Privacy Policy

The controller for this website is Timon Steinke, Sielberg 3, 25355 Barmstedt, Germany. You can contact us at support@stockinsights.net.

Most Stock Insights features can be used without an account. You may optionally create an account for personalized features. This policy explains which personal data is processed when you visit the website, use an account or API, or contact us.

The website is hosted and delivered by Vercel Inc. Vercel and our application process technical data such as IP address, requested URL, date and time, referrer, browser/device information, response status, and error information where required to deliver and secure the service.

The legal basis is our legitimate interest in secure, reliable, and efficient operation (Art. 6(1)(f) GDPR). Technical logs are retained only for the periods configured by the provider or required for security and troubleshooting.

Account registration and authentication are provided by Clerk. Clerk processes the information needed to create and secure your account, such as identifiers, login methods, email address, profile information, session data, and security signals according to the options you choose.

Stock Insights stores a provider-specific account identifier linked to an internal user ID in Neon PostgreSQL. This allows personalized data to be assigned to the correct account without trusting a user ID supplied by the browser. The legal basis is performance of the account service you request (Art. 6(1)(b) GDPR) and our legitimate interest in protecting accounts and data from unauthorized access (Art. 6(1)(f) GDPR).

When a Clerk account is deleted, a verified lifecycle notification is used to remove the linked Stock Insights user record and dependent personalized data, unless legal retention obligations require otherwise. You can also request deletion through the contact address above.

We use Vercel Web Analytics and Vercel Speed Insights to understand aggregated usage and measure technical performance. These services may process page and performance data together with limited technical request information.

We use PostHog server-side for a limited technical event when the contact form is submitted successfully. The event uses a randomly generated request identifier and message length; it does not include your name, email address, or message content.

The legal basis is our legitimate interest in improving the service and verifying that core functions work (Art. 6(1)(f) GDPR). You may object to processing based on legitimate interests for reasons arising from your particular situation.

To prevent automated abuse and excessive API usage, we derive a shortened SHA-256 fingerprint from the requesting IP address. The fingerprint is used only as part of a route-specific request counter in Neon PostgreSQL; the raw IP address is not stored in that counter.

Counters expire automatically after the applicable rate-limit window. Processing is based on our legitimate interest in protecting the availability and security of the service (Art. 6(1)(f) GDPR).

If you contact us, we process your name, email address, message, submission time, and limited technical security information in order to handle your request and prevent abuse. Messages are delivered through our configured email provider, currently Google Gmail unless another SMTP provider is configured.

The legal basis is Art. 6(1)(b) GDPR where your request concerns a contract or pre-contractual steps, and otherwise our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR). We retain correspondence only as long as needed to handle the inquiry and meet applicable legal retention obligations.

Watchlists and portfolio transactions are stored in your Stock Insights account when you are signed in and in local browser storage when you use the service anonymously. On first sign-in, existing local data may be moved to your account when the corresponding account area is still empty.

You can delete watchlist entries and portfolio transactions in the application. Deleting your account removes the linked account watchlist and portfolio through the account deletion process described above. Anonymous local data can be removed by clearing the site data in your browser.

Links to external services, including Buy Me a Coffee, take you to the respective provider. Their privacy terms apply once you visit or interact with those services. Stock Insights does not embed a Buy Me a Coffee widget that is required for core site functionality.

Data is shared only where necessary with service providers acting for hosting, analytics, performance measurement, rate limiting, and email delivery, in particular Vercel, Clerk, Neon, PostHog, and our email provider.

Some providers may process data outside the European Economic Area. Where required, transfers are based on an adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Subject to the legal requirements, you have rights of access, rectification, erasure, restriction, data portability, and objection. You may also lodge a complaint with a data protection supervisory authority.

You can manage core account information through the account interface. To exercise your rights or request deletion, email support@stockinsights.net. We may need information to verify your identity before responding.