Privacy Policy

The controller responsible for processing personal data in connection with StockMarketScore is:

Yousef Hassani Hejazi
Öcklweg 11
81369 Munich
Germany

Email: info@stockmarketscore.com
Website: https://stockmarketscore.com

This Privacy Policy applies to the StockMarketScore website, dashboard pages, public stock forecast pages, market overview pages, model performance pages, news sentiment pages, methodology pages and related legal pages.

StockMarketScore provides financial market information, AI-generated forecasts, stock scores, model performance analytics and news sentiment analysis. The public platform can currently be used without creating an account and without submitting personal financial information.

Depending on how you access and use the website, the following categories of personal data may be processed:

• Technical access data, including IP address, date and time of access, requested URL, referrer URL, browser type, operating system, device information, response status and transferred data volume.
• Usage-related data generated by normal website interaction, such as viewed pages, selected filters, stock searches and navigation actions, to the extent this information is technically processed by the website or server.
• Local browser storage values used to remember interface preferences and legal acknowledgements.
• Consent data, including whether you have accepted analytics, advertising and related technologies.
• Analytics data processed through Google Analytics, including page views, events, approximate location, device and browser information, traffic source, session information and interaction data.
• Advertising data processed through Google AdSense, including ad impressions, ad interactions, approximate location, device and browser data, identifiers and information used for ad delivery, measurement, frequency capping, fraud prevention and, where consented, ads personalization.
• Contact data, such as your email address and message content, if you contact us by email.
• Diagnostic and security data, if required to investigate technical errors, abuse, attacks or security incidents.

We process personal data only where there is a legal basis under the General Data Protection Regulation (GDPR). The main purposes and legal bases are:

• Providing the website, API responses and displayed market analytics: Art. 6(1)(f) GDPR, legitimate interest in operating an informational financial analytics platform.
• Maintaining security, preventing abuse and troubleshooting technical issues: Art. 6(1)(f) GDPR, legitimate interest in secure and reliable operation.
• Remembering necessary interface and legal acknowledgement settings in local browser storage: § 25(2) TDDDG and Art. 6(1)(f) GDPR, where the storage is necessary for a user-requested website function.
• Responding to email requests: Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR if the request relates to a contractual or pre-contractual matter.
• Complying with legal obligations: Art. 6(1)(c) GDPR, where applicable.
• Analytics, advertising, marketing cookies and non-essential tracking: consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG.

When you access StockMarketScore, technical access data is processed by the web server and hosting environment. This is necessary to deliver the website, provide API responses, maintain stability, detect errors and protect the service against misuse.

Server logs may include IP address, request timestamp, requested URL, referrer URL, user agent, response status and transferred data volume. Production server logs are intended to be retained only as long as necessary for operational security and troubleshooting, normally for up to 30 days, unless a longer retention period is required to investigate abuse, security incidents or legal claims.

StockMarketScore uses necessary browser storage to provide requested website functions. This includes remembering your selected color theme and storing whether you have acknowledged the privacy notice and financial risk disclaimer.

The current implementation uses local storage keys such as theme and sms_disclaimer_consent. These values are stored locally in your browser and can be deleted through your browser settings. Consent for Google advertising and related Google services may be requested and managed through Google's consent management platform where it is shown.

Under § 25 TDDDG, consent is generally required for storing or accessing information on a user device unless the storage is strictly necessary to provide a digital service requested by the user. Non-essential cookies or comparable technologies, including analytics and advertising cookies or local storage, are used only after consent, where legally required.

Google Analytics and Google AdSense may use cookies, identifiers or similar technologies. Depending on Google configuration, region and consent status, these may include analytics identifiers such as _ga or _ga_* and advertising identifiers used for ad delivery, measurement, fraud prevention, frequency capping and ads personalization.

StockMarketScore uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us understand how visitors use the website, which pages are viewed, how users navigate the platform and where technical or usability improvements may be needed.

Google Analytics may process information such as page views, events, session information, approximate location, traffic source, browser and device information, screen size, language settings and interaction data. We do not use Google Analytics to identify individual users by name.

For users in the European Union, the United Kingdom and Switzerland, Google states that Google Analytics does not log or store individual IP addresses. IP address information may be used to derive coarse location data before being discarded according to Google's technical processing.

The legal basis for Google Analytics is your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG, where consent is legally required. Google tags are configured with Google Consent Mode and start with optional analytics storage denied unless consent is provided through the applicable consent flow. You may withdraw or change consent with effect for the future through the available Google consent controls, browser settings or by deleting/blocking cookies and local storage in your browser.

StockMarketScore uses Google AdSense to display advertising. Google AdSense is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google LLC and other Google affiliates or advertising partners may also be involved in providing the service.

Google AdSense and selected ad technology providers may process identifiers, cookies, local storage information, IP address, device and browser data, approximate location, viewed pages, ad impressions, ad interactions and information about the content shown on the page. Processing may occur for ad delivery, ad measurement, reporting, frequency capping, fraud and abuse prevention, security, contextual advertising and, where you consent, personalized advertising.

