Privacy

The short version

• No ads, no trackers, no analytics. Your data is never sold or shared.
• Your finances are only shown to you. Friends see only what you choose to post on Stonkbook.
• You can download everything, or delete your account and everything in it, at any time.

What's kept

• Your account: a username, your password (scrambled with a one-way hash, so nobody can read it back) and, if you add one, an email address for password resets. No real name is needed.
• What you enter: your stonks and trades, savings, debts, salary, property, other assets, goals, scenarios, charts and dashboard layout, plus daily snapshots of your net worth for your charts.
• Stonkbook and chat: your posts, photos, comments, reactions, polls, friends and messages.
• SpaceStonks and Games: your scores, coins and rocket skins. Snake and Pong played on games.dosiancreature.com are saved here too (score, coins and how long the game lasted), but only when your dosiancreature.com account is joined up with this Stonks account; they show on the same leaderboards.
• Feedback you send.

Who can see it

• You. Your finances are only ever shown on your own pages.
• Friends and other users see only what you post on Stonkbook: friends-only posts go to your friends, and "Everyone" posts show in Explore. A shared trade shows the stonk, price and date. The number of shares is only included if you switch that on in Settings › Stonkbook. Weekly recaps are only for you. Chat messages are seen only by the people in the chat.
• Me, the person who runs Stonks. Your data lives in a database on my server, so I could technically look at it. I don't. The app has no screen for viewing other people's finances (the admin page lists only usernames, home currencies, sign-up dates and password resets), and I'd only ever look to fix a problem you've asked me to fix.

Services Stonks uses

• Oracle Cloud hosts the server, in Sydney, so your data is stored in Australia.
• Yahoo Finance supplies share prices. It gets the stock symbols the app looks up, but never who holds them or how many shares.
• Frankfurter supplies exchange rates. Nothing about you is sent.
• Open-Meteo supplies the weather widget. It gets the city you choose, if you turn the widget on.
• Resend sends password-reset emails. It gets your email address, only when you ask for a reset.

Cookies and logs

• One cookie keeps you logged in. Your browser also remembers a few display settings, like the theme, on your own device.
• So Stonks can still be read with no signal, your phone or computer keeps a copy of the pages you open (with their figures and pictures). That copy stays on your device, is shown with a "No signal" banner and the time it's from, and is thrown away when you log out.
• dosiancreature.com accounts are kept on this same server alongside Stonks: a username, the password stored scrambled (never readable), the time it was made, and which Stonks account goes with it if you join them up. A Stonks account used to log in there becomes one with the same name and password. Logging in there keeps you logged in with one cookie (30 days, or until you log out or the password changes). To stop anyone making lots of accounts, the address each sign-up comes from is kept for a day.
• Choosing an app from dosiancreature.com passes your account to it for that one login. HUGE, Bomb and Planner make an account with the same name the first time and check its password with this server. Meditate and Games keep no passwords at all: their log-in and sign-up pages ask this server, which keeps the dosiancreature.com account. Stonks only joins up once you log in or sign up here yourself.
• The web server keeps a standard log of visits (IP address, page and time) for 14 days, to spot attacks and fix problems.

Keeping it safe

• Everything travels over HTTPS. Passwords are hashed, never stored.
• After 5 wrong passwords, an account is locked for 15 minutes.
• The database is backed up every night. Backups are kept for 3 days, then deleted.

Your data, your call

• Download it: Profile › Download my data gives you a spreadsheet of what you've entered.
• Delete it: Profile › Delete my account removes your account and everything in it straight away, including your photos and messages. Copies in the nightly backups are gone within 3 days.
• Questions or anything you'd like removed: send a message through Feedback.

Not financial advice

Stonks is a tracker. Its numbers, charts, tax estimates and scenarios are for your own planning and may be wrong or out of date. They aren't financial, tax or legal advice. Check anything important with a professional.

Changes

If this page changes in a way that matters, the date at the top changes too, and big changes will be announced in the app first.