Privacy statement
Last updated: 17 October 2026
De Stamkroeg is a private place for regulars. We collect as little as possible, sell nothing, show no ads and use no trackers, statistics or analytics services. This statement follows the General Data Protection Regulation (GDPR) and the Belgian privacy act.
Who is responsible?
Yannick Van Dyck — reachable via yannickvd@yahoo.com. De Stamkroeg is a private, non-profit project and is meant for adults (18+).
Which data and why?
| Data | What for | Legal basis (art. 6 GDPR) |
|---|---|---|
| Username, password (only as a hash), role, date of registration | Your account and logging in | Contract (your membership) |
| Profile photo and bio (optional) | Showing them to other members | Consent — you can always remove them |
| Email address (optional) | Confirming your address, recovering your password and warning you if the address changes. Never for advertising. | Consent |
| Messages at the bar, private messages, photos and files, book tips, projects, reactions, stars, toasts, skills | The functions of De Stamkroeg. Location data (EXIF) is erased from photos. | Contract |
| Live broadcast: who broadcasts, who's watching (names, visible to members), and recordings | The video goes through the site and is only for people who are logged in (members and guests); anyone logged in can also broadcast. Recording only happens when the broadcaster turns it on beforehand; viewers then see 'being recorded'. Recordings stay on the site for 30 days (longer if they are pinned), then move to the archive on the Storage Box until the admin deletes them; they are also included in the nightly backup. The server logs when a broadcast starts (with the broadcaster's address). On a strict network (https only), picture and sound go through a relay (TURN) on our own server; your browser gets a temporary key for 24 hours for that, and nothing of it is kept. A broadcaster can make a broadcast private: then only the participants and those who were invited can see the broadcast and the recording — not even the administrator, if they're not part of it (they only see that a private broadcast is running, and can stop it). Only the person who started the broadcast can release a private recording to all members and guests. | Contract |
| Polls at the bar: your question, the choices, and who voted for what | A vote at the bar. The voters' names are visible to members (that is the whole point). Disappears with the bar message. | Contract |
| Time of your last two visits to the news | Showing what's new since your previous visit | Contract |
| News articles you hid and news sources you muted | No longer showing them, only to you (hidden articles 30 days, muted sources until you switch them back on). Which articles you read is remembered only by your own device. | Contract |
| News "For you": which articles you opened, shared, hid or thumbed — only if you turn it on yourself | Making a personal news list (and explaining why an article is in it). Only the article's number and what you did with it, never what you read in it; sixty days. If you turn it off, everything is erased at once; it never goes to an AI service. | Consent (you turn it on yourself) |
| News you follow (your keywords) and your reading list (articles to read later) | Bundling the news about them and sending you a notification when something new comes in (only if you turn that notification on); keeping your reading list the same on the site and in the app. Only you see them; they disappear with your account. | Contract |
| Device for push notifications (address at the notification service, or the token of the iPhone app), linked to your login session | Sending notifications, only if you turn them on. Logging out stops them right away. | Consent |
| Secret for two-step verification, recovery codes (as a hash) | Extra protection for your account, only if you turn it on | Contract |
| IP address at login, failed attempts and errors (server log), number of failed attempts per name | Security: countering password guessing and abuse | Legitimate interest (safety of the members) |
| Security log: logins from a new device, failed login attempts, a changed password, two-step verification or email address, and what an administrator did to your account — with time, IP address and type of device (e.g. iPhone · Safari) | Security: noticing and looking into an account takeover or abuse. Only the administrators see it; your own entries are in the download of your data. Never stored: passwords, codes, or a typed name that doesn't exist. | Legitimate interest (safety of the members) |
