Privacy Policy

StockValuer is a research and educational tool that publishes transparent, source-linked intrinsic-value estimates for public companies. We keep data collection deliberately minimal:

• We use privacy-friendly, cookieless analytics — no advertising or cross-site tracking.
• The only cookies we set are strictly-necessary ones for signing in and staying signed in.
• We do not sell or share your personal information, and we show no third-party ads.

This policy explains what we collect, why, and the choices and rights you have.

StockValuer (“StockValuer”, “we”, “us”) operates the website at stockvaluer.app and is the controller responsible for the personal data described here. For any privacy question or request, contact us at privacy@stockvaluer.app.

Account information. If you create an account, we store the name, email address, and a securely hashed password you provide. We never store your password in readable form.

Signing in with Google. If you choose “Continue with Google”, Google tells us your name, your email address, and the account identifier Google uses for you. We store those and nothing else — no contacts, no calendar, no Google Drive, and no access to your Google account beyond confirming who you are. If that email address already has a StockValuer account, we link the two rather than creating a second one. Using this is optional: an email and password work just as well, and Google is told nothing about you unless you click that button.

Usage and analytics. When you browse the site we collect privacy-friendly analytics through PostHog: the pages you view, in-product actions (for example clicking a call-to-action or editing a valuation assumption), your approximate country, coarse device and browser type, and page-performance metrics (Core Web Vitals). This is gathered without cookies: PostHog derives a rotating, server-side identifier from network and browser signals rather than storing anything on your device. We do not record your session, and we do not build advertising profiles. For signed-in users, these events are associated with your account so we can understand how the product is used.

Account emails. We email you only when you ask us to — currently that means a password reset link, and nothing else. There is no newsletter and no marketing email, and our messages carry no tracking pixels and no links that redirect through a third party.

Feedback. If you send feedback through the app, we store the message and its category, along with your account reference when you are signed in.

Technical logs. Our hosting providers process standard server logs (such as IP address and request metadata) to operate and secure the service. We do not store your raw IP address alongside your analytics events.

Interactive maps. When the geographic company explorer loads, your browser requests public basemap styles and tiles directly from OpenFreeMap. OpenFreeMap receives ordinary request metadata needed to deliver and secure those files. Its current policy says regular server logs are anonymized without IP addresses, but IP logging may be enabled during a security incident for up to 30 days and its delivery network, Cloudflare, may process requests. We do not send OpenFreeMap company data, ticker selections, valuation data, search text, precise user location, or account information.

The financial data on StockValuer is derived from public SEC filings and market prices. It is not personal information about you.

We use two strictly-necessary cookies, both essential to providing the service you request and both exempt from consent requirements:

• A session cookie that keeps you signed in after you log in.
• A ten-minute sign-in cookie, set only if you click “Continue with Google”. It carries the security token that ties your return from Google back to the request you started, and it is deleted as soon as you come back.

Our analytics are cookieless and set no tracking cookies, local storage, or fingerprinting identifiers on your device. Because we neither store nor read information on your device for analytics, and we run no advertising trackers, StockValuer does not require a cookie-consent banner in the EU/UK or the US.

• To provide the service — creating and maintaining your account and keeping you signed in (legal basis: performance of a contract).
• To understand and improve the product — cookieless, aggregated analytics on how pages and features are used (legal basis: our legitimate interest in a privacy-preserving way).
• To secure and operate the service — preventing abuse and diagnosing problems (legal basis: legitimate interest).
• To display the optional geographic explorer — requesting public basemap files from OpenFreeMap (legal basis: legitimate interest in providing the requested product feature).
• To respond to you — handling feedback and support requests you send (legal basis: legitimate interest).

The data controller for the personal data described in this policy is:

There is no company behind StockValuer and no data protection officer — one person answers this address, and it is the right place for any question or request below.

We share personal data only with the vendors that host and run the service, acting as our processors under contract — with one exception, noted below: the company that sells the Pro subscription is the seller in its own right, not our processor.

• PostHog — cookieless product and web analytics.
• OpenFreeMap — public basemap styles and tiles for the geographic company explorer. Requests go directly from your browser and contain ordinary network metadata, but none of our company, valuation, search, selection, or account data.
• Paddle — subscription payments, and only if you subscribe. Paddle is not our processor but the merchant of record: they are the seller of the subscription and an independent controller of the data you give them. They receive your card and billing details directly. We never see or store your card details — what reaches us is your subscription's status, renewal date and Paddle's own customer and subscription identifiers. Paddle handles that data under its privacy policy.
• Resend — sending account emails: password resets, and the valuation alerts you receive if you subscribe to Pro and add companies to your watchlist. Receives your email address when one is sent. Every alert carries a one-click unsubscribe that works without signing in. We send no marketing email and no newsletters.
• Google — sign-in, and only if you use it. Google receives the fact that you are signing in to StockValuer, and handles its own processing under Google’s Privacy Policy.
• Vercel — hosting for the website front end.
• Render — hosting for our application server.
• MongoDB Atlas — our database.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We keep account information for as long as your account is active. Analytics data is retained in aggregate for as long as it is useful for understanding product trends. When you delete your account, we remove or anonymize the personal data associated with it, except where we must retain it to meet a legal obligation.

StockValuer is operated from Bangkok, Thailand. Its data is stored and processed by providers located mainly in the United States and the European Union — the database, hosting, analytics, email and payment services listed above. If you access the service from the EU, UK, or elsewhere, your information is therefore transferred to Thailand and to those countries, with appropriate safeguards where required.

Depending on where you live, you may have rights over your personal data. If you are in the EU or UK, these include the rights to access, correct, delete, restrict, or object to our processing of your data, and to data portability. If you are a California resident, you have the right to know what we collect, to request deletion, and to opt out of the sale or sharing of personal information — though we do not sell or share it. We will not discriminate against you for exercising any of these rights.

To make a request, email privacy@stockvaluer.app. You may also have the right to lodge a complaint with your local data protection authority.

StockValuer is intended for adults and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us information, contact us and we will delete it.

We use industry-standard measures to protect your data, including encrypted connections and hashed passwords. No method of transmission or storage is completely secure, but we work to protect your information and limit what we collect.

StockValuer is for research and educational purposes only. Its valuation estimates are not financial advice and are not a recommendation to buy or sell any security.

We may update this policy as the product evolves. When we do, we will revise the “Last updated” date above, and for material changes we will provide a more prominent notice.

Questions about this policy or your data? Email us at privacy@stockvaluer.app.