Privacy Policy
Effective 26 August 2026 · Version 2026-08-26
Two kinds of people reach SimpleStand, and what we hold about them is very different. Find yourself below.
If you are buying from a stand
The page you scanned collects nothing about you.
It ships no JavaScript at all — no analytics, no tracking pixels, no advertising tags, no third-party embeds. SimpleStand sets no cookie on it. There is nothing on that page that can follow you anywhere.
Cloudflare serves the page for us and keeps the ordinary request records any web server keeps — an address, a timestamp, which page, which browser — for its own security and abuse handling, and it may set a cookie of its own to tell a browser from a bot. We do not use those records to build a picture of you, and we do not receive them as a list of visitors.
When you tap a pay button, you leave. You land on Venmo, Cash App, Zelle or a card checkout, and from that moment their privacy policy applies rather than this one. We never see the payment, the card, or your name.
If you run a stand
So that you can sign in and edit your page, we hold:
- Your email address. How we reach you, and how your account is recognised.
- Your sign-in identity. If you sign in with Google or Microsoft we store the permanent id they give us for you, and the address they tell us. We never see your password. We ask them for nothing else — no contacts, no calendar, no files.
- Which stands you manage.
- Your sessions, so a sign-in can expire and so you can be signed out.
- Sign-in links you have not used yet, and the network address that asked for one. They expire, each works once, and the address is what stops anyone using us to flood a mailbox.
- Which version of the terms you agreed to, and when. Kept so that both of us can say what was actually agreed.
- What you put on your stand — your list, your prices, your settings and the images you upload. Held so we can serve your page, and kept in versions so a bad edit can be undone.
We set one cookie, on the manager pages only, to keep you signed in. It is not used for anything else.
What we do not do
- We do not sell or rent anything about you.
- We do not run advertising, and we carry no ad network’s code.
- We do not track anyone across sites.
- We never handle payments, so there is no card number, bank detail or transaction history here to lose.
Who else touches it
- Cloudflare hosts and stores all of it — the pages, your list, your images, your account. It is the only company holding your data at rest.
- Google and Microsoft, only if you choose to sign in with them, and only to confirm you are you.
- Whoever your pay buttons point at. Your customers reach them directly; we send them nothing.
That is the whole list. There is no analytics provider, no email marketing tool and no CRM.
How long we keep it
Your stand’s content stays while your stand does. Sessions and unused sign-in links expire on their own, within days. Cloudflare’s request records run to its schedule rather than ours.
When a stand closes, its content is deleted.
Asking us about your data
Write to support@simplestand.farm. Ask what we hold, ask for a copy, ask for a correction, or ask us to delete it. We do not require any particular form of words and we will not make it difficult.
Children
SimpleStand is for people running a stand, which means adults. We do not knowingly collect anything from a child. A stand’s public page collects nothing from anybody, whatever their age.
Security
A sign-in is verified by signature, not by a header anyone could type. Every stand’s data is stored under a key containing that stand’s own id, so holding one stand’s access gives no route into another’s. Nothing is perfect — tell us if you see something.
Changes
This policy carries a version, shown at the top. If we change it we bump that and date it, and if a change is substantial we will tell stand owners rather than hoping they re-read the page.