| What you fill in in a guide (the guide, the Legal guide, the Explainer, the investment thesis) | Giving an outcome or a pointer. The guide sends your question to Anthropic (Claude); the investment thesis to TypeSafe (judging) and Anthropic (the plain-words explanation); the Legal guide and the Explainer search the official sources and ask Claude to write the answer. We don't keep it (except the investment thesis, see the next row, and what you save yourself to follow up); only a thumbs up or down under an outcome is counted, without what you filled in. | Consent (you use it yourself) |
| Your investment thesis and your radar analyses (Analyses) | A thesis you test is kept in your analyses: the thesis, your plan and purchase price if given, the outcome and the figures of that moment. A radar analysis you save is a snapshot of the radar (no input of your own). Only you (and the admin) can see it unless you share it with the other members; you can edit or delete it at any time, and it is deleted with your account. | Consent (you keep it yourself) |
| Your track record of the guides (what you save yourself with "Save and follow up") | Keeping score of how well the guide's probabilities and your own estimate held up. Saved are the question, the choices with their probabilities, your own pick, the term and the outcome you note later — only when you click that yourself. Only you see it; it never goes to an AI service. You can delete it; it is included in your data export and disappears with your account. | Consent (you save it yourself) |
| Your investor bookkeeping: the purchases and sales, dividends and starting values you enter yourself | Calculating per year what the tax office wants to know (gain, loss, exemption, stock exchange tax). Only you see them; they never go to an AI service. You can export and erase them; they disappear with your account. | Contract (you use it yourself) |
| Your agenda: the appointments, tasks and reminders you enter yourself, with their times, notes and repetition; the secret address for your calendar app | Planning your day, and a nudge on your phone at the moment you chose yourself. Only you see them; they never go to an AI service (the sentence you type in plain words is read by the server itself). Bar appointments you answered "I'm coming" or "Maybe" to are included. You can export and erase them; they disappear with your account. | Contract (you use it yourself) |
| The boards: the cards you create or are assigned (title, text, due date, labels, checklist) and what you change on a board (the log) | Organising work together: everyone in the pub sees the boards and works on them. A card with a due date appears in your agenda; an assigned card sends a notification if you turn that on. Your cards are in your export; if you delete your account, the cards stay on the board without your name. | Contract (you use it yourself) |
| A question to the Explainer | Composing an answer from public sources. The question goes to Voyage AI, Anthropic and TypeSafe (see below) and is not kept. The calculator calculates in your browser; nothing goes to the server. | Consent (you use it yourself) |
| What you type in Search | Showing results. We don't keep your searches. Private messages are never in the search results. | Contract |
| Visits to the public pages (start page, explanation of the guides, request) | Nothing about you is kept; only a temporary count per network address against overload (a few minutes, in the server's memory). | Legitimate interest |
| A request to become a member: your name, email address and what you write about yourself | The administrator decides whether you become a member; on approval you get an invitation link by email. The request is erased after approval or refusal, and otherwise after 60 days. | Consent |
| Your email address and name, for the weekly digest (only if you turn it on yourself) | Every Monday an overview of what happened. Sent via Brevo (Sendinblue SAS, France; servers in the EU; see below). Unsubscribe with one click at the bottom of every email or on your account page. | Consent |
| Whether you read a private message, and that you are typing | The sender sees ✓✓ when you read their message, and "… is typing" while you write a reply in the same conversation. The typing is not stored anywhere. | Contract |
| Tickers on the Ticker radar (only for those allowed to see the radar) | Following shares | Contract |
| Your price alerts: stock and threshold (only for those allowed to see prices) | A notification when a stock moves sharply during the trading day. They are removed when you delete the alert, the stock or your account. | Consent (you set them yourself) |
There is no automated decision-making or profiling with consequences for you (art. 22 GDPR). The AI services only give suggestions, sort news or score shares.
