Privacy Policy

• Company name: Gáspár Ákos e.v.
• Registered address: 2649 Dejtár, Zrínyi utca 2/A, Hungary
• Sole trader registration number: 61672192
• Tax number: 91665357132
• E-mail: gasparakos116@gmail.com
• NAIH registration: not applicable — NAIH's mandatory data-processing register was abolished when the GDPR took effect in 2018.

The Service processes the following data about the User:

• The email address given at registration and a password stored encrypted.
• The User's own content created within the Service: saved chart layouts, chart drawings, watchlist.
• For a paid subscription, the subscription ID and billing status managed by Stripe — the Provider never sees or stores card details.
• Basic technical log data (e.g. login timestamps) needed to operate the service securely.

• Creating an account and identifying the User — performance of a contract (GDPR Art. 6(1)(b)).
• Billing the subscription fee — performance of a contract, and a legal obligation (invoicing).
• Storing the User's own content (drawings, layouts, watchlist) — performance of a contract.
• Operating the service securely and preventing abuse — legitimate interest (GDPR Art. 6(1)(f)).

The Provider processes account-linked data for as long as the account exists, until deleted by the User. Billing and payment data must be retained for the period required by accounting and tax law (typically 8 years), regardless of account deletion.

The Service uses the following third parties, acting as independent controllers or as processors:

• Supabase, Inc. — storage and authentication of user accounts, and operation of the database (saved layouts, drawings, watchlist).
• Stripe, Inc. — subscription management and payment processing; card details are handled exclusively by Stripe.
• Vercel Inc. — the Service's cloud hosting provider.
• Binance — source of publicly available market price data. Charts connect to Binance's public data stream directly from your browser, so Binance technically sees your IP address; the Service sends it no other information about you.
• Symbol logo providers (jsDelivr, Financial Modeling Prep, flagcdn.com) — your browser loads logo images directly from these content networks, so they technically see your IP address.

The Service uses strictly necessary session cookies set by Supabase Auth to keep you signed in. The Service does not currently use any third-party marketing or tracking cookies. Beyond that, your language choice is kept in a cookie (NEXT_LOCALE), and display preferences — light/dark theme, chart settings, and whether you have seen the welcome tour — are kept in your browser's local storage. These exist only so the site works the way you set it up; they are not used for tracking or advertising, which is why no consent banner is shown.

Under the GDPR, the User may request:

• access to their data,
• correction of their data,
• deletion of their data (by deleting the account, subject to the legal retention obligation noted in section 4),
• restriction of, or objection to, processing,
• data portability (receiving their own content — drawings, layouts — in a machine-readable format).

The User may seek redress from the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, naih.hu) or the competent court.

The Provider stores passwords encrypted, applies row-level access control (Row Level Security) to the database — so a User can only access their own data in the Supabase database — and all communication with the Service takes place over an encrypted (HTTPS) channel.

For questions about data processing, or to exercise the rights above, the User may contact the Provider at the contact details given in section 1.