Last updated: October 2026
This Privacy Notice explains how we manage your personal data. We will ensure that the information you submit to us, or which we collect (via various channels including our websites, through written correspondence, e-mails, conversations or meetings with our employees, or through any of our offices), is only used for the purposes set out in this notice.
It describes how we collect, use and process your personal data, and how, in doing so, we comply with our legal obligations to you. Your privacy is important to us, and we are committed to protecting and safeguarding your data privacy rights.
This policy applies to the StackViewer website (stackviewer.net), the StackViewer web app and the StackViewer iOS app (together, the “Service”).
StackViewer is operated by StackViewer, headquartered in Barcelona, Spain. We are the controller of your personal data for the purposes of the General Data Protection Regulation (GDPR). You can contact us at support@stackviewer.net.
A number of elements of the personal data we collect from you are required to enable us to fulfil our contractual duties to you or to others. Where appropriate, some are required by statute or other laws. Other items may simply be needed to ensure that our relationship can run smoothly.
We collect a limited amount of data from our website users which we use to help us to improve your experience when using our website and to help us manage the services we provide. This includes information such as how you use our website, the frequency with which you access our website, and the times that our website is most popular.
If you choose to join a waitlist for an upcoming plan or feature (for example, by using a “Notify me” option), we collect the email address you voluntarily provide, together with which plan you expressed interest in. We process this data on the basis of your consent, for the sole purpose of contacting you about the availability of that plan or feature and related launch information. We will not sell this data or use it for unrelated marketing. You may withdraw your consent, unsubscribe, or request deletion of your email at any time by contacting support@stackviewer.net, and we will remove it promptly.
As part of any recruitment process, StackViewer collects and processes personal data relating to job applicants. Processing data from job applicants allows us to manage the recruitment process, assess and confirm a candidate's suitability for employment and decide to whom to offer a job. The organisation is committed to being transparent about how it collects and uses that data and to meeting its data protection obligations.
If you are a client, we need to collect and use information about you or individuals at your organisation, in the course of providing our services.
We need a small amount of information from our suppliers to ensure that things run smoothly. We need contact details of relevant individuals at your organisation so that we can communicate with you. We also need other information such as your bank details so that we can pay for the services you provide (if this is part of the contractual arrangements between us).
The StackViewer website gathers Personal Data in two ways: (a) passively (for example, through our website's technology), and (b) directly (for example, when you, the website user, voluntarily provide Personal Data on various pages).
StackViewer shall only process your Personal Data for the purposes described in this Privacy Policy or as otherwise permitted under applicable law, including the General Data Protection Regulation (EU) 2016/679 of 27 April 2016 ("GDPR").
Your email address, and your name if you give it to us or your Apple or Google account shares it. If you use Sign in with Apple and choose “Hide My Email”, we only receive the private relay address Apple creates for you. Passwords are verified and stored (in hashed form) by Amazon Cognito; we do not store them ourselves. If you turn on two-factor authentication, its setup is held by Cognito.
If you connect a brokerage account, we receive your account names, holdings, balances, cash, transactions and orders so that we can show you analytics. You can also enter assets and goals manually. Depending on the broker, the connection works in one of these ways:
In every case access is read-only: we cannot place trades or move money. Access tokens and API keys are stored encrypted, used only by our servers to read your account data, never shown again and never shared. Disconnecting a broker in StackViewer deletes them, and you can also revoke access at any time in your broker’s own settings. Brokers you connect directly are not our service providers: we only read the data you allow us to, and the data they hold about you is covered by their own privacy policies.
The notes, theses, feelings and biases, trade plans, playbook rules, price alerts and goal settings you record. If you set up the Dead Man Switch, we also store the names and email addresses of the emergency contacts you add, and email them only for the purpose you configure.
If you allow notifications in the iOS app, we store a push-notification token for your device, together with its platform, so we can deliver alerts. You can turn notifications off at any time in iOS Settings. Face ID / Touch ID, where used to unlock the app, is handled by iOS on your device; we never receive biometric data.
We collect which pages and screens you view and which features you use, your device and browser type, and crash and error reports. On the website we also derive an approximate location from your IP address and may record browsing sessions, in which all text inputs and financial values are masked. The iOS app does not record your screen and has IP-based location lookup turned off. To prevent abuse we use bot protection (Cloudflare Turnstile) and rate limiting on sign-up and forms, which process your IP address and basic browser signals.
