Portfolio Analytics ("we," "us," or "our") is operated by Petru Ceciltan, based in Israel. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application at www.portanalytic.com.
When you create an account, we collect:
You provide the following data when using the service:
We automatically collect:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Providing the portfolio tracking service | Contractual necessity |
| Account creation and authentication | Contractual necessity |
| Sending verification and password reset emails | Contractual necessity |
| Sending up to two reminder emails after sign-up, each with an unsubscribe link | Legitimate interest |
| Reading and answering the bug reports you send | Legitimate interest |
| Two-factor authentication and security | Legitimate interest (security) |
| Analytics and service improvement | Consent (via cookie banner) |
| Preventing fraud and abuse | Legitimate interest |
We use the following third-party services:
| Service | Purpose | Data Shared |
|---|---|---|
| Google Analytics (GA4) | Usage analytics | IP address, page views, device info |
| Google Tag Manager | Tag management | Page interactions |
| Google OAuth | Social sign-in | Email, name (from Google) |
| Gmail SMTP | Transactional and reminder emails | Recipient email, email content |
| The site owner's own server (European Union) | The application and the PostgreSQL database it reads and writes, on an encrypted disk | All user data, server logs, request data |
| Cloudflare | DNS, content delivery and protection against attack, in front of every request to this site | IP address, request metadata |
| Aiven (PostgreSQL, European Union) | One encrypted copy of the database taken each night and kept off the server, so an account can be restored after a failure | All user data |
| Yahoo Finance API | Stock price data | Stock symbols (no user data) |
About the translation option. The language switcher is off by default. If you choose a language, the translation is loaded from this site and applied in your browser. No text from the page is sent to anyone. Portfolio names, holdings, instrument names, tickers, amounts, percentages, dates and your own name are never translated.
Your choice is remembered in your browser (localStorage pa_lang) so
the page opens in that language next time. If you have an account it is also saved
to it, so the same language applies when you sign in on another browser or device.
Switching back to English clears the stored preference.
Language popularity. When a language is chosen in the switcher, we add 1 to a counter for that language so the menu can list the languages our visitors actually use first. The counter is the only thing stored: no account, no session, no IP address and no timestamp is recorded against it, so a choice cannot be traced back to the person who made it.
We do not sell, rent, or share your personal data with any third parties for marketing purposes.
| Data Type | Retention Period |
|---|---|
| Account data | Until account deletion + 7-day grace period |
| Portfolio & transaction data | Until account deletion |
| Authentication tokens | 24 hours (JWT), 30 days (trusted devices) |
| Email audit logs | 30 days (auto-deleted) |
| Imported statement files | 7 days (auto-deleted) |
| Files sent for an import template | Until the template is ready + 7 days, 30 days at most (auto-deleted) |
| Bug reports you send | Kept so the problem can be fixed, and no longer linked to you once your account is deleted |
| Analytics data | 14 months (Google Analytics default) |
| Server logs | 30 days |
When you delete your account, all associated data is permanently removed after a 7-day grace period. During this period, you can cancel the deletion by logging back in.
You can delete your Portfolio Analytics account, and everything in it, at any time from the Android app or the website:
If you cannot sign in, email [email protected] from the address on the account and ask for it to be deleted.
Deleting the account removes your profile, portfolios, transactions, cash entries, watchlists, notifications, sign-in history and any files you sent for an import template. They are removed for good after a 7-day grace period, and signing in again within those 7 days cancels the deletion.
You can also delete part of your data without closing the account: any portfolio, transaction, cash entry or watchlist entry can be deleted from its own screen in the app, and it is removed straight away.
Two things are kept for a limited time and then removed automatically: server logs, which record requests to the site, for up to 30 days, and the nightly off-site copy of the database, which is replaced by the next night's copy. Usage statistics in Google Analytics expire after 14 months.
We implement the following security measures:
If you are located in the European Economic Area (EEA), you have the following rights:
To exercise any of these rights, contact us at the email below. We will respond within 30 days.
We use the following cookies and local storage:
pa_lang): set only if you pick a language in the translation switcher, so the page opens in that language next time. If you are signed in, the same code is stored on your account so the choice follows you to another browser. Choosing English again removes both.Your data may be processed in:
In short: what you type in stays in the EU. Your portfolios, transactions, prices and account details are held on a server in the European Union and copied each night to another one, also in the European Union. What leaves it is the usage analytics described above, and, only if you choose to sign in with Google, your email address and name.
Where data is transferred outside the EEA, we rely on adequacy decisions, Standard Contractual Clauses, or the service provider's compliance frameworks.
Portfolio Analytics is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will delete it promptly.
In the event of a data breach that poses a risk to your rights and freedoms, we will:
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the service after changes constitutes acceptance of the revised policy.
For privacy-related inquiries, data requests, or to exercise your rights:
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence.