Privacy Policy

Account information. When you sign in with Google, we receive your name, email address, and profile picture from Google. This information is stored in our database to identify your account.

Portfolio data. We store the investment holdings, purchase lots, transactions, cash entries, and research notes that you enter into the app. This data is associated with your account and is required to provide the core service.

Settings and preferences. We store your app preferences (theme, portfolio visibility, default chart ranges) and onboarding status.

Session data. We use session cookies to keep you signed in. These are managed by Better Auth and are required for authentication to work.

We use your data solely to provide and improve the StockTracker service:

• To authenticate you and maintain your session
• To store and display your portfolio, transactions, and research notes
• To calculate portfolio performance and analytics
• To show your public profile and trades on the community feed (only if you opt in)
• To remember your display preferences

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not serve advertisements.

Your data is stored in a hosted SQLite database provided by Turso, and the web application is hosted on Vercel. Both providers operate data centres in the United States and European Union. By using StockTracker you consent to your data being processed in these locations.

All data is transmitted over HTTPS. Access to your portfolio data is restricted to your account. We apply reasonable technical and organisational measures to protect your information, though no system is completely secure.

StockTracker integrates with the following third-party services:

• Google OAuth — used for sign-in. Your use of Google's authentication is subject to Google's Privacy Policy.
• Yahoo Finance — used to fetch real-time and historical market data. We retrieve publicly available price data; no personal data is sent to Yahoo.
• Vercel — our hosting provider, which processes request logs and may store IP addresses transiently for security and performance purposes.

If you enable Public portfolio in Settings, your name and trade history will be visible to other users on the community feed and leaderboard. You can turn this off at any time in Settings, which will immediately hide your data from the public feed.

We retain your data for as long as your account is active. If you wish to delete your account and all associated data, please contact us at contact@derekyuan.co.uk and we will process your request within 30 days.

If you are located in the United Kingdom or European Economic Area, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your account and data
• Portability — request your data in a machine-readable format
• Objection — object to certain processing of your data

To exercise any of these rights, contact us at contact@derekyuan.co.uk.

StockTracker uses only strictly necessary cookies to maintain your authenticated session. We do not use tracking cookies or third-party analytics cookies. You can delete session cookies by signing out or clearing your browser cookies, but doing so will require you to sign in again.

StockTracker is not directed at children under 13 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of StockTracker after any changes constitutes acceptance of the updated policy.

If you have any questions or concerns about this Privacy Policy, please contact: contact@derekyuan.co.uk