Messages you send through our contact form or by email. If you sign up through another user’s referral link, that user will see in their referral statistics that you signed up, with your email address, the date and the status.
If you choose to share a trade, we create a public link. Anyone with the link can see the trade details you shared (symbol, entry and exit dates and prices, return and chart). Shared links expire automatically after 365 days.
We do not sell your personal data, use it for advertising, or track you across other companies’ apps and websites. We do not make automated decisions that have legal or similarly significant effects on you.
Some features (for example trade analysis, strategy checks and improvement suggestions) use AI. To produce them we send relevant parts of your portfolio, trades and the notes, feelings and rules you recorded to Amazon Bedrock (running Anthropic Claude models) on AWS infrastructure. AWS states that content processed through Bedrock is not used to train its models, and we do not use your data to train AI models. AI output is for information only and is not financial advice.
StackViewer will only store your Personal Data as long as necessary to fulfill the purposes for which they were collected or – where the applicable law provides for longer retention periods – for the duration of the retention period required by law. After that, your Personal Data will be deleted.
We share personal data only with service providers that process it on our behalf and only as needed to run the Service, or where the law requires it. These are:
We do not sell personal data to anyone.
Our infrastructure is in the EU. Some providers (for example Google, Cloudflare and SnapTrade) may process limited data outside the European Economic Area. Where they do, we rely on the safeguards required by the GDPR, such as an adequacy decision or the European Commission’s Standard Contractual Clauses.
Data is encrypted in transit (HTTPS/TLS) and at rest. Brokerage access is read-only, broker access tokens and API keys are stored encrypted and used only by our servers, two-factor authentication is available, and in the iOS app Face ID or Touch ID (where your device supports it) protects your signed-in session. No system is perfectly secure; if you suspect a problem, email support@stackviewer.net.
The Service is for people aged 18 or over (see our Terms). We do not knowingly collect personal data from anyone under 18. If you believe we have, contact us and we will delete it.
In particular but without limitation, the following rights are vested in you by applicable data protection law:
You have the right to obtain at any time access to your Personal Data stored by us. If we process your Personal Data, we shall endeavour to ensure by implementing suitable measures that your Personal Data is accurate and up-to-date for the purposes for which they were collected. If your Personal Data is inaccurate or incomplete, you have the right to obtain the rectification of such data. Furthermore, you may have the right to obtain the erasure or restriction of processing of your Personal Data, for example if no legitimate business purpose exists anymore for the data processing under this Privacy Statement or applicable law and the further storage is not required by statutory storage obligations.
You may have the right to receive the Personal Data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to transmit this data to another controller.
If you have given your consent to the collection or processing of your Personal Data, you have the right to withdraw your consent at any time on a prospective basis without affecting the lawfulness of processing based on the consent before its withdrawal.
As far as we process your Personal Data on the basis of our legitimate interests pursuant to Art. 6 (1) lit. f) GDPR, you may object to processing at any time. You may find the detailed description of our processing activities and the legal basis in the sections before. If you object, we will no longer process your Personal Data unless there are compelling and prevailing legitimate grounds for the processing or the data is necessary for the establishment, exercise or defence of legal claims. If you object to such processing, we ask you to state the grounds of your objection in order for us to examine the processing of your Personal Data and decide whether to adjust the processing accordingly.
You can complain to a data protection supervisory authority — in Spain, the Agencia Española de Protección de Datos (aepd.es), or the authority in your country of residence. We would appreciate the chance to address your concern first, so please contact us.
We use cookies and browser storage on the website and web app. The iOS app does not use cookies.
You can clear or block cookies and browser storage in your browser’s settings. Blocking essential cookies means you will not be able to stay logged in. To object to analytics or session recording, email support@stackviewer.net.
We may update this policy from time to time. When we do, we will change the date at the top and, for significant changes, tell you in the app or by email.
If you have a question about this Privacy Policy or a complaint or want to know more about how your data may be used by us or would like to access or delete your data held by us or correct any inaccuracies, please email us at support@stackviewer.net and we will respond as promptly as we can, or in the time period prescribed by law, whichever is sooner.