Privacy Policy

Information we collect

You can browse financial statements, valuation metrics, SEC filing data, and research on StockData without creating an account. If you register for an optional free account, we collect your name (shown as your display name), your email address, and your password, which is stored in hashed form. We also store your email verification status and, if you enable optional two-factor authentication, your time-based one-time password (TOTP) settings. If you contact us or send data corrections to [email protected], we receive your email address and message.

When you sign in, the site sets a first-party session cookie with the prefix sd to maintain your session, and we record the IP address and browser user agent of each signed-in session. The site also uses your browser's local storage for display preferences, such as your light or dark theme, chart settings and drawings, and table layout choices; this data stays in your browser and is not sent to us. In addition, our server logs may record your IP address and browser user agent string for security purposes when you access the site. We do not use any third-party analytics or advertising tracking at present.

How we use information

We use account data to create and maintain your optional account, show your display name, verify your email address, authenticate sign-ins, and support optional TOTP two-factor authentication. We send transactional emails solely for account verification and password resets. The first-party sd session cookie is used to keep you signed in, while local storage remembers your display and chart preferences. Session records and server logs containing IP addresses and user agents are used to protect website security and prevent abuse.

Legal bases for processing

We process personal data only when we have a valid legal basis to do so. We process account details, transactional emails, and the session cookie because they are necessary to provide the account you ask for when you register or sign in. We rely on our legitimate interests to record IP addresses and user agents for security and abuse prevention, and to respond to inquiries or data corrections sent by email. Where we rely on legitimate interests, you can object as described below.

Service providers and hosting

StockData relies on a small number of service providers to operate and secure the website. The site is hosted on a server in the European Union and is delivered through Cloudflare, which provides content delivery network caching and security protection. Transactional emails for email verification and password resets are delivered through Cloudflare Email Service or Resend. Messages sent to [email protected] are received through Cloudflare Email Routing and forwarded to a mailbox hosted by Google. StockData does not sell user data and does not share information with ad networks or analytics services.

International transfers

Although our hosting server is located in the European Union, routing traffic and email through Cloudflare, our email delivery provider (Cloudflare Email Service or Resend), and our mailbox provider (Google) may involve processing data across multiple regions. As a result, your information may be transferred outside the country or region from which you access the site. We rely on standard contractual commitments and technical safeguards with our providers to protect data during cross-border transfers.

Data retention

We keep your account information, including your email address, hashed password, and TOTP configuration, for as long as your account remains active. When you delete your account, your account data is removed from our database. The session cookie and its session record expire after 30 days, or earlier when you sign out, and preferences saved in local storage stay in your browser until you clear them. Server logs with IP addresses and user agents are retained briefly for security monitoring, and messages sent to [email protected] are kept only as needed to handle your request.

Your rights and account deletion

Depending on where you live, you may have the right to request access to your personal data, ask for corrections to inaccurate data, request deletion of your data, receive a copy of your data in a portable format, and object to or ask us to restrict how your data is processed. You can delete your account yourself at any time directly from the account page, which deletes your account data immediately. You can also update your account settings or clear cookies and local storage in your browser at any time. To exercise your rights of access, correction, deletion, or objection by email, contact us at [email protected].

If you are in the European Economic Area, the United Kingdom, or another region with data protection laws, you also have the right to lodge a complaint with your local data protection authority. We would appreciate the chance to address your concern first, so please contact us at [email protected].

Children

StockData is not directed at children under the age of 16. We do not knowingly collect personal information from anyone under 16. If we learn that we have collected personal data from a person under 16, we will delete that information promptly, and anyone may report such an account to [email protected].

Changes to this policy and contact

We may update this Privacy Policy from time to time to reflect operational or legal changes. Any updates will be posted on this page with a revised effective date, which is currently October 29, 2026. If you have questions about this policy, wish to exercise your privacy rights, or want to send a data correction, please email [email protected]. We review and respond to all inquiries sent to that address.