Privacy Policy
Strict Alignment: GDPR, UK DPA, & US State Privacy Mandates
1. Data Minimization Core Philosophy
TickerPeeker is engineered to collect the absolute minimum perimeter of user data required to maintain authenticated saved environments. To utilize standard public tables, zero personal identification is requested. For authenticated account holders, we store strictly an email address and a cryptographically secure bcrypt password hash. We never request, process, or locally store sensitive brokerage API tokens or real account routing numbers.
2. Offloaded Transaction Processing
All premium tier upgrade flows offload completely to Stripe's secure infrastructure. Credit card numbers, billing addresses, and payment tracking nodes are handled externally, inheriting complete PCI-DSS Level 1 compliance. TickerPeeker retains only secure customer assignment IDs and base tier access states locally.
3. Cookies & Local Session States
We utilize native PHP session cookies strictly for maintaining persistent account logins across authenticated navigation loops. Lightweight local browser storage may be utilized dynamically to temporarily buffer client-side inputs inside our custom compounding and rebalancing interface utilities. We do not deploy intrusive third-party behavioral tracking pixels across our internal layout routes.
4. The Right to be Forgotten (Instant Erasure)
In full compliance with international data privacy frameworks, authenticated users maintain total sovereignty over their stored database footprints. Your settings panel features a hardcoded "Delete Account" routine. Executing this trigger immediately fires an unrecoverable database command that wipes your email address, session arrays, and stored JSON portfolio structures from our active MySQL caches instantly.
5. Data Sharing & Third-Party Disclosure
We do not sell, rent, or lease customer email databases to external marketing agencies or data brokers. Aggregated, fully anonymized processing metrics may be reviewed internally to optimize page load velocity or allocate server cache bandwidth efficiently.