Your files.
Protected.

Your files are stored on secure servers operated by 1carat International Co., Ltd. Each user's data is isolated in a dedicated storage directory and cannot be accessed by other users.

• Files are stored in tenant-isolated directories
• Thumbnail images are generated server-side and stored separately
• Metadata (file names, dates, summaries) is stored in JSON format per user
• Photos are stored at original quality — no compression that alters color profiles

All data transmitted between your device and Stackey servers is encrypted using TLS (Transport Layer Security). This applies to file uploads, downloads, search queries, and all API communication.

• In transit: TLS encryption on all connections
• At rest: Files stored on server infrastructure with access restrictions
• API keys: Never exposed to the client; all AI processing happens server-side

Access to your data is strictly controlled at every layer.

• Authentication is required for all file operations
• Direct access to user data directories is blocked at the server level (.htaccess)
• API endpoints verify identity before processing any request
• Internal access to user data is restricted to essential personnel only

Your files are private by default. We do not read, index, or use your files for any purpose other than providing the Stackey service to you.

• File content is sent to our AI analysis service solely to generate names, thumbnails, and summaries for your own use
• Your files are never used to train AI models
• Your files are never shared with third parties
• Stackey does not display advertising and does not share data with advertisers

Stackey runs on professional hosting infrastructure with the following characteristics:

• Servers located in Japan (WPX hosting / Cloudflare CDN)
• CDN and DDoS protection via Cloudflare
• Regular server-level security updates
• Backups maintained for disaster recovery

The Stackey landing page and legal pages are served via Cloudflare Pages — a globally distributed, enterprise-grade CDN.

In the event of a security incident that affects your data, we will:

• Notify affected users as soon as possible
• Report to applicable authorities as required by law
• Provide a clear explanation of what happened and what data was affected
• Take immediate steps to contain and remediate the incident

To report a suspected security vulnerability, please contact us directly at hello@stackey.me with the subject line "Security Report."

For any security-related questions or to report a vulnerability: