Privacy Policy
Privacy Policy
Last updated: 30.10.2026
Welcome to Sticks.
We respect your right to privacy and are committed to protecting your personal data in accordance with the European Union General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
This Privacy Policy explains how we collect, use, store and protect your personal data when you use the Sticks website and its related services.
1. Who is the data controller
The data controller is the owner and operator of the Sticks website, responsible for processing personal data on the sticks.land platform.
For questions concerning the processing of personal data, you may contact us through the Contact page or by emailing support@sticks.land.
2. What data we collect
Depending on how you use the website, we may collect the following data:
• Registration data
• name;
• email address;
• telephone number;
• password (stored in a protected form).
• Profile data
• photograph;
• profile description;
• location;
• interface language;
• notification settings.
• Advertisement data
• title;
• description;
• photographs;
• category;
• price;
• item characteristics;
• advertisement change history.
• Payment data
When paid services are used, we may receive:
• payment identifier;
• amount;
• currency;
• payment status;
• payment method.
We do not store bank card details.
Payments are processed by the relevant payment service providers, such as Montonio and PayPal.
3. Automatically collected data
When you use the website, the following data may be collected automatically:
• IP address;
• browser type;
• operating system;
• browser language;
• date and time of the visit;
• device information;
• error logs;
• user actions;
• Push Subscription ID;
• Service Worker data;
• technical cookies.
4. How we use the data
Personal data is used for the following purposes:
• user registration;
• authentication;
• verification of email addresses and telephone numbers;
• publication of advertisements;
• communication between users;
• payment processing;
• provision of paid services;
• delivery of notifications;
• fraud prevention;
• security;
• compliance with legal requirements;
• improvement of website quality and performance;
• preparation of statistics.
Depending on the specific purpose, the legal basis for processing personal data may include the performance of a contract, compliance with a legal obligation, the user's consent or the legitimate interests of the website operator, in accordance with the GDPR.
5. AI features
Where a user uses the AI assistant to create an advertisement:
• the entered text may be transmitted to an AI API provider;
• only the data necessary to generate a response is transmitted;
• the API is used to process the user's request;
• the API key is stored only on the server.
We recommend that users do not enter confidential information into the AI assistant.
6. Cookies
The website uses cookies for:
• authentication;
• storing the selected language;
• storing settings;
• operation of the cart and favourites;
• security;
• analytics;
• PWA functionality;
• Push notifications.
Users can manage cookies through the website's cookie settings and their browser settings. Disabling certain technically necessary cookies may affect the proper functioning of some website features.
7. Push notifications
With the user's consent, the browser stores a Push subscription.
It is used to send website notifications concerning:
• new messages;
• changes to advertisement status;
• expiry of an advertisement;
• payment confirmation;
• system notifications.
Users may disable Push notifications at any time.
8. Email, Telegram and WhatsApp
Sticks uses email and, where the user chooses the relevant functionality, Telegram or WhatsApp for communication and telephone number verification.
Depending on the selected features and services, we may send:
• registration and email verification messages;
• service notifications;
• notifications about new messages;
• payment notifications;
• advertisement publication notifications;
• account security notifications.
Marketing emails are sent only where an appropriate legal basis exists, including the user's consent when required.
Telephone Number Verification via WhatsApp
If a user chooses to verify their telephone number through WhatsApp, they may be asked to send a one-time verification code to Sticks's official WhatsApp Business number.
During this process, the following data may be processed:
• the user's telephone number;
• WhatsApp sender identifier;
• the verification code sent by the user;
• date and time when the message was received;
• telephone number verification status;
• technical information necessary to process the request and maintain security.
This data is used to verify ownership of the telephone number, protect user accounts and prevent fraud.
WhatsApp messages are processed through the WhatsApp Business Platform (Cloud API), provided by Meta.
WhatsApp and Meta may independently process certain information in accordance with their respective privacy policies.
Users may choose another available telephone number verification method where such an option is provided by Sticks.
9. Disclosure of data to third parties
We do not sell users' personal data.
Where necessary and supported by an appropriate legal basis, personal data may be disclosed to:
• payment service providers;
• technical infrastructure and hosting providers;
• email service providers, where such services are used;
• AI service providers when the relevant features are used;
• Meta and WhatsApp when using the WhatsApp Business API;
• Telegram when using the relevant Telegram features;
• public authorities where there is a lawful basis.
If personal data is transferred outside the European Economic Area, we comply with the applicable GDPR requirements concerning international transfers of personal data.
10. Data retention period
Personal data is retained only for as long as necessary for:
• providing services;
• complying with legal obligations;
• resolving disputes;
• protecting the legitimate interests of the website;
• maintaining information security.
After an account is deleted, personal data is deleted or anonymised unless continued retention is required by applicable law or another valid legal basis.
Data contained in backups is handled according to applicable retention and deletion requirements, taking into account the technical characteristics of backup systems and personal data protection obligations.
11. User rights
Under the GDPR, users have the right to:
• receive information about the processing of their data and access that data;
• obtain a copy of their personal data;
• correct inaccurate data;
• request deletion of personal data (the "right to be forgotten");
• request restriction of processing;
• object to processing;
• receive and transfer their data where applicable;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with a competent data protection supervisory authority.
These rights are exercised subject to the conditions and exceptions established by the GDPR.
12. Security
We implement technical and organisational measures to protect information, including:
• HTTPS;
• secure password storage;
• CSRF protection;
• XSS protection;
• protection against SQL injection;
• action logging;
• backups;
• restricted employee access;
• access controls for administrative functions.
13. Children
The website is not intended for persons under 16 years of age.
If we become aware that a child has registered without the necessary consent of a legal representative or another appropriate legal basis, we will take suitable measures, including deletion of the relevant data where required.
14. Changes to this Policy
We may update this Privacy Policy from time to time.
The current version is always published on the website. Where changes are significant, users may also be notified when required by applicable law or the nature of the changes.
15. Personal Data Deletion and Deletion Requests
Under Article 17 of the GDPR, users have the right to request the deletion of their personal data where the relevant legal conditions are met.
This procedure also applies to personal data obtained through the Sticks Verification application, WhatsApp Business API and other features provided by the Sticks platform.
15.1. How to request personal data deletion
To request the deletion of your personal data, send an email to:
support@sticks.land
Email subject: Personal Data Deletion Request — Sticks
Please include the following information in your request:
• the email address associated with your Sticks account, if applicable;
• the telephone number in international format associated with your account or WhatsApp verification, where necessary to identify the relevant data;
• whether you wish to delete your entire account and associated personal data or only specific information;
• if your request concerns WhatsApp, indicate that you wish to delete data associated with WhatsApp telephone number verification.
A deletion request may also be submitted by a person who has used Sticks's WhatsApp verification service without creating a Sticks account.
You do not need to log in to the website to submit a request if you do not have an account or can no longer access it.
15.2. What data can be requested for deletion
Depending on the request and applicable legal requirements, the following personal data may be subject to deletion:
• personal data associated with a user account and profile;
• contact information, including email address and telephone number;
• advertisements and associated personal data;
• messages associated with the user's account;
• notification and communication preferences;
• personal data processed for telephone number verification;
• WhatsApp message and verification data under Sticks's control;
• other personal data for which a valid ground for deletion exists under the GDPR.
15.3. Deletion of WhatsApp and Meta data
If you have used WhatsApp to verify your telephone number on the Sticks platform, you may request the deletion of the relevant personal data by emailing support@sticks.land.
Please provide your telephone number and specify that you wish to delete information associated with WhatsApp verification.
Sticks will review your request and delete the relevant personal data under its control where no lawful basis for continued retention exists.
Data independently processed by WhatsApp or Meta cannot be directly deleted from those companies' systems by Sticks. The processing and deletion of such data are governed by the applicable terms and privacy policies of Meta and WhatsApp.
15.4. Identity verification
To protect personal data against unauthorised deletion, we may request additional information where there are reasonable doubts concerning the identity of the person submitting the request.
We request only the additional information necessary to verify the person's identity.
Please do not send passwords, one-time verification codes or copies of identity documents unless specifically and reasonably requested through a secure method.
15.5. Timeframe for processing deletion requests
We handle personal data deletion requests without undue delay and provide information about the actions taken no later than one month after receiving the request.
Where a request is complex or we receive a large number of requests, this period may be extended by up to two additional months in accordance with the GDPR.
We will inform you of any extension and explain the reasons within one month of receiving the original request.
If we cannot fulfil your deletion request in whole or in part, we will explain the reasons and inform you of your right to lodge a complaint with a supervisory authority.
15.6. Data that may need to be retained
In certain circumstances, the right to deletion of personal data may be limited where continued retention is necessary for:
• compliance with legal obligations;
• compliance with accounting and tax record-keeping requirements;
• the establishment, exercise or defence of legal claims;
• other applicable exceptions provided for under the GDPR.
In such cases, personal data will be retained only to the extent necessary and for the period permitted or required by applicable law.
15.7. Fees for deletion requests
Personal data deletion requests are generally processed free of charge.
In circumstances permitted by the GDPR, where a request is manifestly unfounded or excessive, a reasonable fee may be charged or the request may be refused.
15.8. Right to lodge a complaint
If you believe that the processing of your personal data or the handling of your deletion request violates the GDPR, you have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) or another competent supervisory authority.
16. Contact
For questions concerning personal data processing, privacy, WhatsApp verification and data deletion, you may contact us at:
Email: support@sticks.land
Website: https://sticks.land
Personal data deletion requests can be sent directly to support@sticks.land.
