Authentication
Firebase Authentication handles account sign-in and identity tokens. FamStak does not store your account password in its application database.
Trust is a product feature
FamStak is designed to hold practical family information without pretending every security question has a one-line answer. This page describes the protections and controls currently implemented.
Firebase Authentication handles account sign-in and identity tokens. FamStak does not store your account password in its application database.
Authenticated API routes check the current user and apply owner, family, visibility, or explicit-sharing rules before returning household content.
Stripe handles checkout, saved payment methods, invoices, cancellation, and billing changes. FamStak stores subscription status and Stripe account references—not complete card numbers.
Bills and income are entered by the household. FamStak does not connect to bank accounts or request online-banking credentials for these planning features.
The production site uses HTTPS and browser security headers, including frame restrictions, content-type protections, and a restrictive permissions policy.
Signed-in users can export their FamStak data as JSON. Free accounts can be permanently deleted in-app; Pro users cancel billing first.
Optional Google Analytics for Firebase and linked advertising conversion measurement remain off until consent. Global Privacy Control is honored by the consent experience.
Calendar subscriptions accept public HTTPS or webcal sources, reject private-network destinations, recheck redirects, and limit downloaded calendar size.
FamStak does not currently claim two-way Google, Apple, or Outlook account synchronization or automatic payment execution. Bills and income stay household-entered, with no bank connection required. ICS/webcal subscriptions bring updates from an authorized source into FamStak, while the private FamStak feed is read-only in another calendar app.
Use in-app Privacy & Data settings for export or deletion, or contact the support address for account and privacy assistance.