This notice explains the data processed when you use PerpEquities. It must be read together with the operator details in the imprint.
First-party analytics
We record page paths, selected language, referring site, viewport size, country, sampled Core Web Vitals (LCP, INP, CLS and TTFB), and interactions such as navigation, searches, asset selections and sponsored venue clicks. A random session identifier is stored in sessionStorage. The server stores salted hashes derived from the session identifier, IP address and user agent; it does not store the raw IP address in the analytics event table.
These data are used to operate the service, understand aggregate usage, diagnose problems and improve market discovery. Search terms entered in the asset directory may be included in analytics events.
Analytics events are not sent when your browser sends Do Not Track or Global Privacy Control. Clearing the browser session removes the session identifier.
Analytics event records are retained for up to 395 days and are then deleted by the scheduled retention process.
Reddit advertising measurement
We advertise on Reddit. To measure and optimize these ads, the Reddit Pixel (Reddit, Inc.) runs in your browser: it stores a Reddit visitor id (_rdt_uuid) and the ad click id (pe_rdt_cid) as first-party cookies and reports page views and engaged visits. Our server additionally reports three conversions to the Reddit Conversions API - a click on a partner exchange link, a newsletter sign-up and a new account - with your IP address, browser user agent, the ids above and, for sign-ups, your e-mail address as a SHA-256 hash. Reddit may process this data outside the EU. Private areas (dashboard, ops) never load the pixel. It only runs for visitors who come from Reddit (an ad or a Reddit link); a first-party cookie (pe_rdt_src) remembers that for 28 days. Visitors arriving from anywhere else are not tracked by Reddit at all.
In the EU/EEA, the UK and Switzerland nothing is loaded or sent before you agree. Everywhere else it runs unless you decline here. Do Not Track or Global Privacy Control always switch it off. Your choice:
Hosting and security logs
Infrastructure providers may process request metadata such as IP address, time, requested path and user agent to deliver, secure and monitor the service.
Service providers and transfers
Amazon Web Services hosts the application on EC2 in the Tokyo region and stores encrypted off-site backups in S3. Cloudflare provides DNS, content delivery and security and therefore processes request metadata such as IP address, requested host and path, and user agent. Healthchecks.io receives scheduled service-health pings; these pings are operational monitoring and do not intentionally contain visitor analytics. Financial Modeling Prep is used server-side for market and company information. Generated summaries and descriptions are created server-side via DeepSeek, with Anthropic available as an alternative provider; PerpEquities does not intentionally send browser session identifiers or visitor analytics to any of them.
Optional account (Google sign-in)
Signing in with Google is optional and only enables sync features such as a cross-device watchlist and alert rules. We store the Google account ID, e-mail address and display name - no other Google data is requested. The account and all associated data can be deleted at any time.
If you enable alert notifications, we additionally store your browser's push subscription (push-service endpoint URL and its encryption keys) and your alert rules, and deliver notifications through your browser vendor's push service (e.g. Google, Apple or Mozilla). Subscriptions are removed when you disable notifications, when the push service reports them dead, or when you delete your account (menu > delete account), which erases all account data immediately. If you connect Telegram alerts, we additionally store your Telegram chat ID and a link token; alert messages are then delivered via the Telegram Bot API (Telegram FZ-LLC). Disconnecting in the alerts panel or deleting your account removes the link immediately.
Your rights
Depending on applicable law, you may have rights of access, correction, deletion, restriction, objection and data portability, and the right to complain to a supervisory authority. Use the contact shown in the imprint.