Last updated: 30.10.2026
Welcome to Sticks.
We respect your right to privacy and are committed to protecting your personal data in accordance with the European Union General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
This Privacy Policy explains how we collect, use, store and protect your personal data when you use the Sticks website and its related services.
1. Who is the data controller
The data controller is the owner and operator of the Sticks website, responsible for processing personal data on the sticks.land platform.
For questions concerning the processing of personal data, you may contact us through the Contact page or by emailing support@sticks.land.
2. What data we collect
Depending on how you use the website, we may collect the following data:
• Registration data
• name;
• email address;
• telephone number;
• password (stored in a protected form).
• Profile data
• photograph;
• profile description;
• location;
• interface language;
• notification settings.
• Advertisement data
• title;
• description;
• photographs;
• category;
• price;
• item characteristics;
• advertisement change history.
• Payment data
When paid services are used, we may receive:
• payment identifier;
• amount;
• currency;
• payment status;
• payment method.
We do not store bank card details.
Payments are processed by the relevant payment service providers, such as Montonio and PayPal.
3. Automatically collected data
When you use the website, the following data may be collected automatically:
• IP address;
• browser type;
• operating system;
• browser language;
• date and time of the visit;
• device information;
• error logs;
• user actions;
• Push Subscription ID;
• Service Worker data;
• technical cookies.
4. How we use the data
Personal data is used for the following purposes:
• user registration;
• authentication;
• verification of email addresses and telephone numbers;
• publication of advertisements;
• communication between users;
• payment processing;
• provision of paid services;
• delivery of notifications;
• fraud prevention;
• security;
• compliance with legal requirements;
• improvement of website quality and performance;
• preparation of statistics.
Depending on the specific purpose, the legal basis for processing personal data may include the performance of a contract, compliance with a legal obligation, the user's consent or the legitimate interests of the website operator, in accordance with the GDPR.
5. AI features
Where a user uses the AI assistant to create an advertisement:
• the entered text may be transmitted to an AI API provider;
• only the data necessary to generate a response is transmitted;
• the API is used to process the user's request;
• the API key is stored only on the server.
We recommend that users do not enter confidential information into the AI assistant.
6. Cookies
The website uses cookies for:
• authentication;
• storing the selected language;
• storing settings;
• operation of the cart and favourites;
• security;
• analytics;
• PWA functionality;
• Push notifications.
Users can manage cookies through the website's cookie settings and their browser settings. Disabling certain technically necessary cookies may affect the proper functioning of some website features.
7. Push notifications
With the user's consent, the browser stores a Push subscription.
It is used to send website notifications concerning:
• new messages;
• changes to advertisement status;
• expiry of an advertisement;
• payment confirmation;
• system notifications.
Users may disable Push notifications at any time.
8. Email, Telegram and WhatsApp
Sticks uses email and, where the user chooses the relevant functionality, Telegram or WhatsApp for communication and telephone number verification.
Depending on the selected features and services, we may send:
• registration and email verification messages;
• service notifications;
• notifications about new messages;
• payment notifications;
• advertisement publication notifications;
• account security notifications.
Marketing emails are sent only where an appropriate legal basis exists, including the user's consent when required.
Telephone Number Verification via WhatsApp
If a user chooses to verify their telephone number through WhatsApp, they may be asked to send a one-time verification code to Sticks's official WhatsApp Business number.
During this process, the following data may be processed:
• the user's telephone number;
• WhatsApp sender identifier;
• the verification code sent by the user;
• date and time when the message was received;
• telephone number verification status;
• technical information necessary to process the request and maintain security.
This data is used to verify ownership of the telephone number, protect user accounts and prevent fraud.
WhatsApp messages are processed through the WhatsApp Business Platform (Cloud API), provided by Meta.
WhatsApp and Meta may independently process certain information in accordance with their respective privacy policies.
Users may choose another available telephone number verification method where such an option is provided by Sticks.
9. Disclosure of data to third parties
We do not sell users' personal data.
Where necessary and supported by an appropriate legal basis, personal data may be disclosed to:
• payment service providers;
• technical infrastructure and hosting providers;
• email service providers, where such services are used;
• AI service providers when the relevant features are used;
• Meta and WhatsApp when using the WhatsApp Business API;
• Telegram when using the relevant Telegram features;
• public authorities where there is a lawful basis.
If personal data is transferred outside the European Economic Area, we comply with the applicable GDPR requirements concerning international transfers of personal data.
10. Data retention period
Personal data is retained only for as long as necessary for:
• providing services;
• complying with legal obligations;
• resolving disputes;
• protecting the legitimate interests of the website;
• maintaining information security.
After an account is deleted, personal data is deleted or anonymised unless continued retention is required by applicable law or another valid legal basis.
