Privacy Policy
Last updated: May 2025
Overview
("Dip Finder", "we", "us") operates dipfinder.com. This Privacy Policy explains what data we collect, how we use it, and your rights. By using Dip Finder you agree to this policy. Please stop using the service if you do not agree.
We reserve the right to update this policy at any time. Continued use of the service constitutes acceptance of any changes.
Hosting
Dip Finder is hosted by Vercel Inc. (340 Pine Street, Suite 900, San Francisco, CA 94104, USA). Personal data collected on this website - including IP addresses, request metadata, and communication data - is stored on Vercel's servers. Use of Vercel is based on our legitimate interest in reliable website delivery (Art. 6 Abs. 1 lit. f GDPR).
Data We Collect
Account data
If you register, we store your email address and a hashed (bcrypt) password in our database (MongoDB). No payment information is collected or stored. Legal basis: contract performance (Art. 6 Abs. 1 lit. b GDPR).
Watchlist data
Your watchlist of stock tickers is stored in your browser's localStorage. If you are logged in, it is also stored on our servers to sync across devices. Watchlists contain only ticker symbols - no personal data.
Authentication tokens
After login, a JWT (JSON Web Token) is stored in your browser's localStorage. The token contains your email address and an expiry date. We do not use cookies for authentication.
Technical data
Standard server logs may include your IP address, browser type, and page access times. This data is used solely to operate the service and is not used for profiling.
If you contact us by email, we retain your address to enable continued communication.
Third-Party Services
Yahoo Finance
Stock prices and moving averages are fetched from Yahoo Finance. Only ticker symbols are transmitted - no personal data. See Yahoo's Privacy Policy.
Analytics (Umami)
We use Umami Analytics, a cookie-free, privacy-friendly analytics tool. It collects only anonymised usage statistics (pages visited, browser type). No personal data is stored or shared with third parties.
CAPTCHA (Cloudflare Turnstile)
The registration form uses Cloudflare Turnstile to prevent automated abuse. Your IP address may be transmitted to Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). See Cloudflare's Privacy Policy.
Your Rights
Under GDPR and applicable law, you have the right to:
- Access the personal data we hold about you (Art. 15 GDPR)
- Correct inaccurate data (Art. 16 GDPR)
- Request deletion of your data (Art. 17 GDPR)
- Restrict how we process your data (Art. 18 GDPR)
- Object to processing (Art. 21 GDPR)
- Data portability (Art. 20 GDPR)
To exercise any of these rights, contact us at . You also have the right to lodge a complaint with your local data protection authority. In Baden-Württemberg, the supervisory authority is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit (LfDI BW).
Data Retention
We retain personal data only as long as necessary for the purposes described in this policy. Account data is retained for the lifetime of your account. Upon a valid deletion request or account closure, your data will be removed unless we are legally required to retain it.