Privacy

I collect as little as the site can work with, I don't sell any of it, and you can have it deleted. This page says exactly what's held and why.

The person responsible for it is me — Lucian Mesaroș, an individual based in Romania. Questions, or any of the requests further down, go to contact@lucianmesaros.ro.

Your account

Your first and last name and your email address, held as you typed them. Your password is not — it's hashed, scrambled one way, so I can't read it and neither can anyone who steals the database.

Alongside those: a display name if you set one, your light-or-dark preference, and whether you asked for the new-valuation email and when.

Payment

Stripe takes the payment and holds the card. I never see your card number, and it never touches this server. What I keep is the subscription itself: which plan, whether it's active, when the period ends, and Stripe's own reference for you. Stripe has its own privacy policy for what it holds as the payment processor.

If you're ever granted a goodwill refund, or blocked for abusing them, I keep a fingerprint Stripe gives me for the card — a code, not a number. It's how I keep track of "one refund per person".

The checkout record

When you tick the box agreeing to immediate access at checkout, I record which wording you agreed to, when, and the IP address and browser it came from. That record is what makes the refund policy hold up if a payment is ever disputed, and it's kept for as long as a dispute could be raised.

What you opened

Paid pages and files don't have public links — each one goes through a check that you're entitled to it. That check writes a line saying which valuation or file was opened or downloaded, when, and from which IP address and browser. If the check says no, that's written down too.

Two reasons, both honest. It's how a card dispute gets answered when there's nothing to point at but a download, and it's the only proof I have that what was paid for was actually delivered. I don't use it to build a profile of you and it isn't shared with anyone.

Messages and proposals

The contact form keeps your name, email, subject, message and IP address so I can reply and so spam can be spotted. If you propose a company, the proposal — the company, the ticker, your note — is stored against your account, so you can see where it got to.

Email

Some email is part of the deal and always sends: receipts, password resets, address verification, the renewal reminder, anything about your account. It isn't marketing and there's nothing to opt out of short of closing the account.

The new-valuation notification is different. It's off unless you turn it on, and every one carries a one-click unsubscribe that works without signing in.

Browser cookies

One essential cookie keeps you signed in and protects forms from being submitted from somewhere else. There's no advertising, no tracking pixels and no third-party analytics. Your light-or-dark choice is stored in your own browser, and on your account if you're signed in.

Videos are embedded from YouTube in its no-cookie mode, so nothing is set until you press play. If you do play one, YouTube sees that and applies Google's own terms.

Where it's held

The site runs on a single server in Romania, inside the EU. Stripe handles payments and holds the card; nobody else gets your data for their own purposes, and nobody buys it.

How long it's kept

Your account data stays while the account does. When you delete it, the account, your name, your email and your preferences are removed forever.

Asking while you're still subscribed works a little differently. The subscription stops the moment you ask, so it can't renew and you won't be charged again, and the account itself goes on the last day of the period you've already paid for. You keep full access until then, and you can change your mind any time before it.

Two things stay behind, neither pointing at you: one anonymous line recording the day you joined, the day you left and whether you ever paid, and the access lines above with your account detached from them.

What you can ask for

A copy of what I hold. A correction. Deletion — which you can also do yourself from your account, without asking me. Your data in a portable form. Or to withdraw a consent you gave, like the new-valuation email, at any time.

Email contact@lucianmesaros.ro and you'll hear back within a month, usually the same week. If you think I've handled your data badly and I haven't put it right, you can complain to ANSPDCP, the Romanian data protection authority.

Changes

If this page changes, the new version appears here with a new date.