StockFriendly is published by Cedric Joseph Julien Elain, a French sole trader (entrepreneur individuel, EI), carrying out computer programming activities (6201Z), an unregulated liberal profession.
Business address: 8 RUE DES FOSSES SAINT-JACQUES 75005 PARIS, France.
The website is hosted by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg, Luxembourg. Hosting provider website: https://aws.amazon.com.
3. Service and information
The official website is https://stockfriendly.com. StockFriendly provides market information and portfolio tracking and analysis tools for self-directed individuals. The terms of use describe the scope of version 0.1.
Market data is supplied notably by Twelve Data. Its coverage and availability depend on the instruments and data actually supported. Displayed sources and data quality information accompany the relevant information.
4. Personal data and contact
For a question about your personal data or to exercise your rights, contact privacy@stockfriendly.com. For any other question or complaint about the website, contact team@stockfriendly.com.
Choices about optional trackers are managed separately through the consent link in the footer. Reading the legal notice or the terms of use does not constitute consent to these trackers.
Terms of use
Version 0.1-rc.1 · Updated
1. Introduction and scope
StockFriendly is an information and analysis service published by Cedric Joseph Julien Elain, a French sole trader whose contact details appear in the legal notice. It is intended for self-directed individuals, with a launch aimed at France and the European Economic Area.
These terms describe version 0.1 of the service. They are available in French and English; if the two texts differ, the French version prevails, without prejudice to mandatory rules applicable to the user.
2. Access and features
Version 0.1 is available without payment. This is not a commitment to keep future versions free permanently. This version does not require a paid subscription or payment method.
Some pages are public. Access to your personal area requires an account and a verified email address. The initial launch offers email and password sign-in; Google sign-in is not yet offered.
The portfolio relies on manual entry of your transactions. StockFriendly does not execute orders, hold your assets or connect to your broker to import or change your transactions. Take care to enter accurate information and protect your sign-in credentials.
3. Financial information and limits of analysis
StockFriendly provides information and analysis tools, without investment advice or personalised recommendations to buy or sell. Investing involves a risk of capital loss. Past performance is not indicative of future results.
The transactions you enter describe your history with your broker. Market data is used for valuation and analysis; it does not replace that history. Results depend on the available information and the quality of your entries.
Market data may be delayed, out of date or incomplete. Check the displayed source, date and data quality information. Missing data does not mean zero; unavailable information is identified.
Version 0.1 does not calculate your taxes or produce a tax return. Its analyses do not replace your broker statements or, where necessary, advice from a qualified professional.
4. Market data and availability
Market data comes notably from Twelve Data. Only instruments and features actually available in the service are offered. Displaying an instrument does not imply that all its data, a complete history or real-time quotes are available.
Rights to market data remain subject to the rights of their holders. Access to the service does not, in itself, grant you permission to redistribute this data.
The service may experience interruptions, including during maintenance or when a provider is unavailable. These terms do not guarantee service availability or support response times; this statement does not reduce your statutory rights.
5. Account, deletion and portability
You can request deletion of your account from your personal area. This action requires a recent session and confirmation. It revokes your sessions and starts a staged process for the associated data; it does not mean that all backup copies disappear instantly.
For a portability request or any question about exercising your rights, contact privacy@stockfriendly.com. Version 0.1 does not offer automated self-service export; portability requests are handled by support.
6. Privacy choices and trackers
Choices about analytics and advertising trackers are separate from account creation and reading these terms. These optional trackers remain disabled without your consent.
You can refuse these trackers or withdraw your choice through the consent link in the footer, without that choice being a condition of account creation. Cookies necessary for the service to work are separate from these optional choices.
7. Questions, complaints and rights
For a question or complaint about the service, contact team@stockfriendly.com. You can also use the publisher’s contact details in the legal notice.
The functional limits described in these terms do not reduce your statutory rights or guarantees. They impose neither an exclusive court nor a waiver of any remedy.
Privacy policy
Version 0.1-rc.3 · Updated
1. Controller and contact
Cedric Joseph Julien Elain, a sole trader established in France and publisher of StockFriendly, is the controller for the processing described here. His business contact details appear in the legal notice. For any question or request about your data: privacy@stockfriendly.com.
