Privacy policy

Advertising

When available, Google AdSense displays labeled advertisements on public web research and education pages. Mobile applications use Google AdMob for optional, non-personalized native advertisements below research content. Mobile ads may contain images or muted video, can be closed immediately and never use full-screen, interstitial, rewarded or app-open formats. Ad requests can share IP addresses, browser or device information, application information, ad interactions and diagnostics with Google and its advertising partners for delivery, measurement and fraud prevention. Web requests may also share the public page URL, including a stock symbol, and cookie identifiers. We do not pass account email, account IDs, saved research lists or search text to advertising providers. Mobile advertising-ID collection is disabled and we do not request iOS tracking authorization. Private test builds use Google test ad units. Ads are not investment recommendations or endorsements.

On the website, choose Advertising in Cookie preferences to enable or disable advertising cookies. We respect Global Privacy Control and Do Not Track by disabling web advertising requests. In the mobile apps, Non-personalized advertisements in Privacy settings is a separate, optional device choice; it stays off until you enable it and expires after 180 days. Website consent, account sign-in and analytics consent never enable mobile ads. Google’s consent message provides additional purposes and partner choices where required. Use Ad privacy choices on the website or in mobile Privacy settings to review or withdraw those choices. Withdrawal stops future requests and removes the displayed ad; it does not erase information already held by Google. Clearing app data removes the saved device choice. Refusing optional advertising does not prevent public research access. How Google uses information for advertising describes Google’s processing and controls.

Checkout security

Checkout requests use Vercel BotID Basic to distinguish automated traffic from people without an interactive puzzle. Vercel processes browser and request signals for this security check. Our distributed limiter uses hashed IP addresses and account identifiers to restrict repeated checkout attempts. These protections are essential security processing, separate from optional analytics. Stripe controls any additional verification within its hosted payment page.

Payments and subscriptions

Subscription availability follows the payment options offered in the product. Private Android and iOS test distributions use Google Play Billing or Apple in-app purchases in their test environments; they do not open native subscriptions to the public.

When web checkout is available, Stripe Managed Payments with Stripe Billing receives the selected plan and a billing reference. Stripe and Link handle payment and purchase-management information directly; Vaniras receives transaction and subscription references, amounts, currency and status for billing records and paid access. Google and Apple process native purchases directly. Native verification sends us the provider transaction or purchase reference, product and application identifiers, an account-bound billing reference and purchase status; we do not receive card numbers from the stores. See Stripe’s Privacy Policy for Stripe and Link processing.

We use purchase records to verify access, support restoration, reconcile subscription status, prevent fraud and meet applicable accounting and legal obligations. Billing references and necessary verification evidence are kept separately from optional advertising and analytics. Store or payment-provider retention and privacy controls remain separate; withdrawing advertising consent does not cancel a subscription or erase required purchase records.

What we collect

You can browse public research without an account. Signing in with Google or Apple provides your name, email, profile image and account identifier from your sign in provider. Email/password sign in uses Firebase Authentication; Firebase handles your password and sends verification or password reset emails. You may optionally provide a name for your profile and account emails and edit or clear it in Settings. Your name is not identity verification. We store your saved stocks, screens, alert rules, digest preferences and previews to provide those features. External email and push delivery are not connected. Device preferences and recent searches may also stay in your browser.

We receive messages you send us and technical information needed to deliver and protect the service, such as IP addresses, request times and error records. A shared watchlist is visible to anyone with its link.

Cookies and your choices

Essential cookies support sign in, security and saved choices. Optional analytics stay off until you accept them. Google advertising measurement also requires your permission. Allow all enables the available optional purposes. Choose Reject optional to turn off optional analytics and anonymous page counts, or Manage preferences to choose each category. Advertising is also optional and stays off unless accepted. You can change your choice in Cookie preferences at the bottom of any page. We respect Global Privacy Control and Do Not Track for optional analytics.

We count public page requests on our servers to understand overall traffic and improve the site. This creates daily totals by site and broad page category, without a visitor identifier, IP address, stock symbol or individual browsing history in the counter. It does not use tracking cookies or send these counts to Google. Totals expire after 90 days. Use the privacy controls below to turn off Anonymous page counts, or choose Reject optional in Cookie preferences. We also respect Global Privacy Control and Do Not Track. The first request may already be included before you make a choice; anonymous totals cannot be linked back to you for removal. Hosting and security logs remain separate.