Regulars of a café
A café can have its own bar on De Stamkroeg. Whoever comes in there with the QR code at the bar is a regular of that café: not a member of De Stamkroeg, with a separate session, and with no access to anything other than the cafés they came into. The cafés, too, are for people aged 18 or over.
| Data | Who sees it | How long |
|---|---|---|
| The name you choose yourself (no e-mail, no password, no phone number) | The regulars and the owner of the cafés you're in | Until you erase everything, or one year after your last visit |
| Which cafés you came into, your role (regular or owner), when you came in and when you last visited | The owner of that café; the administrator | Same; leaving a café removes you there |
| Your messages at a café's bar and your cheers | Whoever is in that café | Until you (or the owner) delete them, or until you erase everything |
| "I'm coming tonight" (the day and possibly a time) and your answers to events | Whoever is in that café. A café's public page only shows numbers, never names. | "Tonight" two weeks; events until one year after the date |
| A report of a message: the text and the writer at that moment, the reason you give, and who reported it | The owner and the administrator (only the administrator sees who reported it) | Until the report is handled; then kept as evidence as long as the café exists |
| A session key per device (stored only as a hash) and a pairing code for another device | Nobody | The session one year (extended when you visit), the pairing code ten minutes |
| Notifications on your phone, if you turn them on: per device the address at your browser's notification service with the keys to encrypt, that device's language, and per café which notifications you want | Nobody; the notification service delivers the notification to you encrypted | Until you turn them off, log out on that device or erase everything |
The screen on a café's TV (if the owner turns it on) shows the QR code, the public agenda, an announcement from the owner and only numbers: how many regulars are coming tonight, how many have the bar open right now and how many are coming to an event. Never a name or a message from a regular.
Why: to make the café's bar work (contract: you use it yourself), and to handle reports (legitimate interest: a safe bar for everyone). Messages in the cafés never go to an AI service and are shared with nobody. If a café is deleted, everything of that café disappears. Your rights: under Me you change your name, download your data, log out on a device or erase everything.
With whom do we share data?
- Hetzner Online GmbH (Germany) — the server is in a data centre in the EU (Nuremberg, Germany); our backups are at Hetzner in Helsinki (Finland), also in the EU. Hetzner processes the data only on our behalf.
- Brevo (France, EU) — sends our emails (confirmation, password recovery, warnings, and the weekly digest if you turned it on): gets your email address and the content of that email. Brevo adds an invisible image to every email and routes links through its own address, to count whether an email is opened and clicked; we can't turn that off, and we don't use those counts.
- Apple, Google, Mozilla, Microsoft — if you turn on notifications, your device's notification service brings them to you. In the browser the content is encrypted; they can't read it. In the iPhone app, notifications go through Apple (the iOS notification service); the title and the short bit of text of a notification then travel to Apple unencrypted.
- TypeSafe (possibly outside the EU) — only if you use a guide yourself: what you fill in goes to TypeSafe to be judged. For the Explainer, TypeSafe checks every sentence of the answer against the source. Leave out names, addresses and other personal data; they aren't needed.
- Anthropic and Voyage AI (US) — help rank the news. They get public news titles and summaries; for searching by meaning also your search query (only if the ordinary search yields little) and, of every book tip and every project, only the title, author and genre or category, without who posted them. If you test an investment thesis in the radar, your thesis goes with the judged data to Anthropic for a written summary. If you ask the Explainer a question, or an ordinary question (not a dispute) to the Legal guide, that question goes to Voyage (to find fitting passages) and with those passages to Anthropic (to write the answer). If you ask the guide something, what you filled in (your question, the options, the criteria and the context) goes to Anthropic, which writes the outcome. Never bar messages or private messages.
- OpenAI (US) — only if the administrator turns the voice on: the paper of the day, the title, summary and key points of an article and the macro explanation go as text to OpenAI to be turned into speech (once per text; we keep the audio on the server for up to thirty days). Those are texts of the site itself, never what you typed, and without who listens.
- Tiingo and the SEC (US) — prices, news and company figures for the Ticker radar. We only pass on tickers, no member data.
- FRED (Federal Reserve Bank of St. Louis, US) — macroeconomic series for the macro page. We only request series names, no member data.
