Last updated: 28 August 2026
StackCount is operated by ROMAN VESTNIKOV PR NOVI SAD, registered in Serbia at Zeleznicka 20, Novi Sad ("we", "us").
Our role depends on the data. See section 3 — for most of what StackCount handles, the company that gave you your account decides what happens to it, and we act on that company's instructions.
Privacy contact: [email protected]
StackCount counts steel stock — round and square tube, bar, rebar and profile — from a photograph of the end of a stack. It is sold to companies under a contract.
There is no self-registration. Accounts are created by us and issued to a client organisation. A person who installs the app without an account issued to them cannot use any of its functions.
StackCount is sold to companies. If you are using it at work, your employer is the data controller — it decided to use StackCount, it asked us to create your account, and it decides what its people photograph and how long the results are kept. We process that data on your employer's instructions, as its processor.
This matters for you in a practical way: questions about why your employer uses StackCount, and requests to see or delete work data, go to your employer first. We help them answer; we do not decide those questions ourselves.
There are narrow purposes for which we decide, and for those we are the controller:
We do not use your photographs to train our models, and we do not use anything in StackCount for advertising or marketing.
| Data | Why | Required? |
|---|---|---|
| Account name — the username we issued | To sign you in and to link your work to your organisation's subscription | Yes |
| Photographs you take or select for counting | The photograph is what is counted. Online counting sends it to our server, where it is stored so the result can be opened again later | Yes, for online counting |
| Records of each count — time, cross-section, confidence threshold, resulting number, image size, processing time | To show the history of results, and to understand how much the product is used | Yes |
| Feedback — a rating and an optional free-text comment | To understand where counting is inaccurate and improve it | No — leaving feedback is voluntary |
| What you type into the contact form — a name or company, an email address or phone number, and an optional message | To answer you, and to prepare an offer or a contract if that is what you asked for. The legal basis is your request itself: steps taken at your request before entering into a contract | Only the name and the contact. The message is optional |
| Fault reports — time, app version, type and description of the fault, phone model, Android version | To find and fix defects | Yes |
Fault reports never contain photographs, detection results, passwords or account names. This is a deliberate constraint on what the app is allowed to record, not a promise about ordinary practice.
StackCount does not collect location, contacts, calendar, messages, financial or health data, browsing history, advertising identifiers, or any device identifier.
The app contains no advertising, no analytics services and no third-party tracking libraries of any kind. Nothing in it reports to anyone but us.
The website is the same. stackcount.app carries no cookies, no analytics and no visitor counter, which is why you were never asked to accept anything. The one exception is the contact form: sending it records your IP address alongside the message, to limit how often the form can be submitted from one place. That address is kept and deleted together with the message itself, and is used for nothing else.
StackCount can count entirely on the phone, with no internet connection. In that mode the photograph does not leave the device unless you choose to submit the result together with feedback.
Your history of counts and the photographs behind them are stored on the phone itself. They are not backed up to us or to anyone else. Uninstalling the app deletes them permanently, and they cannot be restored.
Our server is located in Helsinki, Finland — inside the European Union. Photographs and account data are stored there.
Traffic to the server passes through Cloudflare, which acts as a network proxy. Your photographs are not stored by Cloudflare, but connection metadata — including IP addresses — is handled by Cloudflare's network, which operates in both Europe and the United States. Hosting is provided by Hetzner.
We work from Serbia. The data stays on the server in Finland, but we reach it from outside the European Union in order to run and support the service. Serbia is not covered by a European Commission adequacy decision, so for client organisations this access is governed by the European Commission's Standard Contractual Clauses in the agreement we sign with them.
We do not sell, rent or share your data with third parties. No advertiser, data broker or analytics provider receives anything.
Photographs and counts are visible to us as the operator of the service, and to the account holders within your own organisation.
Photographs and counting records are kept for the duration of your organisation's subscription and for 90 days after it ends, after which they are deleted. Your organisation may instruct us to keep them for a shorter time, or to delete them sooner. Fault reports are kept for 90 days.
Messages sent through the contact form are kept for 12 months from the day you send them, and then deleted. Longer than the rest on purpose: a warehouse that asked about StackCount in spring often comes back in autumn, and finding that we had already erased the conversation would be worse for both sides. If you would rather we forget sooner, say so and we will.
We will delete data earlier at your request — see below.
If you are in the European Union, the GDPR gives you the right to obtain a copy of your data, to have it corrected, to have it deleted, to restrict or object to its processing, and to receive it in a portable form.
If you use StackCount at work, address these to your employer first — it is the controller for that data, and we are required to help it answer you. For anything where we are the controller (section 3), or if you cannot reach your employer, write to [email protected]. We respond within 30 days.
You also have the right to complain to your national data protection authority.
There is no self-registration in StackCount, and therefore no self-service account deletion. To have an account and its data removed, write to [email protected] from the address associated with your organisation. We delete the account, its photographs and its counting records within 30 days and confirm when it is done.
If you only wrote to us through the form and never had an account, that is simpler: reply to our email, or write to the same address, and we delete the message and everything stored with it. You do not need to give a reason, and asking costs you nothing — we are not going to argue about it.
All traffic between the app and our server uses HTTPS. The release build of the app refuses unencrypted connections outright. Session and licence tokens are stored on the phone encrypted with a key held in the device's hardware-backed keystore.
StackCount is a tool for industrial use and is not directed at children. We do not knowingly collect data from anyone under 18.
If we change this policy we will update the date at the top and, for changes that affect how your data is handled, notify the organisations that hold subscriptions.