Privacy Policy

Ask Mr Market is operated by [registered company name] (“we”, “us”), the controller of the personal data described here. Contact: [legal contact email].

Without an account: nothing that identifies you. The site sets a cookie for your colour preference (bp_palette) and remembers which side panels you closed; the companies you viewed last are kept in your own browser’s storage and never sent to us.

With an account: your email address, used to send you a one-time sign-in link and to identify your account; a session cookie (bp_session) that keeps you signed in for 30 days; the date and version of the Terms you accepted.

While the site is by invitation: if you ask for access, the email address and the note you send, shown to the site’s administrators and sent to them by email, and deleted when the request is answered or after 30 days at the latest. An address typed into the sign-in form that is not invited is kept the same way, without a note. If you are invited, your address is kept on the list of people who may sign in until you are taken off it.

With Pro: the companies on your watchlist; your two portfolios, with their names and, for each company in them, the number of shares and the price paid that you entered; and the status of your subscription (plan, currency, renewal date) as reported by our payment provider. We never see or store card details.

Server logs may record IP addresses and requested pages for security and to keep the service running; they are kept for no longer than 30 days.

We run no advertising, no analytics trackers and no profiling, and we do not sell or share personal data for marketing.

Performing our contract with you (the account, the watchlist, the subscription); our legitimate interest in keeping the service secure (logs, sign-in rate limits); and compliance with legal obligations (billing records).

The cookies we set are strictly necessary for the service you asked for, so no consent banner is shown.

Paddle.com, our reseller and merchant of record, processes payments as an independent controller under its own privacy policy. We receive the subscription status, not the payment details.

Our email provider delivers the sign-in links. Our hosting provider runs the servers. Both act on our instructions.

The market-data providers whose figures the site shows receive nothing about you: the site fetches that data itself, including company logos, and serves it from its own address.

We may disclose data where the law requires it.

Sign-in links expire after 15 minutes and are kept until used or expired. Sessions last 30 days. Your account, watchlist, portfolios and acceptance records are kept until you delete the account.

Billing records are kept for as long as tax law requires, by our payment provider.

You can download everything we hold about you, and delete your account, from the account page. Deleting the account removes your email, sessions, watchlist, portfolios and acceptance records; a running subscription must be cancelled first.

To correct your data, object to processing or ask anything else about it, write to [legal contact email]. You can also complain to your data-protection authority.

Where the law gives you these rights (the GDPR and UK GDPR in particular), we honour them within one month.

Our servers and providers may be outside your country. Where data leaves the EEA or the UK, we rely on adequacy decisions or standard contractual clauses.

This policy is dated 2026-11-09. We will post changes here; a material change is announced on the site before it takes effect.