Data contained in backups is handled according to applicable retention and deletion requirements, taking into account the technical characteristics of backup systems and personal data protection obligations.
11. User rights
Under the GDPR, users have the right to:
• receive information about the processing of their data and access that data;
• obtain a copy of their personal data;
• correct inaccurate data;
• request deletion of personal data (the "right to be forgotten");
• request restriction of processing;
• object to processing;
• receive and transfer their data where applicable;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with a competent data protection supervisory authority.
These rights are exercised subject to the conditions and exceptions established by the GDPR.
12. Security
We implement technical and organisational measures to protect information, including:
• HTTPS;
• secure password storage;
• CSRF protection;
• XSS protection;
• protection against SQL injection;
• action logging;
• backups;
• restricted employee access;
• access controls for administrative functions.
13. Children
The website is not intended for persons under 16 years of age.
If we become aware that a child has registered without the necessary consent of a legal representative or another appropriate legal basis, we will take suitable measures, including deletion of the relevant data where required.
14. Changes to this Policy
We may update this Privacy Policy from time to time.
The current version is always published on the website. Where changes are significant, users may also be notified when required by applicable law or the nature of the changes.
15. Personal Data Deletion and Deletion Requests
Under Article 17 of the GDPR, users have the right to request the deletion of their personal data where the relevant legal conditions are met.
This procedure also applies to personal data obtained through the Sticks Verification application, WhatsApp Business API and other features provided by the Sticks platform.
15.1. How to request personal data deletion
To request the deletion of your personal data, send an email to:
support@sticks.land
Email subject: Personal Data Deletion Request — Sticks
Please include the following information in your request:
• the email address associated with your Sticks account, if applicable;
• the telephone number in international format associated with your account or WhatsApp verification, where necessary to identify the relevant data;
• whether you wish to delete your entire account and associated personal data or only specific information;
• if your request concerns WhatsApp, indicate that you wish to delete data associated with WhatsApp telephone number verification.
A deletion request may also be submitted by a person who has used Sticks's WhatsApp verification service without creating a Sticks account.
You do not need to log in to the website to submit a request if you do not have an account or can no longer access it.
15.2. What data can be requested for deletion
Depending on the request and applicable legal requirements, the following personal data may be subject to deletion:
• personal data associated with a user account and profile;
• contact information, including email address and telephone number;
• advertisements and associated personal data;
• messages associated with the user's account;
• notification and communication preferences;
• personal data processed for telephone number verification;
• WhatsApp message and verification data under Sticks's control;
• other personal data for which a valid ground for deletion exists under the GDPR.
15.3. Deletion of WhatsApp and Meta data
If you have used WhatsApp to verify your telephone number on the Sticks platform, you may request the deletion of the relevant personal data by emailing support@sticks.land.
Please provide your telephone number and specify that you wish to delete information associated with WhatsApp verification.
Sticks will review your request and delete the relevant personal data under its control where no lawful basis for continued retention exists.
Data independently processed by WhatsApp or Meta cannot be directly deleted from those companies' systems by Sticks. The processing and deletion of such data are governed by the applicable terms and privacy policies of Meta and WhatsApp.
15.4. Identity verification
To protect personal data against unauthorised deletion, we may request additional information where there are reasonable doubts concerning the identity of the person submitting the request.
We request only the additional information necessary to verify the person's identity.
Please do not send passwords, one-time verification codes or copies of identity documents unless specifically and reasonably requested through a secure method.
15.5. Timeframe for processing deletion requests
We handle personal data deletion requests without undue delay and provide information about the actions taken no later than one month after receiving the request.
Where a request is complex or we receive a large number of requests, this period may be extended by up to two additional months in accordance with the GDPR.
We will inform you of any extension and explain the reasons within one month of receiving the original request.
If we cannot fulfil your deletion request in whole or in part, we will explain the reasons and inform you of your right to lodge a complaint with a supervisory authority.
15.6. Data that may need to be retained
In certain circumstances, the right to deletion of personal data may be limited where continued retention is necessary for:
• compliance with legal obligations;
• compliance with accounting and tax record-keeping requirements;
• the establishment, exercise or defence of legal claims;
• other applicable exceptions provided for under the GDPR.
In such cases, personal data will be retained only to the extent necessary and for the period permitted or required by applicable law.
15.7. Fees for deletion requests
Personal data deletion requests are generally processed free of charge.
In circumstances permitted by the GDPR, where a request is manifestly unfounded or excessive, a reasonable fee may be charged or the request may be refused.
15.8. Right to lodge a complaint
If you believe that the processing of your personal data or the handling of your deletion request violates the GDPR, you have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) or another competent supervisory authority.
16. Contact
For questions concerning personal data processing, privacy, WhatsApp verification and data deletion, you may contact us at:
Email: support@sticks.land
Website: https://sticks.land
Personal data deletion requests can be sent directly to support@sticks.land.