| Data | Where | Why |
|---|---|---|
| Watchlists ("decks") | Your browser only | So they show up next time you open the app |
| Mock trading account | Your browser only | So your paper portfolio persists |
| Custom Score selection | Your browser only | So your preferences persist |
| Tier setting (dev only) | Your browser only | Internal testing toggle |
| IP address | Cloudflare logs, brief | Standard web hosting telemetry |
| Tickers you look up | Cloudflare Worker logs, brief | So we can monitor API usage & spot abuse |
Your watchlists, mock-trading positions, comparison set, and preferences are stored in your browser's localStorage on your device. They never leave your device. We can't see them, we can't recover them if you clear your browser, and they don't sync between devices.
The Account page has an Export button that lets you download a backup file you can save anywhere you like (cloud drive, email, USB stick). The same page has an Import button to restore from a backup.
When you open a card, the app sends the ticker symbol to our Cloudflare Worker (stockdecks-api.deckster-ace-official.workers.dev) so we can fetch live price, fundamentals, news, and filings for that ticker. We log the ticker, your IP address, and the request timestamp briefly (typical web server logs, retained for short periods) so we can monitor usage and identify abuse. We do not associate this with any personal identity, because we don't have one.
The data shown in StockDecks comes from publicly available sources:
The requests to these providers are made by our Worker, not by your browser, so the providers see our server's IP — not yours.
StockDecks does not use cookies. We don't use Google Analytics, Facebook Pixel, or any third-party advertising trackers. We don't share data with advertisers because we don't have any.
If you "Add to Home Screen" on your phone (turning StockDecks into a Progressive Web App), the app caches static files via a service worker. This is standard PWA behaviour — it makes the app load faster offline. No additional personal data is collected.
Because we don't have user accounts or stored profiles, most of the rights you have under GDPR / UK GDPR / CCPA are already satisfied by the design:
For requests relating to Cloudflare's server logs (which contain your IP and the timestamps of API requests), contact us at [email protected] with enough information to identify the requests in question.
StockDecks is intended for users aged 16 or older in the EEA/UK, or 13 or older elsewhere (subject to applicable local age rules). We do not knowingly collect data from children below these ages.
Site traffic is served over HTTPS. The Worker uses Cloudflare's standard infrastructure for transport security. Because there are no user accounts, there's nothing to be breached on our side; the local data on your device is protected by whatever security mechanisms your browser and OS provide.
Material changes will be noted in the "Last updated" date below. If the changes are substantial — for example, when user accounts and payments launch — we'll surface an in-app notice.
Questions about this Privacy Policy or your data: [email protected].