Privacy Policy

The controller for this website is Timon Steinke, Sielberg 3, 25355 Barmstedt, Germany. You can contact us at support@stockinsights.net.

Stock Insights can be used without an account. This policy explains which personal data is processed when you visit the website, use its APIs, or contact us.

The website is hosted and delivered by Vercel Inc. Vercel and our application process technical data such as IP address, requested URL, date and time, referrer, browser/device information, response status, and error information where required to deliver and secure the service.

The legal basis is our legitimate interest in secure, reliable, and efficient operation (Art. 6(1)(f) GDPR). Technical logs are retained only for the periods configured by the provider or required for security and troubleshooting.

We use Vercel Web Analytics and Vercel Speed Insights to understand aggregated usage and measure technical performance. These services may process page and performance data together with limited technical request information.

We use PostHog server-side for a limited technical event when the contact form is submitted successfully. The event uses a randomly generated request identifier and message length; it does not include your name, email address, or message content.

The legal basis is our legitimate interest in improving the service and verifying that core functions work (Art. 6(1)(f) GDPR). You may object to processing based on legitimate interests for reasons arising from your particular situation.

To prevent automated abuse and excessive API usage, we derive a shortened SHA-256 fingerprint from the requesting IP address. The fingerprint is used only as part of a route-specific request counter in Redis; the raw IP address is not stored in that counter.

Counters expire automatically after the applicable rate-limit window. Processing is based on our legitimate interest in protecting the availability and security of the service (Art. 6(1)(f) GDPR).

If you contact us, we process your name, email address, message, submission time, and limited technical security information in order to handle your request and prevent abuse. Messages are delivered through our configured email provider, currently Google Gmail unless another SMTP provider is configured.

The legal basis is Art. 6(1)(b) GDPR where your request concerns a contract or pre-contractual steps, and otherwise our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR). We retain correspondence only as long as needed to handle the inquiry and meet applicable legal retention obligations.

Portfolio and watchlist information is stored locally in your browser and is not stored in a Stock Insights user account. You can remove it by clearing the site data in your browser.

Links to external services, including Buy Me a Coffee, take you to the respective provider. Their privacy terms apply once you visit or interact with those services. Stock Insights does not embed a Buy Me a Coffee widget that is required for core site functionality.

Data is shared only where necessary with service providers acting for hosting, analytics, performance measurement, rate limiting, and email delivery, in particular Vercel, PostHog, our Redis provider, and our email provider.

Some providers may process data outside the European Economic Area. Where required, transfers are based on an adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Subject to the legal requirements, you have rights of access, rectification, erasure, restriction, data portability, and objection. You may also lodge a complaint with a data protection supervisory authority.

To exercise your rights, email support@stockinsights.net. We may need information to verify your identity before responding.