• Website analytics: Google Analytics helps us understand visits, traffic sources, focused time, feature use and performance. Optional events include account registration and sign-in/out, sharing actions and selected platforms, successful searches or empty results, pricing and locked-research views, and chat completion outcomes with coarse response-time bands. Conversation content is not included in analytics. Google receives browser and device information, an IP address with requests, and cookie identifiers. We do not send Google your email, account ID, stock symbols, search text or saved lists. Google advertising measurement is a separate optional choice in Cookie preferences. When you enable it together with Analytics, Google may use the consented visit and action data, cookie identifiers, IP address and browser or device information for advertising measurement. Earlier analytics or AdSense consent does not enable this new purpose. Google Signals, user-provided data uploads, personalized ads and tracking across former and current product domains remain off. AdSense reporting is separate from website analytics.
• Product analytics: When available and accepted, we store valid forecast views, the stock viewed and timestamps on our servers. These are linked to your account or a random guest identifier to measure return visits and activation. These stock identifiers are not sent to Google.

How long information stays

• Cookie choices and Google cookies: up to 180 days. Google cookie expiry does not extend with each visit. Sign in sessions last up to 30 days.
• Google event and user data: 14 months, without renewal on activity. Aggregated Google reports have separate retention.
• Detailed forecast activity: scheduled for deletion after 90 days. Withdrawal removes it when the server confirms your request.
• Activation records: the first two qualifying stocks and their timestamps remain with your account to prevent counting activation twice. You can request deletion. Guest activation records expire after 180 days without renewed consent and are removed on withdrawal.
• Consent history: up to 180 days. Account data remains while needed to provide your account, unless you request deletion. Provider logs and backups follow their separate retention schedules.

Withdrawing stops future analytics and advertising measurement and clears Google analytics and advertising measurement cookies. It does not automatically erase data Google already received. We remember both acceptance and rejection for up to 180 days in this browser using local storage and first-party preference cookies. Your choice applies to page reloads and new tabs on this site; it does not automatically transfer to other browsers or devices. Clearing site data removes your saved choices.

How we use and share information

We use information to provide the service, keep it secure, answer requests and improve it using anonymous totals and optional analytics with your permission. Our providers include Google for sign in, analytics and optional advertising, Firebase Authentication for email/password accounts when enabled, Vercel for hosting and performance, Neon for database storage and Upstash for caching, anonymous totals and abuse prevention. Firebase Authentication receives your email and password to authenticate you and send verification or reset emails. Market data and AI providers receive the information needed for the feature you use. Financial chat stores your questions and displayed answers in our application database for conversation context and request recovery. When cloud history is enabled, saved chats have no automatic expiry and remain until you delete them or delete your account. Free, Plus and Pro can save 5, 20 and 50 chats, with up to 20 submitted questions and answers per chat within a 1 MiB limit. You can read, rename and delete saved chats across web and mobile. Without cloud history, temporary content expires after 24 hours and is removed during subsequent cleanup. Ownership, request and spending metadata remain for accounting and abuse prevention. Your private conversations are not shared between users. AI requests use provider storage disabled; provider retention policies remain separate. Avoid including sensitive personal information in AI messages.

We use account information to provide the service you request and produce aggregate registered-account counts for internal and investor reporting, without sharing account details with investors. These counts do not track browsing behavior or depend on optional analytics consent. We use optional analytics with your consent, and security records to protect the service and meet applicable obligations. Providers may process information in the United States and other countries, where privacy protections may differ. Contact us for information about processing locations and applicable international transfer safeguards. We may disclose information when required by law or to protect the service and its users.

Your privacy rights and choices

You can use the site without accepting optional cookies. Use Cookie preferences in the footer or Manage cookie preferences below to withdraw or change consent. We treat Global Privacy Control as an opt-out of optional analytics and advertising, including disclosures that may qualify as sale, sharing or targeted advertising under applicable US state law. Do Not Track also disables optional tracking. These signals do not disable essential sign-in or security processing.

Where applicable under European law, you may request access, correction, erasure, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. You may complain to your local data protection authority. We use account information to provide requested services, consent for optional analytics and advertising, and legitimate interests for proportionate security and abuse prevention. Providing account information is necessary for account features; optional cookies are not required to browse public research.

Where applicable under US state law, you may request access or a copy, correction or deletion, opt out of sale, sharing or targeted advertising, and appeal a denied request. We do not deny access to public research because you exercise these choices. Advertising disclosures may fall within sale or sharing definitions even when ads are non-personalized.

To exercise your rights, contact support@vaniras.com with your request or appeal. An authorized agent may contact us on your behalf, subject to verification required by applicable law. We may need to verify your identity before disclosing or changing account data; the browser opt-out above does not require an account. You can use the service without agreeing to optional analytics.

See account deletion for the available request process. Removing active records does not immediately remove backups or records required for security or legal obligations. No online service can guarantee absolute security.

Vaniras is not intended for children under 13. Contact us if you believe a child has provided personal information. We will update the date on this page when our practices change and request a new cookie choice when a new optional purpose requires it. Material changes will be communicated through the site or directly where required.