Privacy Policy
VEXA is an educational stock research website run by the operator of VEXA ("we", "us"). This page explains what personal data the site handles and why. We try to collect as little as possible. We do not sell personal data and we do not show advertising.
What we collect
- Account details. If you create an account we handle your email address and your password. The password is sent over an encrypted connection to our sign-in provider, Supabase, which stores only a salted hash. VEXA never stores your password. Supabase also records when the account was created and when you last signed in.
- Login cookie. After you log in we set one essential cookie in your browser. It is HttpOnly, marked Secure on the live site, and is used only to keep you logged in and to protect forms from forgery.
- Data saved in your browser. Your watchlist, portfolio, recent analyses, saved screener strategies, bookmarked news, preferences and cookie choice are stored in your browser's local storage on your own device. We do not receive them. You can clear them in Settings.
- Tickers you look up. When you open a stock or run a screen, the ticker symbols and settings you choose are sent to our server so it can fetch market data and calculate results. They are not linked to your account.
- Anonymous page counts. We count page views per page per day to see which pages are used. This does not store your IP address, does not use cookies and cannot identify you.
- Server logs. Our hosting provider records technical request details (IP address, time, address requested, browser type) for security and reliability. We do not use these logs to profile you.
- Optional analytics. No optional analytics service is currently switched on. If we add one, it will load only after you accept it in the cookie notice.
Cookies and local storage
| Name | Purpose | Type | Lasts |
|---|---|---|---|
| qs_session | Keeps you logged in and protects forms (CSRF) | Essential cookie | Up to 7 days |
| qs_consent | Remembers your cookie choice | Local storage | 12 months |
| qs_watchlist, qs_portfolio, qs_recent, qs_strategies, qs_news_bookmarks, qs_settings | Your saved lists and preferences | Local storage | Until you clear them |
Who else handles data
- Supabase provides sign-up, login and email delivery. It receives your email and password when you sign up or log in.
- Our hosting provider runs the site and sees request logs.
- cdnjs (Cloudflare) delivers the charting library. Your browser contacts it directly when a page loads, so it receives your IP address and browser details. The Inter font is served from VEXA itself.
- Market data and news providers (Yahoo Finance and, if configured, Finnhub) are contacted by our server only. They do not receive your personal details.
Why we use data, and our legal basis
We use your email and login to provide your account (performance of a contract). We use the essential cookie and security logs to keep the site working and safe (legitimate interests). We use optional analytics only with your consent, which you can withdraw at any time through "Cookie settings" in the footer.
How long we keep it
Account details are kept until you delete your account. Hosting logs are kept for the period set by the hosting provider, normally a few weeks. Anonymous page counts contain no personal data.
Your choices and rights
- You can delete your account yourself on the Account page. This removes your login and email from Supabase and clears the data VEXA saved in your browser.
- You can ask us for a copy of, or correction to, the personal data we hold, or to delete it. Depending on where you live you may also have the right to object to or restrict processing, and to complain to your local data-protection authority.
Security
Connections use HTTPS. Passwords are never stored by VEXA. Login tokens stay in an HttpOnly cookie that scripts on the page cannot read. No system is perfectly secure, so please use a unique password.
Children
VEXA is not intended for people under 18, and we do not knowingly collect their data.
Other countries
Our providers may process data in countries other than your own, including the United States.
Changes
If we change this policy we will update the date above. If a change is significant we will tell account holders by email.
Contact
Contact details for privacy questions will be published here by the site owner.