Privacy Policy

Last updated: 24 October 2026

This policy describes data handling on vestradar.com and in the VestRadar application at app.vestradar.com.

For privacy questions, contact VestRadar at support@vestradar.com.

Account and sign-in information

We store account identifiers, display names, email addresses, sign-in methods and associated security records. Email/password accounts use a password hash.

Wallet sign-in uses your public wallet address and a signed challenge. We do not request your wallet private key or seed phrase.

If you choose Google sign-in, we request basic identity information: Google's account identifier, verified email address and name. We use it to authenticate you and identify your VestRadar account. We do not request access to your Gmail, Google Drive or contacts.

Portfolio and import data

We store the portfolio names, currencies, transactions, instruments, amounts and comments you provide, calculated portfolio information, and import results, warnings and source references needed to manage your portfolios.

VestRadar JSON imports retain the original file content and filename in the import record. IBKR and OKX imports retain parsed financial data and import results, but do not retain the complete original statement file. IBKR filenames and source line references may remain in transaction notes.

Cookies and browser storage

The application uses cookies for anonymous identity, signed-in sessions and request protection. It uses local storage to remember your selected language. Blocking or clearing these cookies can prevent sign-in or access to an anonymous portfolio. Signing out or clearing cookies does not delete portfolio data.

Public pages offer optional Google Analytics for page views, visit sources, scrolling and link clicks. The Google tag loads only after you choose Accept optional cookies. Your choice is stored in this site's local storage; use Cookie settings to change it.

With your consent, Google receives page and referring-site information, browser/device and technical connection information, and scrolling/link-click events, including Open VestRadar. This integration does not send account or portfolio data, and advertising features are disabled.

Analytics cookies are limited to the public site. Choosing Reject optional cookies stops further analytics collection and removes these cookies. Previously collected analytics data remains subject to the Analytics property's retention settings.

The public pages do not create application sessions. The hosting provider processes technical connection and request information when serving pages.

Service providers and technical records

DigitalOcean hosts the service and database. Google processes sign-in when you select it. ZeptoMail delivers transactional messages and feedback; Zoho Mail handles support correspondence. These providers process the information necessary to provide their services.

Search terms, instrument identifiers and dates needed for market-data requests may be sent to EODHD, Coinranking and Open Exchange Rates. The market-data requests do not include your password, whole portfolio or original statement file.

We process request, error, security and import diagnostics to operate and protect the service. These records may contain account identifiers, request information and portfolio-related data. Service operators may access data as needed for support, operation and security.

We also use connection information, including IP addresses, to apply abuse-prevention limits.

We do not sell your personal information or use your Google sign-in information for advertising. Provider processing locations can differ from yours; the service may involve processing across national borders.

Feedback and support correspondence

Feedback sent through the application includes your message, category, reference, submission time, account or anonymous identifier, and any reply address you provide. It is delivered to the support mailbox. Email correspondence includes the content and contact details you send.

Closed correspondence is retained for 12 calendar months after the last message. Expired closed correspondence is reviewed and deleted manually each month. Unresolved correspondence is kept until resolution. Access to the support mailbox is limited to the VestRadar owner.

Application data and backups

The support-mail schedule does not apply to account, portfolio, diagnostic or backup data. Account and portfolio records do not have an automatic expiry just because you stop using the service or a session expires.

Deleting a portfolio removes its associated portfolio records from the live database. Diagnostic records and backup copies are handled separately; they are not necessarily removed immediately by deleting a portfolio. Backup copies may remain until they expire or are replaced.

Your questions and requests

You can edit portfolio records and export transactions in the application. For questions about accessing, correcting or removing your data, contact support@vestradar.com. We may need to verify account ownership before handling a request.

Please do not send passwords, wallet secrets or unnecessary financial records in support messages.

Policy updates

We update this page when data handling changes and show the revision date above. You can also read our Terms of Service.