WonderStackAI

Privacy Policy

Last updated 18 September 2026. This page covers WonderStackAI at ai.wonderlead.tech/wonderstackai/. Other WonderLead products have their own policies.

1. Who we are

The data controller is Patricia Juarez Muñoz, trading as WonderLead. Privacy requests: patri@develagora.com.

2. What we collect

  • Quiz and stacks on this device — answers, picks, and saved stacks stay in your browser (localStorage) until you share or publish them.
  • Waitlist email — if you join the waitlist we store the address and that it came from WonderStackAI.
  • Sign-in — Google OAuth or a magic-link email. We receive your name and email (and a profile photo if Google sends one). We never receive your Google password.
  • Profile — a public username and display name after you sign in.
  • Votes — a helpful mark on a tool or stack, linked to your account. One vote per resource.
  • Notes — comments you post. They are stored as pending and only appear in Community after they are approved.
  • Published stacks — if you make a stack public it can show on Explore and on your profile.
  • Analytics — only if you accept cookies: Google Analytics (GA4) and PostHog. They record pages and events such as quiz finish. They do not run until you accept.

3. Legal basis (GDPR)

  • Consent — waitlist, analytics cookies, Google sign-in, posting a note.
  • Legitimate interest — to run the product, moderate notes, and keep accounts secure.

4. Newsletter

Signing in with Google may add you to the WonderLead newsletter. The sign-in screen says so. Unsubscribe from any email.

5. How we use it

  • To show your stacks, votes, and profile
  • To review notes before they go public
  • To tell you when finder, Pro, or Team opens, if you joined the waitlist
  • To improve scoring, if you accepted analytics

We do not sell personal data.

6. Storage and retention

Accounts, votes, notes, and published stacks live in our database (Supabase). Quiz data that never left the browser stays on your device. If you ask us to delete your account, we remove it within 30 days. Anonymized analytics may be kept longer.

7. Processors

  • Supabase — auth and database
  • Google — OAuth and, with consent, Analytics
  • PostHog — product analytics, with consent, EU host

Links out to tool websites are covered by those sites’ policies.

8. Your rights

If you are in the EEA you can ask for access, correction, erasure, portability, or to object. California residents can ask what we hold and to delete it. We do not sell personal information. Write to patri@develagora.com.

9. Cookies

Essential storage keeps you signed in and remembers cookie choice. Analytics cookies are off until you accept. Change this any time with the cookie control on the page.

10. Changes

The date at the top is the latest version.