Privacy policy
Controller
Data controller: [name / company], [tax ID], [address], contact: [privacy email].
Data we process
Only what is strictly necessary. If you create an account: email, username, password hashed with Argon2id (we have none if you sign in with Google, Facebook or X), language, favourite stocks, alert preferences and when you accepted the terms and, if you chose to, marketing emails. If you sign in with Google, Facebook or X we only receive your id on that service and, if it shares it, your email; never your password or contacts. If you subscribe to the newsletter: email and language. We never store card data. IPs of affiliate-link clicks are stored only as an irreversible hash.
Purpose and legal basis
Providing the service you request, including email alerts about new reports on your favourites, which you can turn off at any time (contract); sending the newsletter (consent, double opt-in); sending marketing emails only if you tick that box (consent, revocable from your profile); and showing ads (consent via the cookie banner).
Retention
For as long as you keep your account or subscription. You can unsubscribe or delete your account at any time; deletion is permanent.
Processors and transfers
Hosting by OVHcloud (EU). Content delivery and protection: Cloudflare. Email delivery: Brevo (France, EU). Social sign-in, only if you use it: Google, Meta (Facebook) and X, each under its own privacy policy. Advertising: Google (only with your consent).
Your rights
Access, rectification, erasure, portability (we send you your data in a reusable format), restriction and objection by writing to [privacy email]. You may lodge a complaint with the Spanish Data Protection Agency (aepd.es) or your local authority.
Security
TLS encryption for all traffic, Argon2id password hashing, two-step verification (optional for you, mandatory for staff), HttpOnly session cookies and databases not exposed to the Internet.