe we have unintentionally collected a child's data without parental consent, contact us and we will delete it.

10. Changes to this policy

This policy may be updated. Material changes will be announced on the Site, and the update date at the top of the page will be adjusted. Continued use of the Site after an update means you accept the latest policy.

11. Contact us

For questions about privacy or requests related to personal data:

See also our Terms & Conditions.

Have questions?

Our team is happy to explain.

See also: Terms & Conditions