Privacy Policy
Effective 16 July 2026 · whyitmoved.xyz
WhyItMoved is a small, independently operated service based in France. Questions or requests about your data: contact@whyitmoved.xyz.
What we collect
- Account data — your email address and a salted hash of your password (we never store the password itself). Creating an account is optional until you buy credits.
- Usage data — the lookups you run (ticker, date, time, language), likes, and any feedback text you submit.
- Technical data — your IP address, coarse device/browser type, and the referrer or campaign tag of your first visit. We use these to prevent abuse (rate limits, spend caps), to keep the service working across browsers, and to understand which channels visitors come from.
Cookies
We set first-party cookies only — no advertising or cross-site tracking:
| Cookie | Purpose | Lifetime |
|---|---|---|
| wim_sess | Keeps you signed in (signed session) | 90 days |
| wim_anon | Counts your free research allowance without an account | 5 years |
| wim_src | Remembers how you first found the site (e.g. "producthunt") | 180 days |
Payments
Payments are processed by Stripe. Your card details go directly to Stripe — we never see or store them. We keep a record of each purchase (amount, credits granted, timestamp) as required for accounting.
Processors we use
- Stripe — payment processing.
- Google (Gemini API) — generates the explanations. A query contains the stock symbol, date/time, and answer language — never your name, email, or IP. Google may process these queries on servers outside the EU.
- Yahoo Finance — chart and symbol data, requested by our server on your behalf (Yahoo sees our server's requests, not you).
- Hetzner — hosting, in the EU (Germany).
We do not sell your data and we do not run third-party ads or analytics.
How long we keep data
- Raw activity events: about 90 days, then reduced to anonymous daily totals.
- Account data: for as long as your account exists.
- Purchase records: as long as accounting law requires.
Your rights
Under the GDPR you can ask for access to, correction of, deletion of, or a copy of your data, and object to processing based on legitimate interest. Email contact@whyitmoved.xyz from your account address and we'll handle it — deletion requests are honoured within 30 days (purchase records we must keep for accounting are retained). You can also lodge a complaint with your data-protection authority (in France, the CNIL).
Changes
If this policy changes materially, we'll note the new effective date here.