This policy covers browsing stockfriendly.com, your account and portfolio, and communications with StockFriendly. Version 0.1 is aimed at France and the European Economic Area. It offers neither payments, broker connections nor Google sign-in.
2. Data and requested services
Your account uses your name, email address, a hash of your password, and your language and currency preferences. Sessions, verification requests and password resets authenticate you and protect your access. The application does not store your password in plain text.
Your portfolio contains the information you enter: transactions, instruments, dates, quantities, amounts, currencies, fees, cash movements and dividends. This information is used to present your history, positions, valuations and performance. You choose which data to enter; the corresponding analyses cannot be produced without it.
An account and the information needed to authenticate it are required to access the private area. You can browse public pages without creating an account. Without a usable email address, flows requiring email verification or a password reset cannot be completed. Transactional messages are configured, but sending to all recipients is not yet enabled.
Market data comes notably from Twelve Data. Market data requests do not send this provider your identity, amounts or portfolio. The service’s calculations explain your data; they do not make decisions producing legal or similarly significant effects on you and do not execute orders.
3. Security, support and rights
Technical information, including IP address, browser, dates, errors and security events, is used to protect access, detect abuse and diagnose incidents. Logs are limited to this purpose; they must not contain passwords, session tokens or complete financial data.
When you write to us, we process your reply address, the relevant content of your request and its follow-up. Do not send passwords, sign-in codes or complete financial statements. If further verification is necessary, we request only information proportionate to the request.
4. Legal bases for processing
Account management, authentication, messages necessary for the account, portfolio tracking, requested calculations and support necessary for these services rely on performance of the service contract or pre-contractual steps you request (GDPR Article 6(1)(b)).
Abuse prevention and incident diagnosis rely on our legitimate interest in keeping the service secure and available (Article 6(1)(f)). Handling general enquiries and limited follow-up of support exchanges rely on our legitimate interest in responding to people who contact us and maintaining continuity in their exchanges. These uses remain limited, with restricted access and no advertising reuse.
Handling requests to exercise rights and the minimal evidence needed to fulfil them rely on our legal obligations under GDPR Articles 12 to 22 (Article 6(1)(c)). Exceptional retention for another obligation or a dispute requires a specific reason; it does not justify keeping an entire account indefinitely.
Optional product statistics rely on your separate, withdrawable consent, without affecting account access (GDPR Article 6(1)(a)). Minimal evidence of your choice serves to respect and demonstrate it (Article 7(1)). Google Analytics currently remains disabled.
5. Cookies and optional statistics
Google Analytics is not currently enabled on stockfriendly.com, even if you choose to accept it. Product statistics associated with your account are collected only with your agreement and when collection is enabled for the service. In Account, “Product statistics”, you can view your choice; a message indicates when collection is disabled. Saving an agreement does not change this service-wide setting.
The optional “Product statistics” choice is offered, without a preselected checkbox, during email registration and in your account. It applies to all your devices, independently of your Google Analytics choice. When collection is enabled, it authorises measurement of feature usage to improve the product and assess account activation and return visits. Refusing or withdrawing does not restrict the service.
These events are pseudonymised and available only to StockFriendly and its hosting provider AWS. They exclude email addresses, IP addresses, full URLs, held instruments, financial amounts and form content. No new product-statistics cookie or local storage is created. Your choice is stored in the account database with its date, duration, version and the language of the information presented.
Your agreement expires after six calendar months or when the information version changes. It authorises no earlier event. You can withdraw it in Account, “Product statistics”: new events are immediately prevented and pending intents deleted; previous data must be purged within thirty days. You can agree again once this purge is complete.
Cookies needed for sign-in and security, the theme choice and the local deletion tracking reference are described in the tracking policy. Your Google Analytics choice is kept in your browser for six months, separately from your account. You can change or withdraw it through the consent manager. Withdrawal blocks new emissions and attempts to remove Google Analytics cookies accessible to the website; it does not delete any data already received by Google.
6. Recipients, hosting and transfers
The publisher is the only declared human reader of support and privacy correspondence. Technical access is restricted to operational and security needs. Portfolio data remains private; it does not become market publications or Google Analytics events.