Personalized advertising means that ads may be selected based on previously collected or historical information, such as prior visits to websites or apps, interests, demographic signals or other information permitted by your consent status. Non-personalized ads are not based on a user's past behavior, but may still use contextual information, approximate location, frequency capping and aggregated ad reporting.

For users in the European Economic Area, the United Kingdom and Switzerland, Google requires disclosure and consent for cookies or other local storage where legally required, and for the collection, sharing and use of personal data for ads personalization. The legal basis for personalized advertising, advertising cookies and ad measurement requiring consent is Art. 6(1)(a) GDPR and § 25(1) TDDDG. Where Google's consent management platform is displayed, you may withdraw or change consent with effect for the future through that consent interface, Google advertising controls, browser settings or by deleting/blocking cookies and local storage in your browser.

You can learn more about how Google uses information from sites and apps that use Google services at policies.google.com/technologies/partner-sites. You can manage Google advertising preferences at adssettings.google.com.

The current frontend uses Google Fonts for typography. When fonts are loaded from Google servers, your browser may transmit technical data such as your IP address, user agent and requested font files to Google.

This processing is based on our legitimate interest in a consistent and performant website presentation, Art. 6(1)(f) GDPR. If fonts are self-hosted in the future, this third-party font request will no longer be necessary.

StockMarketScore displays market data, stock metadata, AI forecast outputs, score calculations, model evaluation metrics and news sentiment information. This information concerns publicly traded companies and financial instruments, not individual users.

External market, forecast or news data providers do not receive personal visitor data from us as part of ordinary page rendering, unless a user independently follows an external link or a specific external service is integrated and disclosed in this policy.

If you contact us by email, we process your email address, message content and related metadata in order to handle and respond to your request.

Email communication may be retained for as long as needed to process the request and, where applicable, to comply with legal retention obligations or protect legitimate interests.

Personal data may be processed by technical service providers that support website hosting, infrastructure, security, maintenance, email delivery, consent management, analytics and advertising services.

Where required, such providers are used on the basis of appropriate data processing agreements under Art. 28 GDPR or another applicable legal basis.

Important recipients and service providers may include hosting and infrastructure providers, email providers, consent management providers, Google Ireland Limited for Google Analytics and Google AdSense, Google LLC and Google affiliates, and selected ad technology providers used by Google AdSense depending on your consent status and Google publisher settings.

Some external service providers, especially global technology providers, may process data outside the European Union or the European Economic Area.

Where such transfers occur, they are based on appropriate safeguards such as an adequacy decision, the EU Standard Contractual Clauses or another mechanism permitted under Chapter V GDPR.

Google services may involve processing by Google entities and infrastructure outside the European Union or European Economic Area, including the United States. Such transfers are handled according to Google's applicable data transfer safeguards and contractual arrangements.

Personal data is stored only for as long as necessary for the respective processing purpose, unless legal retention duties or legitimate interests require a longer period.

• Server logs are normally retained for up to 30 days unless needed longer for security, abuse investigation or legal claims.
• Local storage values remain in your browser until you delete them, reset browser storage or the application changes the storage version.
• Google Analytics event-level data is configured to be retained for up to 14 months where configurable in the Google Analytics property. Google may apply shorter or different periods for specific data types, including Google signals data.
• Advertising data processed by Google AdSense is retained by Google according to Google's own product settings, policies and legal obligations.
• Email communication is retained as long as needed to process the request and meet legal or evidentiary obligations.
• Consent records may be retained as long as needed to demonstrate consent or acknowledgement.

We use technical and organizational measures intended to protect personal data against unauthorized access, loss, misuse and alteration. These measures include limiting data collection to what is necessary, using secure transport where available, maintaining operational security controls and restricting access to production systems.

No internet-based service can be guaranteed to be fully secure. Users should also protect their own devices, browsers and network connections.

StockMarketScore uses automated models and deterministic scoring logic to analyze stocks, market data and forecasts. These systems do not make automated decisions about individual website users within the meaning of Art. 22 GDPR.

The displayed stock scores, forecasts and rankings are analytical content about financial instruments and are not personalized decisions about a user.

Subject to the applicable legal requirements, you may have the following rights under the GDPR:

• Right of access, Art. 15 GDPR.
• Right to rectification, Art. 16 GDPR.
• Right to erasure, Art. 17 GDPR.
• Right to restriction of processing, Art. 18 GDPR.
• Right to data portability, Art. 20 GDPR.
• Right to object to processing based on legitimate interests, Art. 21 GDPR.
• Right to withdraw consent at any time with effect for the future, where processing is based on consent.
• Right not to be subject to certain automated individual decisions, Art. 22 GDPR.

To exercise your rights, contact: info@stockmarketscore.com.

You have the right to lodge a complaint with a data protection supervisory authority. For a private operator based in Bavaria, the competent authority is generally:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
Website: lda.bayern.de

This Privacy Policy may be updated to reflect legal, technical or operational changes. The current version is available on this page.