← Back to StonkHQ

Privacy Policy

Last updated: 20 September 2026

This policy describes what StonkHQ (stonkhq.com) collects and why. The site is an informational tool: when you look up a ticker, your browser requests public filings and market data from third parties (or a pass-through you triggered). We organize what comes back. Optional accounts are for saved customizations (watchlists, settings and similar features as we add them). Separately, we record which tickers are looked up so we can run the site and so we can license or sell aggregated, de-identified search statistics (for example, how often a symbol is searched).

Contact for privacy requests: Nazerofsun@gmail.com.

What we collect

• Lookups you request. The ticker symbol you asked to open, the time, and a coarse country (from the CDN). That is how we know what people search for. We do not log the filing or price payload — your browser fetched that from the source.
• Technical data the network always sees. IP address, user-agent, and standard request metadata. Cloudflare sees this on every HTTPS request. We use it to run the site, apply limits, and block abuse. We do not store IP addresses on lookup events (country only).
• Accounts (optional). If you create one: email address and a one-way hash of your password (we never store the password), plus any customizations you save later. Lookups while signed in may be stored next to the account internally so we can restore your preferences. You never need an account to look tickers up.
• Session cookie. One essential cookie so a signed-in session survives a reload. No advertising cookies.

If you use the in-browser mode of the site, filings and prices are requested from SEC EDGAR and the market-data source by your client (or a pass-through that only fetches the URL you asked for). Those third parties then see the requesting network address under their own privacy policies. We do not want a copy of your brokerage account, payment card, or identity documents, and we do not ask for them.

What we do not do

• We do not sell your name, email address, or a report that identifies you as having looked up particular tickers.
• We do not use your lookups to target ads on this site.
• We do not require an account to use the public pages.
• We do not fetch your brokerage holdings or payment details.

How we use it — including selling search statistics

We use this information to provide the page you asked for, keep the service stable, block abuse, show “popular right now”, save customizations on an account, and to compile, license, and sell aggregated or de-identified statistics about which tickers people look up (counts, ranks, trends, coarse geography). That commercial use is a purpose of the lookup log. Legal bases where GDPR/UK GDPR applies: performing the service you request (lookups, accounts); legitimate interests in operating a free site and in producing aggregate market-interest statistics. You can use the site without an account. You cannot opt out of the anonymous lookup count except by not using the site; that count is how the product is funded.

Where CCPA or similar law applies: we do not sell personal information that identifies you. We do commercially license aggregated, de-identified lookup statistics. If a regulator treats even those aggregates as a “sale”, the notice is here; email us if you want a deletion of account data.

Processors

Infrastructure currently includes Cloudflare (DNS, CDN, hosting of static files, and a fetch relay). If account features are enabled, we also use a database and cache host to store accounts, sessions, and abuse-control data. Third-party data sources (SEC, market-data providers, TradingView when you open that chart) process whatever their own services receive when a request is made to them.

Retention

Security and usage event logs that include IP addresses are deleted after 90 days. Account data stays until you ask us to delete the account, or we delete it for abuse or shutdown. Cached public market/filing data is not personal data about you; we may drop it when it is stale or the cache is full.

Your rights

You can ask to see, correct, or delete personal data we hold about you (account, saved customizations, lookups tied to that account) by emailing Nazerofsun@gmail.com. Deleting an account removes it and signs you out. Anonymous lookup counts already folded into aggregates generally cannot be un-counted. Where GDPR/UK GDPR applies you may also object, restrict, or complain to a supervisory authority.

Children

StonkHQ is not directed at children under 16. Do not create an account if you are under 16.

Changes

We may update this policy by posting a new version with a new date. Continued use after a change is acceptance.