Who this applies to
This policy covers theeuropeaninvestor.eu ("the site"). It explains what data we collect from visitors and registered users, why, and what rights you have over it under the EU General Data Protection Regulation (GDPR). For who operates the site, see the Impressum.
Data we collect
- Account data. If you register, we store your username, email address, and (unless you sign in via Google) a securely hashed password. Signing in with Google stores a link to your Google account identifier instead of a password.
- Portfolio data. If you use the portfolio tracking features, we store the holdings, transactions, and tags you enter. This data is only used to power the features you're using and is never sold or shared with third parties.
- Contact form submissions. Messages sent via the contact form are emailed to us to answer your query and are not stored in a database.
- Server logs. Our web server temporarily logs visitor IP addresses as part of normal operation (e.g. security and abuse prevention). For traffic statistics, IP addresses are hashed with a salt before being stored — we do not keep a persistent, readable record of visitor IP addresses.
- Analytics. See "Cookies and analytics" below.
Cookies and analytics
We use Google Analytics to understand how the site is used, but only if you accept it in the cookie banner shown on your first visit. Nothing is loaded, and no analytics cookies are set, until you click "Accept" — if you decline, no analytics run and no such cookies are set. You can change your choice at any time by clearing your browser's site data for this domain, which will show the banner again.
Aside from analytics, we use a small amount of strictly necessary local storage to keep you logged in and to remember your cookie choice. This doesn't require consent under GDPR since the site cannot function without it.
Third parties
We use Google Analytics (Google Ireland Limited) for site analytics, and Google Sign-In if you choose to register or log in with your Google account. Outgoing emails (registration confirmations, contact form replies) are sent via Google's email infrastructure. We do not use any advertising networks, and we do not sell or share your data with data brokers.
How long we keep data
Account and portfolio data is kept for as long as your account exists. Raw web server access logs are rotated automatically and not kept indefinitely. Contact form messages exist only as an email in our inbox, subject to our normal email retention.
Your rights
Under the GDPR, you have the right to access, correct, export, or delete your personal data, and to withdraw consent for analytics at any time. To exercise any of these rights, contact us at contact@theeuropeaninvestor.eu. You also have the right to lodge a complaint with your local data protection authority.
