Privacy Policy
Last updated: 22 October 2026
This page explains, plainly, what personal data Maz Vantage collects, why, how long it is kept and how you control it.
1. Who is responsible for your data
Maz Vantage (mazvantage.com) is run by a private individual based in France, who is the data controller under the EU General Data Protection Regulation (GDPR) and the French Data Protection Act. Details are in the legal notice.
For any question or request about your data, write to privacy@mazvantage.com.
2. Our approach: collect as little as possible
You can use most of Maz Vantage without an account and without giving us anything. We collect only what the service needs to work, and nothing for advertising.
- No advertising, no ad networks, no tracking pixels, no data sold or rented to anyone.
- No profiling and no automated decisions about you.
- No IP address, location or device fingerprint is stored with your account.
- Audience statistics and videos or charts embedded from other sites are off until you accept them.
3. What we collect, why, and for how long
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| Account: email address, username, password (stored only as an Argon2 hash), account creation and last login dates | Create and secure your account, let you log in | Performance of the contract (GDPR art. 6(1)(b)) | Until you delete your account |
| Optional profile: first and last name, bio, experience level, currency, time zone — only if you fill them in | Personalise your profile and display | Performance of the contract | Until you clear them or delete your account |
| Watchlist: the stock symbols you add | Show your watchlist and dashboard | Performance of the contract | Until you remove them or delete your account |
| Server logs: date, page or API address requested, response status and time, a truncated IP address (last part removed) and, if logged in, your internal account ID | Keep the service secure, stop abuse, fix errors | Legitimate interest (GDPR art. 6(1)(f)) | 30 days |
| Messages you send us: your email address and what you write | Answer your question or request, including requests about your data | Legitimate interest (GDPR art. 6(1)(f)); legal obligation for rights requests | 3 years after our last exchange |
| Audience statistics (only if you accept): page viewed, referrer, country, browser and device type | Know which pages are useful | Consent (GDPR art. 6(1)(a)) | Aggregated by Vercel; no cookie and no identifier kept on your device |
4. Data that stays in your browser
Your login token, theme, screener settings, saved screens and cookie choices are stored in your own browser (local storage) and are not sent to us, except the login token, which proves who you are to our server. You can clear them at any time from your browser settings. Your cookie choice is kept for 6 months, then we ask again. Details are in the cookie policy.
5. Who receives your data
Your account data is stored in a database on a server operated by Maz Vantage itself, located in France. Only the operator has access. We use these service providers:
| Provider | Role | Location | Safeguard |
|---|---|---|---|
| Vercel Inc. | Hosts and serves the website (front end). | United States, with EU edge locations | EU–US Data Privacy Framework certification and Standard Contractual Clauses |
| Vercel Web Analytics | Anonymous, cookie-free page-view statistics — only if you accept analytics. | United States | EU–US Data Privacy Framework certification and Standard Contractual Clauses |
Market data comes from Financial Modeling Prep. Our server asks it for prices and financial figures; no personal data about you is sent with those requests.
To display some pages, your browser also loads images or code directly from the services below. They therefore see your IP address and browser details, as any site you load a file from would, and handle them under their own policies. We send them nothing else about you.
| Service | What it supplies |
|---|---|
| Financial Modeling Prep | Company logos |
| Google Charts (Google LLC) | The charting library behind the Sankey diagrams of the financial statements and some economy charts |
| Flagpedia (flagcdn.com) | Country flags on market pages |
Videos and charts embedded in articles (for example YouTube or TradingView) are loaded only if you allow external media, either once or for all articles. Those services then act under their own privacy policies.
We may disclose data if the law requires it, for example at the request of a court.
6. Transfers outside the European Union
Vercel, which hosts the website, is a US company. Transfers to it rely on its certification under the EU–US Data Privacy Framework and on the European Commission’s Standard Contractual Clauses. Google, whose chart library some pages load, is also a US company certified under the same framework. Your account database is not transferred: it stays in France.
7. Your rights
Under the GDPR you can at any time:
- access the data we hold about you and get a copy of it;
- correct it — most of it directly from your profile;
- delete your account and everything attached to it, immediately, from your profile;
- take your data with you in a portable format (data portability);
- object to processing based on legitimate interest, or ask us to restrict it;
- withdraw your consent to statistics or external media, from “Cookie settings” at the bottom of every page;
- give instructions on what happens to your data after your death (French Data Protection Act, art. 85).
Write to privacy@mazvantage.com. We answer within one month. If you think your rights are not respected, you can complain to the CNIL: www.cnil.fr/en/complaints.
8. Security
All traffic is encrypted (HTTPS). Passwords are never stored, only a salted Argon2 hash. Deleting your account deletes it from the database at once, with your watchlists and settings. Logs contain truncated IP addresses only. No system is perfectly secure; if a breach put your data at risk, we would notify the CNIL and, where required, you.
9. Children
Maz Vantage is not intended for children. Accounts are for people aged 15 or over (the age of digital consent in France). If you believe a younger child has created an account, contact us and we will delete it.
10. Changes to this policy
If we change how we use your data, we will update this page and its date. For a significant change we will tell account holders before it applies, and ask for consent again where the law requires it.