- News sites and Open Library — images for the news and book covers are fetched by our server, which keeps them for at most 14 days. Your browser makes no connection to those sites; so they don't see your IP address. For the reading time and the key points, our server also fetches the text of an article (the news site only sees our server); we don't keep the text itself, only the word count and the key points. For the key points, a piece of that public text goes to Anthropic. If you scan a book's barcode in the iPhone app, our server asks Open Library for the title and author of that ISBN (only the number).
We sell nothing and pass nothing on outside these services, unless the law obliges us to.
How long do we keep it?
| What | How long |
|---|---|
| Your account and contributions | Until you delete them (or your account). When deleting you choose: everything gone, or your bar messages stay anonymously ("former member"). |
| Private messages | Until the sender deletes their message (then it is gone for both of you, with the photo or file), until you remove a received message for yourself, or until either account is deleted. |
| Guest accounts | Deleted automatically 30 days after the end of the guest access |
| Login sessions | At most 30 days (administrator sessions 7 days); logging out or changing your password ends them right away |
| Links for password recovery and email confirmation | 1 to 24 hours, and usable only once |
| Invitation links | Until they are used or expired (max. 30 days), then erased |
| News articles and their images | 14 days |
| Server log (with IP addresses) | At most 30 days |
| Security log | 90 days, also after an account is deleted (so abuse can still be looked into) |
| Backups | Encrypted: only the administrator can open them. Of the database one copy per hour (2 days), per day (a month) and per month (a year): what you erase therefore disappears from the backups at the latest after a year. Photos and files that are gone from the site disappear from the backup the following night. |
| What you fill in in a guide | Not kept |
Cookies and storage on your device
We only use cookies that are strictly necessary for logging in and security. No consent is needed for those, so no cookie banner either. No advertising, tracking or statistics cookies.
| Name | What for | How long |
|---|---|---|
__Host-stamkroeg_sessie | Staying logged in | 30 days, or until you log out |
stamkroeg_2fa | The second step of logging in (code from your app) | 5 minutes |
stamkroeg_toestel | Recognising that you logged in here before, so an attacker can't block your name | 1 year |
__Host-stamkroeg_stam | Staying in as a regular of a café | 1 year, extended when you visit; or until you log out |
__Host-stamkroeg_admin | Only for the administrator | 7 days |
stamkroeg_in | Without content ("1"): after logging out, the back button no longer shows pages from your session | As long as you are logged in |
taal | The language you chose (nl, fr, en) | 1 year |
push-sid (local storage) | Remembering whether this device already passed on its notification subscription | Until you erase it |
| iPhone app: session key (in your iPhone's keychain) | Staying logged in to the app; the same session also opens the site's pages inside the app | 90 days after you last used the app, or until you log out |
| iPhone app: Spotlight and your latest searches (only on your iPhone) | Finding books, projects, stocks on the radar, members and your own analyses through Spotlight (not your analyses when the app is locked with Face ID), and your latest searches in the app. Never messages. | Until you log out |
The app on your home screen only keeps the "no connection" page, never your messages.
Security
Encrypted connection (https), strongly hashed passwords, optional two-step verification, protection against password guessing, a warning if your email address changes, "log out everywhere" on your account page, and access to photos and private messages only for those allowed to see them. If something does go wrong with your data (a data breach with a risk for you), we report it to the Data Protection Authority and to you, as the GDPR prescribes.
Your rights
- Access and portability: download all your data as a file via Profile & account → My data.
- Rectification: adjust your profile and email address yourself, or ask the administrator.
- Erasure: delete your account yourself via Profile & account.
- Withdrawing consent: turn off notifications, erase your email address or profile photo; that is always possible, without consequences for what happened before.
- Restriction and objection: contact the administrator. We answer within a month.
- Complaint: you can always lodge a complaint with the Data Protection Authority (Rue de la Presse 35, 1000 Brussels).