Privacy policy

Who is responsible

The data controller is Mathis Humbert, an individual publishing this site in a personal capacity. For any question, or to exercise your rights: mathishumbert71@gmail.com.

Without an account, no personal data

If you use the site without signing in, nothing about you is stored on the servers. Your strategy settings, your level of detail and the dismissal of the intro banner live in cookies, and the simulator's portfolio settings in local storage, in your browser, and never leave it. Clearing your browser data erases them for good.

With an account

Creating an account stores your email address, your strategy settings and whether you want alerts. There is no password: we email you a one-time code each time you sign in, valid for a few minutes.

That data serves three purposes. Signing you in and carrying your settings across devices, which is the service you asked for. Emailing you the day your signal switches, which rests on your consent and can be withdrawn at any time from your account menu. And keeping the service secure, which rests on legitimate interest.

No data is sold, rented, or passed to third parties for advertising.

Cookies

The site uses no analytics, no advertising tracker and no third-party script. The only cookies set are functional: “settings” for your strategy settings, “view” for the level of detail, “intro-dismissed” for the intro banner, and Supabase “sb-” session cookies when you are signed in.

The simulator also stores a “portfolio” entry in your browser's local storage, so your capital and fees are still there on your next visit. It holds those portfolio settings only, it is never sent to the server, and it stays separate from your strategy settings.

These cookies are strictly necessary to the service you requested, which exempts them from consent under the applicable rules. That is why you will never see a cookie banner here.

Who else sees this data

Three providers are technically involved. Supabase hosts the database and handles authentication. Amazon Web Services, through its SES service, delivers the alert emails and the sign-in codes. Vercel hosts the site and logs requests for operational purposes.

Market prices come from Yahoo Finance, queried from the server. No data about you is sent to it, and your browser never contacts it directly.

Some of these providers may process data outside the European Union. Those transfers are covered by the European Commission's standard contractual clauses.

For how long

Your data is kept for as long as your account exists. Deleting the account, available as a single button from your account page, erases everything immediately and permanently. Unsubscribing from alerts does not delete the account, only the sending.

Your rights

You have the right to access, rectify, erase, port, object to and restrict the processing of your data, as well as to withdraw your consent to alerts at any time. Most of this is available directly from your account; for the rest, write to mathishumbert71@gmail.com.

If an answer does not satisfy you, you may lodge a complaint with the CNIL, the French supervisory authority, at cnil.fr.