Privacy information

Market Atlas is an independent project. Privacy and account requests can be sent to the contact form. The recipient address is private and is not included in public page content. The operator’s full legal identity has not yet been supplied for this notice; this is an outstanding transparency item, not a claim of completed GDPR compliance.

What the app processes

• Account email, your optional display-timezone preference, authentication identifiers and login/recovery information through the authentication service. Passwords are submitted to the authentication service; do not email passwords or tokens.
• Account-linked stock and crypto watchlists, their names and ordering, and pinned benchmarks in the account database. These are saved interests, not a record of actual holdings or trades.
• Browser storage for guest watchlists, pins and display preferences, plus authentication cookies and session information. Authentication cookies are made persistent for up to 30 days; token validity is separately enforced by the authentication service.
• Requested symbols and coin identifiers for market searches and data requests. Hosting and service providers may process IP addresses, request metadata and security/operational logs.
• Contact-form name, email, reason and message, stored by the contact-form service and delivered to the operator’s private email, including information needed to handle your request.

Purposes and legal basis

Account and saved-list processing is used to provide the optional service you request (performance of that service agreement). Operational security and abuse prevention are pursued as legitimate interests, subject to your rights. Applicable legal obligations may require retention of particular information. Contact-form abuse prevention may process IP addresses and request metadata. When enabled, Cloudflare Turnstile human verification can process browser/device information and verification signals. See the verification provider’s privacy policy. No app advertising or analytics tracking integration was identified in the current source audit; this does not mean third-party infrastructure creates no logs.

Providers and international processing

Hosting, authentication, contact-form, verification and email services process information to operate the site. Account-linked lists and pins are stored in a managed database configured in the United States (Ohio). These service providers may also process information outside the EEA. The operator must verify processor agreements and applicable transfer safeguards; a US hosting region alone does not establish compliance.

Market requests are sent to data providers through the server. Company logos load from GitHub-hosted images and crypto icons from CoinLore; these direct browser requests disclose your IP address and browser request information to the image host. External news, issuer and Revolut links open third-party sites governed by their own notices. Market Atlas does not collect payment card details for the contribution link.

Retention and deletion

There is currently no automatic expiry for account-linked lists and pins. They persist until changed or deleted, or a verified account/data deletion request is processed. Deleting a watchlist does not delete your account. Guest storage remains until you clear this site’s browser data. Logging, backup and processor retention periods have not been confirmed; a complete retention schedule remains outstanding.

To request access, a copy, correction, restriction, objection or deletion of your personal data, use the contact form above with your account email. Requests are handled manually and may require proportionate identity verification. Do not send passwords, session cookies or identity documents unless specifically necessary and requested through an appropriate channel. Erasure may be limited by lawful obligations; deleting active records does not necessarily remove provider backups immediately.

Your choices and rights

Access to market research now requires a confirmed, owner-approved Premium account. Approval roles and their change timestamp/operator identifier are stored in the authentication service’s account metadata. An account is optional for public legal and contact pages. Without an email/password you cannot use account login and cross-device saved lists. You can clear guest preferences in your browser; clearing cookies can sign you out. There is no separate app marketing consent or advertising tracker in the audited implementation. If non-essential tracking is added, this notice and applicable choices must be updated before it is enabled.

Subject to applicable law you may exercise access, rectification, erasure, restriction, portability and objection rights. Where processing relies on consent, you may withdraw it.

Market screeners apply rules to instruments, not to your creditworthiness or eligibility. The app does not make a solely automated decision with legal or similarly significant effects about you. This notice describes the audited implementation and its known gaps; it is not a legal certification.