Amazon Web Services provides hosting, the database, backups and technical services. The production application database is hosted in the Paris region. This choice does not mean that every service, item of metadata or provider access remains exclusively in France or the European Economic Area.
Contact addresses use OVHcloud forwarding to the publisher’s personal Gmail account. OVHcloud handles delivery; Google processes the received content and metadata under its consumer terms. For users based in the European Economic Area, those terms identify Google Ireland Limited. No Google Workspace contract or exclusively European hosting is claimed for this mailbox.
Google states that processing may take place in several countries, including the United States, and describes the EU–US Data Privacy Framework and standard contractual clauses for relevant transfers. The links below provide its terms, policy and stated safeguards. This is not a guarantee that each message remains in the European Union. The publisher’s postal address is also a contact option for rights requests.
AWS documentation on data protection describes its commitments and transfer mechanisms. You can ask privacy@stockfriendly.com for details about the recipients and safeguards applicable to your request. Strictly necessary information may also be disclosed to a competent authority where an identified obligation requires it.
7. Retention and deletion
Your profile, portfolio and its projections are retained for the life of your account, then deleted in stages. Version 0.1 does not automatically delete inactive accounts. A session expires after no more than seven days without renewal; expired authentication records are cleaned up separately.
The retention policy provides for 90 days for production application and security logs and 365 days for infrastructure audit records. Automatic production database backups cover 14 days. Every manual backup must have an owner and an explicit expiry date; a restoration must reapply deletions before the service resumes.
After deletion completes, its opaque proof is limited to 90 days. The policy for the independent register preventing deleted data from reappearing provides for 21 useful days, daily purging targeting primary deletion no later than day 22, and expiry of its backup copies no later than day 29. These periods are policy limits; operational qualification of the restoration and purge mechanism is still in progress. They do not certify that deletion has already taken place.
Ordinary support and rights correspondence is subject to a retention rule covering handling and no more than six calendar months after closure. Attachments no longer needed and working copies must be deleted earlier. An identified obligation or an actual dispute may require restricted retention, with a documented end and monthly review. Manual application of this rule in the mailbox has not yet been attested; archiving or moving a message to the trash does not prove erasure.
Product-statistics events are retained for at most thirteen months. Minimal consent evidence is kept only while it supports the current choice or retained data, for at most thirteen months after the agreement expires, or nineteen months after the choice. A refusal without an earlier agreement is kept for six months. Account deletion erases this evidence from the primary database; database backups expire within fourteen days. After a restore, previous product statistics and consent evidence are deleted before service resumes: a new agreement is required. These periods describe the applicable policy; they do not mean that collection is enabled.
8. Your rights and choices
You can request access, rectification, erasure or restriction of your data, and portability where the legal conditions apply. You can object, on grounds relating to your particular situation, to processing based on legitimate interests. You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
Contact privacy@stockfriendly.com or use the postal address in the legal notice. We normally respond within one month; a reasoned extension of two months is possible depending on the complexity and number of requests, with notice during the first month. You can lodge a complaint with the CNIL, including at cnil.fr/plaintes, or the competent supervisory authority where you live.
Account deletion from the private area requires a recent session and confirmation. Acceptance revokes sessions and starts staged erasure; it does not mean that every copy has already disappeared. For portability, version 0.1 provides for delivery handled by support, without automated self-service export.
StockFriendly is published by Cedric Joseph Julien Elain, a French sole trader. His contact details appear in the legal notice. For any question about your personal data or to exercise your rights, contact privacy@stockfriendly.com.
Google Analytics 4 (GA4) is currently disabled on stockfriendly.com. The website does not load its tag or send it measurements, even if you choose “Accept Google Analytics”. Product statistics associated with your account are collected only with your agreement and when collection is enabled for the service. These choices are separate from the sign-in, security and preference mechanisms described below.
This policy describes the service in this state. Any future activation of Google Analytics will require updated information about the applicable processing, recipients, retention periods and transfers. Your Google Analytics choice does not grant consent for product statistics associated with your account.
