Privacy Policy

Last updated: June 2026

1. Introduction

The data controller is Ai Stocks Map (contact: [email protected]).

AI Stocks Map ("we", "us") is an informational platform that provides data visualization of publicly traded companies in the AI sector. We do NOT provide financial advice, investment recommendations, or trading suggestions.

2. Data We Collect

2.1 Account Data

When you create an account, we securely store your email address and a cryptographically hashed version of your password (using PBKDF2) in our cloud database (Cloudflare D1).

Legal basis: Contractual necessity (Art. 6(1)(b) GDPR) — processing is necessary for the performance of the contract with you (account creation and management).

2.2 User Preferences

We store your favorites, portfolio entries, price alerts, and notes in our cloud database, linked to your account.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — processing is necessary to remember your preferences and provide a personalized experience.

2.3 Consent Preferences

We store your cookie/localStorage consent choice locally in your browser.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — storing consent preferences is necessary to comply with your choices.

2.4 Analytics Data

When you consent to analytics cookies, we collect anonymized usage data (page views, session duration, device type) through Google Analytics.

Legal basis: Consent (Art. 6(1)(a) GDPR) — analytics data is only collected after you provide explicit consent via our cookie banner.

3. Data Storage

All user account data is stored securely using Cloudflare D1 (SQL Database) in the cloud. We use industry-standard encryption for sessions (JWT tokens) and password hashing.

4. Third-Party Services

• Finnhub API: Used for real-time market data. Subject to Finnhub's privacy policy.
• Google Fonts: Font files loaded from Google's CDN. Subject to Google's privacy policy.
• Google Analytics (G-SZK93FFQPG): Used for analytics and usage tracking. Only activated after user consent. Subject to Google's privacy policy.
• Cloudflare: Our hosting and database provider. Standard web server logs may be collected.
• Resend: Used to send verification and password reset emails.
• ApeWisdom: Used for social sentiment data aggregated from Reddit. Subject to ApeWisdom's privacy policy.
• DeGate: Decentralized exchange used for on-chain trading links. Subject to DeGate's privacy policy.

5. International Data Transfers

Some of the third-party services we use may transfer your data outside the European Economic Area (EEA), including to the United States. This applies to services such as Google Analytics, Cloudflare, and Finnhub.

These transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission and/or adequacy decisions where applicable. Cloudflare acts as a data processor under their Data Processing Addendum (DPA).

6. Cookies & Local Storage

We use essential localStorage and cookies for:

• User authentication sessions (JWT tokens)
• Caching market data to improve performance
• Consent preferences
• UI preferences

When you consent to analytics cookies via our cookie banner, the following Google Analytics cookies are set:

• _ga — Google Analytics client ID. Expiry: 2 years.
• _gid — Google Analytics session ID. Expiry: 24 hours.
• _ga_SZK93FFQPG — GA4 session state. Expiry: 2 years.

These analytics cookies are only set after you give explicit consent via the cookie banner. You can withdraw your consent at any time by clearing your cookies or using the cookie settings.

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

• Right of Access (Art. 15): You have the right to obtain confirmation of whether your personal data is being processed and to access that data. You can view all your data in your Account settings.
• Right to Rectification (Art. 16): You have the right to correct inaccurate personal data. You can edit your preferences at any time from your Account settings.
• Right to Erasure (Art. 17): You have the right to request deletion of your personal data. You can delete your account and all associated data from Account settings.
• Right to Restrict Processing (Art. 18): You have the right to request restriction of processing of your personal data under certain conditions.
• Right to Data Portability (Art. 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format (JSON). You can export all your data from Account settings.
• Right to Object (Art. 21): You have the right to object to processing of your personal data based on legitimate interest.
• Right to Withdraw Consent (Art. 7(3)): Where processing is based on consent (e.g., analytics cookies), you have the right to withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your EU Member State of residence if you believe your data is being processed unlawfully.

To exercise any of these rights, contact us at [email protected].

8. Data Retention

We retain your data for the following periods:

• Account data: Retained until you delete your account. Upon deletion, all account data is permanently removed from our database.
• Analytics data: 14 months (Google Analytics default retention period).
• localStorage preferences: Retained locally in your browser until you clear your browser data.
• Server logs: 30 days, after which they are automatically purged.

9. Children's Privacy

This service is not directed to individuals under 18.

10. Financial Disclaimer

AI Stocks Map is strictly an informational resource. We do NOT provide financial advice, investment recommendations, or trading signals. All market data is provided by third-party sources and may be delayed. Past performance does not guarantee future results. Always consult a licensed financial advisor before making investment decisions.

11. Changes

We may update this policy. The date at the top reflects the latest revision.

12. Contact

For privacy inquiries, contact us at [email protected].