Privacy Policy

Effective date: June 1, 2025  ·  Last updated: June 1, 2025

Short version: We collect minimal data. Analytics only run if you explicitly click "Accept" on the cookie banner. We never sell your data. Game progress is stored locally in your browser — we never see it.

1. Who We Are

Guess the Stock Chart ("we," "us," or "our") is operated at guessthestockchart.io. This Privacy Policy explains how we handle information when you use our daily stock chart guessing game.

For privacy questions, contact us at: [email protected]

2. Information We Collect

2a. Information you provide

We do not require account creation, login, or any personal information to play the game. You do not provide us with any personal data during normal gameplay.

2b. Information stored in your browser (localStorage)

Your game progress, streak, win/loss record, and cookie consent preference are stored exclusively in your browser's localStorage under the keys guessthestockchart_v1 and gtsc_cookie_consent. This data never leaves your device unless you explicitly share your results. We cannot see, access, or modify this data.

2c. Analytics (only with your consent)

If you click Accept on the cookie consent banner, we load Google Analytics (tag ID: G-8GCXFRNXBG) which collects:

If you click Decline, no analytics scripts load. Your choice is remembered in localStorage. You can change your choice by clearing your browser's localStorage for this site.

2d. Server logs (Cloudflare)

Our infrastructure is hosted on Cloudflare. Cloudflare may automatically collect standard web server log data including IP addresses, request timestamps, and HTTP status codes for security and performance purposes. This is governed by Cloudflare's Privacy Policy. We do not have access to raw server logs beyond what Cloudflare exposes in aggregate form.

3. How We Use Information

Analytics data (when consented) is used solely to:

We do not use any data for advertising, profiling, or selling to third parties. The game is entirely free and ad-free.

4. Legal Basis for Processing (GDPR / EEA users)

If you are located in the European Economic Area (EEA), we process analytics data only on the basis of your explicit consent (Article 6(1)(a) GDPR), given when you click "Accept" on the cookie banner. You may withdraw consent at any time by clearing localStorage for this site. No other personal data processing occurs.

5. Cookies and Tracking Technologies

We do not set any first-party cookies. If you consent to analytics, Google Analytics may set third-party cookies (such as _ga and _gid) in accordance with Google's Privacy Policy.

All analytics are configured with anonymize_ip: true, meaning IP addresses are truncated before any processing.

You can opt out of Google Analytics at any time using the Google Analytics Opt-out Browser Add-on.

6. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information. The only third-party data processor involved is:

Stock chart data is fetched from public financial data APIs (Yahoo Finance, Stooq) at the time you load the game. These APIs receive only stock ticker symbols — no user data is transmitted.

7. Data Retention

Analytics data is retained by Google Analytics for 14 months (our configured retention period). localStorage data persists until you clear your browser storage. We do not maintain any database of user activity on our servers.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

To exercise these rights, contact us at [email protected]. For Google Analytics data deletion, use Google's tools or contact Google directly.

EEA users also have the right to lodge a complaint with their national Data Protection Authority.

9. Children's Privacy

The game is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us and we will delete it promptly.

10. Security

We take reasonable technical precautions to protect the site and its infrastructure, including HTTPS encryption for all traffic, security headers (HSTS, CSP, X-Frame-Options), and Cloudflare's DDoS and threat protection services.

11. International Transfers

If you use analytics, your data may be transferred to and processed in the United States by Google Analytics. Google participates in the EU-US Data Privacy Framework. If you are in the EEA and have concerns about this transfer, you may decline analytics.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted with an updated "Last updated" date at the top of this page. Continued use of the site after changes constitutes acceptance of the revised policy.

13. Contact

For privacy questions or requests: [email protected]

← Back to the game