2. Your choices and how they are stored
The manager gives “Accept Google Analytics” and “Refuse Google Analytics” equal prominence. Refusing does not prevent you from using the website or creating an account. The “Manage tracking” button in the public footer reopens the manager; after a choice, a button also remains available on sign-in and private pages.
Your choice applies to this browser and this site origin. It does not automatically apply to other browsers or devices. It is valid for up to six calendar months. Once it expires or the consent policy version changes, a new choice is requested; the previous agreement no longer authorises Google Analytics.
The local storage key stockfriendly.ga4-consent keeps only the decision, its date, expiry and versions, without your identity. The browser does not physically delete it at that deadline: an expired choice may remain until it is next read or removed. Withdrawal replaces agreement with refusal.
A legacy key, stockfriendly.analytics-consent, may remain in a browser that used an earlier version. The manager attempts to remove it without reusing its agreement. If removal fails, Google Analytics remains denied in the current page until a new explicit agreement is saved from that page.
3. Sign-in, security and preferences
Cookies can accompany requests to the website. Browser local storage keeps certain preferences; session storage keeps a reference during the page session. StockFriendly manages the following mechanisms; your browser may limit their lifetime or remove them sooner.
Sign-in: the __Host-stockfolio.session_token cookie contains an opaque token, without portfolio content. After sign-in, the Web flow requests a seven-day lifetime, renewable depending on activity after 24 hours. Sign-out expires this cookie and server revocation invalidates access. This cookie is restricted to stockfriendly.com, secured over HTTPS and inaccessible to page JavaScript.
Action protection: the csrf cookie protects actions associated with a session against forged requests. It lasts seven days from issue or reissue during an authorised profile request. It is restricted to the host, secured over HTTPS and readable by JavaScript to transmit the protection. Removal is attempted when the local session ends or after account deletion is accepted; it grants no access without a valid session.
Theme: the local key stockfolio-theme remembers your explicit light or dark theme choice. The application sets no expiry. Choosing the System theme removes this preference.
Deletion tracking: the session storage key stockfriendly.account-deletion.request-id lets you retrieve an accepted deletion request. This reference grants no access without an ownership check. The application sets no deadline; it attempts removal if the request is not found or the session is refused. A completed status does not automatically remove it.
The initial launch offers email and password sign-in. Google sign-in is not offered and its correlation cookie is not used by this flow. The Google Analytics choice is independent of account sign-in.
4. Withdrawing agreement or clearing a choice
To withdraw a saved agreement, open “Manage tracking” and choose “Refuse Google Analytics”. Refusal replaces the saved agreement and prevents new emissions. In the current state, GA4 is already disabled regardless of your choice.
The withdrawal mechanism also attempts to remove cookies whose names start with _ga and which the website can access. This does not guarantee removal of cookies inaccessible to the site and is not a request to erase data previously received by Google. A script already loaded in an older page may remain in memory with emission suspended.
If the browser prevents both saving refusal and removing the previous agreement, the current page blocks Google Analytics and displays an error. The old choice may remain saved: refuse again after reloading as the message requests. Agreement from another tab does not lift this block in the current page.
“Delete the saved choice” is a separate action: it removes the preference and allows a new choice. If removal fails, the choice remains in effect and an error appears. To withdraw agreement, use “Refuse Google Analytics”.
You can also clear site data in your browser settings. This may remove your preferences and sign you out. If local tracking of account deletion cannot be saved, a request already accepted by the server remains accepted.
5. Separate product-statistics choice
The “Product statistics” choice is saved in your account, without a new cookie or local storage. It applies to all your devices. It is offered as an unchecked option during email registration and in Account; your Google Analytics choice does not change it.
This optional agreement expires after six calendar months or a change to the information version. You can refuse or withdraw it in Account without restricting the service. Withdrawal immediately prevents new events and deletes pending intents; previous data must be purged within thirty days. You can agree again once this purge is complete.
The privacy policy describes the purposes, excluded data, recipients and retention of events and minimal choice evidence. Your agreement only permits collection when it is enabled for the service. Account, “Product statistics”, displays your choice and indicates when collection is disabled. Clearing browser data does not withdraw this account-linked choice: use Account, “Product statistics”.