Privacy

This notice explains how Stocklytics Inc. handles personal data when you use stocklytics.com. Stocklytics Inc. is the data controller. The company is incorporated in the Marshall Islands. We wrote this notice with UK GDPR and the Data Protection Act 2018 in mind, because the site is aimed at a UK audience as well as readers elsewhere.

What we collect

Account: email address, a password hash if you set a password, and, if you sign in with Google, the email address and account identifier Google sends us.
Session: a cookie named sl_session so you stay signed in. It is HttpOnly, SameSite=Lax, and lasts about 30 days.
Library: watchlists, saved screens, notes, strategies, and similar items you save to an account.
Alerts: the email address you give us, the rules you set, and whether you confirmed the address. We keep a short rate-limit record, including a network address, for about an hour so sign-up cannot be flooded.
On your device: theme, sidebar layout, screener columns, and unsynced watchlists, paper trades, or alert copies stored in the browser so the tool remembers what you did.
Cookie choice: your accept or reject decision, stored in the browser under sl_cookie_consent.

We do not ask for payment-card details on this site. We do not sell personal data.

Why we use it

Contract: to run the account, library, and alerts you asked for.
Legitimate interests: to keep the site secure, limit abuse, and fix faults. The rate-limit record is part of that.
Consent: for analytics cookies. We do not set any unless you accept them. You can reject them and still use the site.

Who else sees it

Other organisations process personal data for us only in these categories. We do not name the vendors.

Hosting, to serve the site.
Analytics, only if you consent. We do not run an analytics tool today.
Transactional email, to send alert confirmations and digests you asked for.
Payment processing. This is not currently active.

Market prices and company figures come from a market-data provider. We send a ticker when we request a quote, not your account email.

Where it is processed

Stocklytics Inc. is in the Marshall Islands. Hosting and email may be in other countries. Where UK GDPR requires a transfer tool, that is how we send data outside the UK. For the detail, use the contact form.

How long we keep it

Account and library: until you delete the account or ask us to erase it.
Alerts: until you unsubscribe or ask us to delete the address.
Session cookie: about 30 days, or sooner if you log out.
Rate-limit records: about an hour.
Cookie choice: until you change it or clear site data in your browser.

Your rights

If UK GDPR applies to you, you can ask for a copy of your data, a correction, erasure, restriction, or a portable copy, and you can object to processing based on legitimate interests. You can withdraw cookie consent at any time from Cookie settings in the footer. You can complain to the Information Commissioner's Office (ico.org.uk). We do not publish a data-protection officer.

To use one of these rights, use the contact form and say which right you want. We may need to confirm the email matches the account.