Legal

Privacy Policy

Last updated: October 25, 2026

        Summary: Champion Scan collects the account, portfolio, and watchlist data needed to run the service. Sign-in is handled by Clerk. We do not sell your personal data. Optional analytics run only if you accept cookies. You can request deletion of your account at any time.
    

1. Who We Are

Champion Scan ("we", "our", "the service") is the party responsible for personal data collected through this service. Champion Scan is a stock screening and analysis tool operated for educational purposes. It is currently in beta. The service is operated from Israel, and this policy describes our practices for users in Israel, the European Economic Area, the United Kingdom, and the United States.

Privacy requests go to [email protected]. That address is the contact for access, correction, and deletion requests.

2. What Data We Collect

We collect the information needed to provide the service:

Account data: Email address and a Clerk user identifier. Sign-in is handled by Clerk. We do not store your password in plain text. Older accounts may still have a one-way password hash on our server.
Portfolio and watchlist: Symbols, positions, trades, and notes you choose to save in the app.
Service messages: If we send an email verification code or a service notice, we process the email address and the fact that the message was sent.
Usage and security logs: Page requests, timestamps, and IP addresses, used to operate and protect the service. We keep these logs for up to 30 days.
Necessary cookie: A session cookie (__session) keeps you signed in. It is required for the account to work.
Analytics, only with consent: If you click Accept on the cookie banner, we load Google Analytics 4. Your choice is stored in this browser under cs_analytics_consent. If you click Decline, analytics cookies are not set.

We do not collect payment information, phone numbers, or precise GPS location.

Google Fonts: Pages load fonts from fonts.googleapis.com. Your browser sends your IP address to Google for that request. This is for visual presentation, not advertising. You can block it with a browser extension.

3. How We Use Your Data

Creating and securing your account.
Saving your portfolio, watchlist, and trades between sessions.
Sending service messages you need in order to sign in or keep the account working, such as an email verification code.
Diagnosing technical problems and protecting the service.
Understanding aggregate use of the site, only if you accept analytics cookies.

We do not sell your personal data, and we do not use it for advertising. Scores and signals in the product are market calculations. They are not automated decisions that produce legal or similarly significant effects about you.

4. Legal Basis for Processing (EU/GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

Contract: Account, portfolio, and watchlist data are processed to provide the service you signed up for.
Legitimate interests: Security logs and font delivery, limited to operating a reliable service.
Consent: Google Analytics 4 runs only after you accept the cookie banner. You can refuse, and you can change your mind by clearing this site's data in your browser and choosing again.

5. Who Receives Data

We do not sell, rent, or trade your personal data. These providers process data so the service can run:

Hetzner Online GmbH (Finland, European Union): hosts the application and the database.
Clerk (United States): handles registration, sign-in, and the session cookie. Clerk receives your email address and authentication data.
Google (United States): receives your IP address when the browser loads Google Fonts. If you accept analytics, Google Analytics 4 also receives usage events.
Email delivery: a mail server we operate sends verification codes and service messages to the address you gave us.
Legal obligations: we may disclose data if a law or a binding order requires it.

Market prices are requested by our server from third-party market data providers. Those requests are for symbols, not for your name or your portfolio as a profile sold to advertisers.

Where data is processed in the United States, that is an international transfer. For users in the EEA or the UK, we rely on the provider's transfer terms, including standard contractual clauses where those laws require them.

6. Market Data

Stock prices, fundamentals, and related financial data are sourced from third-party market data providers. We cache that market data on our server so charts and scan results can load without a live request on every page view. It is shown for informational and educational purposes. We do not resell it.

7. Data Retention

Account data is retained while your account is active.
Server logs are deleted after 30 days.
If you delete your account, all personal data is removed within 14 days.

8. Your Rights

You can ask us to do the following. We respond within 30 days.

Access: Receive a copy of the personal data we hold about you.
Correction: Ask us to fix data that is inaccurate.
Deletion: Ask us to delete your account and the personal data tied to it.
Portability (EEA / UK): Receive the data you provided in a common machine-readable format, where the law gives you that right.
Objection or restriction (EEA / UK): Object to processing based on legitimate interests, or ask us to restrict it, where the law allows.
Withdraw consent: Decline analytics, or clear site data and choose again. Withdrawal does not affect processing that already happened.
Complaint: If you are in the EEA or the UK, you may lodge a complaint with your data protection authority. If you are in Israel, you may contact the Privacy Protection Authority.

Write to [email protected]. We may need to confirm that the request comes from you.

9. Israel

If Israeli privacy law applies, you may review personal data we hold about you, request a correction, and request deletion, under the Privacy Protection Law, 5741-1981. Account, portfolio, and watchlist records are kept for those purposes on a server in Finland operated by Hetzner. You may also contact the Privacy Protection Authority.

10. California

If you are a California resident, you may request to know the categories of personal information we collect, and you may request deletion. We do not sell personal information, and we do not share it for cross-context behavioral advertising. The only optional analytics are Google Analytics 4, and only after you accept cookies. These rights are offered even if the service is below the statutory size thresholds of the California Consumer Privacy Act.

11. Security

The site is served over HTTPS. Sign-in is handled by Clerk. Any legacy password we still hold is stored only as a one-way hash. The database sits on the application server and is not exposed as a public service. No method of storage or transmission is perfectly secure.

12. Children's Privacy

Champion Scan is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe a child has created an account, please contact us.

13. Changes to This Policy

We may update this policy as the service evolves. The date at the top of this page reflects the most recent revision. Continued use after an update constitutes acceptance.

14. Contact

For privacy requests or questions about this policy:

        Not financial advice: Champion Scan is an educational tool. Nothing on this platform constitutes financial advice, investment recommendations, or an offer to buy or sell securities. All trading involves risk. Past performance does not guarantee future results.
    