Privacy, without fog

Collect less.
Explain more.

This policy explains what happens to information when you browse, stumble, make an account, save a favorite, suggest a link, or contact Site Stumble.

Field guide12Updated August 9, 2026
01

The short version

Site Stumble is built to help people find websites, not to build invasive profiles about them. Anonymous visitors can browse without creating an account. A small amount of technical and activity data keeps the stumble experience working, prevents repeats and abuse, and tells us which parts of the product are useful.

02

Information we handle

Information you provide

  • Account information: email address, password hash, optional display name, and account timestamps. We never store your plain-text password.
  • Google sign-in: if you choose Google, we receive your Google account identifier, verified email address, name, and profile image. Site Stumble does not receive your Google password.
  • Saved activity: signed-in stumble history, favorites, and related timestamps.
  • Site suggestions: the URL and notes you choose to send for editorial review.
  • Contact messages: your name, email address, selected topic, optional related URL, message, and the time it was received.

Information created through use

We record events needed to select and improve stumbles, such as which listed site was selected, the chosen category, feedback actions, a random session identifier, and event time. Our servers and protective infrastructure also process ordinary request data such as IP address, browser and device details, requested URL, referrer, and timestamps.

Why we use it

We use this information to deliver the directory and stumble browser; authenticate accounts; synchronize history and favorites; review suggestions and reports; answer messages; diagnose failures; prevent fraud and abuse; understand aggregate usage; comply with law; and establish or defend legal claims.

03

Cookies and local browser storage

Site Stumble uses first-party storage for product functions:

Stumble session

A random identifier helps record selections and feedback. Its cookie can last up to one year.

Signed-in session

A secure, HTTP-only token keeps you signed in for up to 30 days. The database stores a hash of that token.

Google sign-in

Short-lived state and security cookies, normally lasting up to 10 minutes, protect the OAuth handoff.

Local history

Anonymous stumble history and an import marker are stored in your browser so you can retrace your route.

You can remove cookies and local storage using your browser controls. Clearing them may sign you out, erase anonymous history, or make recently visited sites appear again.

04

Fluxly analytics

Site Stumble currently uses Fluxly (fluxly.net) for website analytics. The Fluxly script helps us understand pageviews, active pages, traffic sources and campaigns, approximate country, browser, device, and longer-range traffic trends. Like other web services, Fluxly receives the technical information necessary to answer a browser request, which can include an IP address and user-agent information.

We use these measurements to maintain the service, understand aggregate use, and decide where the experience needs work. Fluxly is not used by Site Stumble to follow you across the independent websites you visit through the directory.

05

What happens at destination websites

Directory links and the Stumble frame load websites operated by other people and organizations. When a destination loads—even inside the Site Stumble frame—your browser connects to that destination. Its operator can receive your IP address, browser details, referrer information, cookies it has previously set, and anything you choose to provide there.

Site Stumble does not control a destination’s cookies, analytics, advertising, accounts, purchases, or privacy policy. Review that site’s policy before sharing information. If you leave the Stumble frame or interact with a destination, that activity is between you and the destination operator.

06

Who helps operate Site Stumble

We disclose information only as needed to run and protect the service, complete a user-requested action, comply with law, or handle a business transition. The principal categories are:

Linode / AkamaiApplication and database hosting; processes server and request data.Privacy
CloudflareDNS, proxying, TLS, caching, and protection; processes network and request data.Privacy
FluxlyCurrent audience and product analytics.Website
GoogleOptional account sign-in and, when enabled, advertising services.Privacy
Sendy + Amazon SESPlanned self-hosted subscriber management and email delivery.Sendy

These providers may process information in countries other than yours. Where applicable, their terms, data-transfer mechanisms, and legal obligations govern their processing.

07

Advertising and Google AdSense

When AdSense is enabled, third-party vendors, including Google, may use cookies, web beacons, IP addresses, or other identifiers to serve, limit, personalize, and measure ads, prevent fraud, and report performance. Google’s use of advertising cookies can enable Google and its partners to serve ads based on visits to Site Stumble and other sites.

You can manage personalized advertising through Google Ads Settings. Visitors may also use AboutAds choices for participating providers. Before personalized ads are shown where consent is required, Site Stumble will deploy an appropriate consent mechanism and honor the choices it collects.

Advertising does not buy a place in the directory. Any sponsored or paid placement will be labeled so it cannot be confused with an editorial selection.

08

Trail Notes newsletter

If you subscribe, we expect to process your email address, subscription status, signup time and source, and campaign events such as delivery, bounce, complaint, unsubscribe, open, and link click. That information is used to send the newsletter, measure whether it works, keep the list healthy, and honor opt-out requests.

Subscription will be voluntary and separate from a Site Stumble account. Every marketing message will provide an unsubscribe link. We will not add site suggestions, contact addresses, or account emails to the newsletter without an affirmative subscription.

09

Retention and security

We keep information for only as long as it is reasonably needed for the purpose described here, including service operation, editorial records, security, dispute resolution, and legal obligations. Account records, saved history, and favorites generally remain until you delete them or ask us to remove the account. Suggestions remain as an editorial record; contact messages remain while they are handled and for a reasonable follow-up period. Backup copies may persist for a limited time after deletion.

We use measures appropriate to a small production web service, including encrypted transport, hashed passwords and session tokens, restricted administrative access, separated production services, request validation, and security monitoring. No internet service can promise absolute security. Please do not send passwords, payment details, government identifiers, health records, or other sensitive information through suggestions or the contact form.

10

Your choices and privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of personal information; object to or opt out of certain processing; withdraw consent; or appeal a decision. Site Stumble does not sell personal information and does not use it for cross-context behavioral advertising today.

  • Delete signed-in history from your account and remove anonymous history with your browser controls.
  • Unfavorite sites at any time and sign out to end the current browser session.
  • Use Google’s controls to disconnect Site Stumble from your Google account.
  • Send an account or privacy request through the contact page. We may need to verify that the email or account is yours.
  • Complain to your local data-protection authority where that right applies.

We do not discriminate against people for exercising applicable privacy rights.

11

Children, international visitors, and policy changes

Site Stumble is a general-audience discovery service and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. A parent or guardian who believes a child supplied information should contact us so we can investigate and delete it.

The service is operated from the United States, so information may be processed there and wherever our providers operate. We may update this policy as the product, providers, or law changes. Material changes will be highlighted on this page and the “last updated” date will move. Continued use after an update is subject to the revised policy, to the extent permitted by law.

12

Contact us about privacy

Use the privacy route on our contact page for questions, access or deletion requests, objections, or concerns. Include the account email involved and enough detail to identify the request, but do not include a password or sensitive documents in the first message.