GrabAlpha

Privacy Policy

Last updated: May 28, 2026

This Privacy Policy explains how GrabAlpha ("we", "us", "our") collects, uses, and protects information when you visit GrabAlpha (the "Service"). The Service is provided free of charge and is supported by advertising.

1. Information We Collect

GrabAlpha is designed to minimize personal data collection. We do not require accounts, do not collect email addresses, and do not store search queries beyond the duration of each request.

Information you provide: Stock ticker symbols and benchmark selections you submit. These are sent to our servers to fetch market data and are not retained.

Information collected automatically: Standard server logs (IP address, user agent, timestamp, requested URL) used for security, debugging, and abuse prevention. Logs are retained for up to 30 days.

Usage analytics: We use Vercel Web Analytics to understand aggregate traffic — such as page views and which interface language is in use. It is privacy-friendly and cookieless: it collects no personally identifiable information and does not track you across other sites. See "Third-Party Services" below.

Information stored on your device: Your theme preference (light/dark/system), language preference, and chart color convention (which colors represent gains and losses) are saved in your browser's localStorage under the keys grabalpha-theme, grabalpha-lang, and grabalpha-color-convention. These preferences stay on your device, are never sent to our servers, and contain no personal data.

2. Cookies and Similar Technologies

We do not set first-party cookies, and our usage analytics (Vercel Web Analytics) is cookieless. However, our advertising partner Google AdSense sets cookies to serve and measure advertising — see "Third-Party Services" below.

3. Third-Party Services

Google AdSense: We display advertisements served by Google AdSense. Google may use cookies and similar technologies to serve personalized ads based on your visits to this and other sites. You can manage or opt out of personalized advertising at google.com/settings/ads. For visitors in the EEA, UK, and Switzerland, Google's Funding Choices consent manager appears on first visit. For visitors in covered US states, an opt-out message is shown. See Google's ad privacy policy for details.

Yahoo Finance: Stock price data is retrieved from Yahoo Finance via server-side requests. Your IP address is not transmitted to Yahoo Finance directly — only our server's IP is visible to them.

Vercel Web Analytics: We use Vercel Web Analytics (provided by Vercel Inc.) to measure aggregate, anonymized usage such as page views and interface language. It does not use cookies, does not collect personal information, and does not build cross-site profiles. See Vercel's analytics privacy documentation.

Hosting (Vercel): The Service is hosted on Vercel (Vercel Inc.). As our hosting provider, Vercel processes standard request data — such as IP address and request metadata — to deliver and secure the Service; its privacy practices apply to these hosting logs. See Vercel's privacy policy.

4. How We Use Information

We use the limited information described above to (a) operate and improve the Service, (b) prevent abuse and ensure security, and (c) serve advertising via Google AdSense. We do not sell personal information.

5. Your Rights and Choices

Personalized advertising: Manage your preferences via the consent prompt on first visit, or at google.com/settings/ads.

EEA, UK, Switzerland (GDPR): You have the right to access, correct, delete, or object to processing of your personal data. Because we retain minimal data, most data-subject rights are satisfied by our collection limits. Contact us using the details below.

California (CCPA/CPRA): California residents have the right to know what personal information is collected, request deletion, and opt out of "sale" or "sharing" of personal information. We do not sell personal information. Advertising-related "sharing" with Google can be opted out via the consent prompt or Google's ad settings.

Other US states (VA, CO, CT, UT, TX, FL, OR, MT, and others): Similar rights apply. Use the consent prompt to manage advertising-related sharing.

6. Data Security

All traffic to GrabAlpha is encrypted in transit via HTTPS. Because we do not store personal information at rest, the surface area for data breaches is intentionally minimal.

7. Children's Privacy

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children.

8. International Transfers

The Service may be operated from servers located outside your country of residence. By using the Service you understand that information may be transferred to and processed in countries where data-protection rules differ from those in your country.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be made conspicuous on the homepage.

10. Contact

For privacy-related questions or to exercise your rights, contact us at grabalpha.info@gmail.com.

This policy is available in English. The English version is the authoritative version.