Privacy Policy

1. Who Is Responsible

The controller responsible for data processing on this website is named in the Imprint. For any privacy question or request, use the contact form or email stoxlyanalysis@gmail.com.

2. What We Collect

Stoxly has no user accounts — you can use every analysis and tool without signing up. We process personal data only in these cases:

• Usage logs: when you run a stock or ETF analysis, we log the requested symbol together with your IP address and a timestamp. We use this to prevent abuse, apply rate limits and understand which analyses are requested. The log is capped and old entries are discarded automatically.
• Contact form: the name, email address and message you submit are stored so we can respond to your request.
• Newsletter: if you sign up, we store your email address and send you a confirmation email (double opt-in). Only after you confirm is your address added to the mailing list. You can unsubscribe at any time via the link in every email.
• Affiliate link clicks: when you click a partner link, we log the partner, the page and your IP address to count referrals. See our Affiliate Disclosure.

3. Analytics

We use Google Analytics and Vercel Analytics (including Speed Insights) to understand how the site is used and how fast it loads. Google Analytics is only loaded after you accept it in the cookie banner shown on your first visit; it sets cookies and processes usage data, and Google may transfer this data to servers outside the EU, including the United States. You can withdraw your consent at any time via the “Cookie Settings” link in the footer, which reopens the banner. Vercel Analytics works without cookies and does not track you across sites.

4. Cookies and Local Storage

Apart from the consent-gated Google Analytics cookies described above, Stoxly sets no tracking cookies. We use your browser's local storage only to remember choices you make on this device — for example your cookie banner decision, or that you dismissed the newsletter bar or the review prompt. This data never leaves your browser.

5. Service Providers

We use the following processors to run the site:

• Vercel — hosting and content delivery
• Upstash / Vercel KV (Redis) — storage for logs, contact messages and newsletter confirmations
• Resend — sending newsletter and confirmation emails
• Google — Google Analytics

Stock and ETF data is fetched from financial data providers server-side; those requests contain the requested symbol, not your personal data.

6. Legal Bases (GDPR)

We process usage and affiliate-click logs based on our legitimate interest in operating and protecting the service (Art. 6(1)(f) GDPR), contact messages to respond to your request (Art. 6(1)(b) and (f) GDPR), and the newsletter and Google Analytics based on your consent (Art. 6(1)(a) GDPR, § 25 TDDDG for cookies), which you can withdraw at any time — the newsletter by unsubscribing, analytics via the “Cookie Settings” link in the footer.

7. Retention

Usage, click and error logs are capped at a fixed number of recent entries and overwrite themselves. Contact messages are kept only as long as needed to handle your request. Newsletter data is kept until you unsubscribe; unconfirmed signups expire automatically after 24 hours.

8. Your Rights

You have the right to access, rectify, erase, port, object to and restrict the processing of your personal data, and to lodge a complaint with a data protection supervisory authority. To exercise your rights, use the contact form or email stoxlyanalysis@gmail.com.