Privacy Policy

Last updated: February 20, 2026

MissionStack ("we", "us", or "our") is operated by Kickstarting For Good, based in Germany. This Privacy Policy explains how we collect, use, and protect your personal data when you use the MissionStack platform, in accordance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for your personal data is:

Kickstarting For Good
kickstartingforgood.org

2. Information We Collect

We collect the following types of personal data:

• Account information – name, email address, and organization details when you create an account via Firebase Authentication.
• Usage data – how you interact with the platform, including pages visited, features used, and timestamps, collected via Google Analytics.
• Device information – browser type, operating system, and IP address collected automatically through server logs.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under Art. 6 GDPR:

• Contract performance (Art. 6(1)(b)) – processing necessary to provide you with the platform and its services.
• Legitimate interests (Art. 6(1)(f)) – improving the platform, ensuring security, and preventing fraud.
• Consent (Art. 6(1)(a)) – where applicable, for analytics and non-essential cookies. You may withdraw consent at any time.

4. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the platform.
• Improve and personalize your experience.
• Communicate with you about your account or changes to our services.
• Ensure security and prevent fraud.
• Analyze usage patterns to improve the platform (via Google Analytics).

5. Third-Party Services

We do not sell your personal data. We use the following third-party services to operate the platform:

• Google Firebase (Firebase Authentication, Firebase Hosting, Cloud Firestore) – for user authentication, hosting, and data storage. Google acts as a data processor on our behalf.
• Google Analytics – for anonymized usage statistics and platform improvement. IP anonymization is enabled.

These services are provided by Google LLC. Data may be transferred to the United States under the EU-U.S. Data Privacy Framework. For more information, see Google's Privacy Policy.

6. Data Storage and Security

Your data is stored on secure servers provided by Google Cloud Platform. We implement appropriate technical and organizational measures in accordance with Art. 32 GDPR to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law. When you delete your account, we will erase your personal data within 30 days, unless retention is required for legal obligations.

8. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15) – obtain a copy of the personal data we hold about you.
• Right to rectification (Art. 16) – request correction of inaccurate data.
• Right to erasure (Art. 17) – request deletion of your personal data.
• Right to restriction (Art. 18) – request restriction of processing in certain circumstances.
• Right to data portability (Art. 20) – receive your data in a structured, machine-readable format.
• Right to object (Art. 21) – object to processing based on legitimate interests.

To exercise any of these rights, please contact us using the details in section 1. We will respond to your request within 30 days.

You also have the right to lodge a complaint with a supervisory authority. The competent authority in Germany can be found at www.bfdi.bund.de.

9. Cookies

We use essential cookies required for the platform to function (e.g., authentication session). We also use Google Analytics cookies for usage statistics. You can manage your cookie preferences through your browser settings. We do not use third-party advertising cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

Kickstarting For Good
kickstartingforgood.org