Login
LEGAL

Privacy Policy

How FinSenty handles your data, and the rights you have under the GDPR.

Last updated: 10.11.2026

I. Controller

The controller for the processing of your data on this website (Art. 13 GDPR) is:
App Fiction GmbH
Akazienstraße 3 A
10823 Berlin
Germany
E-Mail: mail@finsenty.com

You can contact the data protection officer by e-mail at privacy@finsenty.com.

II. Overview

FinSenty shows how finance and crypto media talk about the markets. You can use the pages free of charge and without an account (Free). An account is free as well; you need it for the paid subscription FinSenty Premium.

  • On our pages we use no third-party analytics, advertising or tracking services and embed no content from social networks. We measure reach ourselves on our server, without cookies and without a script (section III.9). The link to our profile on X is a plain link; no data flows until you follow it.
  • The services we use for market data and for analysing media content receive no data about our visitors and users.
  • We make no automated decisions within the meaning of Art. 22 GDPR.

III. What Data We Process

1. Visiting the Website and Server Logs

With every request, your browser sends technical data to our server. The web server logs:

  • IP address
  • Date and time of access
  • Requested address (URL) and request method
  • Response status code and amount of data transferred
  • The previously visited page (referrer), if your browser sends it
  • Browser type, version and operating system (user agent)

These logs are rotated daily and deleted after 14 days. In addition, the application writes a log of errors and processes, for example requested addresses, error messages and, for account and subscription operations, the internal user number or e-mail address. We delete this application log after 30 days.

The purpose is to deliver the website, find errors and keep our systems secure. This is our legitimate interest. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.

2. Hosting

The website, the database and the logs are stored on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre in Germany. Hetzner processes the data on our behalf (Art. 28 GDPR).

3. Cookies and Browser Storage

On our pages we only use cookies and browser storage that are technically necessary for the functions you use:

  • sessionid: keeps you signed in after login and remembers steps of the checkout. Valid for up to two weeks; logging out ends the session.
  • csrftoken: protects forms such as login and signup against forged requests. Valid for up to one year.
  • messages: shows short notices after an action, for example after logging out. Deleted once the notice is shown, at the latest when you close the browser.
  • finsenty.overview.outlookVisible (local storage of your browser): remembers whether you have hidden the Outlook line in the overview. The value is not sent to us and stays until you clear the site data in your browser.

The legal basis for storing and reading this information is Section 25 para. 2 no. 2 TDDDG; for the related processing it is Art. 6 para. 1 sentence 1 lit. b GDPR (account and subscription) and lit. f GDPR (security and your display setting). No consent is required for this. You can delete or block cookies in your browser; logging in will then not work.

4. User Account

When you create an account, we store your e-mail address, your password as a non-reversible hash, whether your e-mail address is confirmed, and the time of registration and of your last login. When you register, you confirm that you have taken note of the Terms & Conditions and this Privacy Policy. To prevent abuse, we briefly count failed login attempts together with the IP address and the e-mail address entered.

The account also holds the details of your subscription (section III.6): status, end of the paid period and the identifiers of the customer, the subscription and the latest checkout at the payment provider.

The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR, and lit. f GDPR for the abuse protection. We store the account data until you have your account deleted. You can request deletion at any time by e-mail to mail@finsenty.com. Data we must keep for commercial or tax law reasons, in particular on payments and invoices, is deleted only after the statutory periods have expired.

5. Account E-Mails

We send you e-mails that belong to your account: the confirmation of your e-mail address, the link to reset your password and the confirmation of receipt of a cancellation (section 6). For sending them we use Mailgun, a service of Mailgun Technologies, Inc., 112 E. Pecan Street #1135, San Antonio, TX 78205, USA, a company of the Sinch group. Mailgun receives your e-mail address, the content of the e-mail and technical delivery data and processes them on our behalf (Art. 28 GDPR). We use Mailgun's EU region: the e-mails are processed and stored in data centres in the European Union. Access from the USA, for example for support, cannot be ruled out; Mailgun Technologies, Inc. is certified under the EU-US Data Privacy Framework. The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR.

6. Premium Subscription and Payment

We handle the order, payment and management of the subscription through Stripe, a service of Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland.

  • When you start the checkout, we create a customer record at Stripe with your e-mail address and your internal user identifier.
  • On Stripe's payment page you enter your payment details (card or PayPal) and your address. The address is used to calculate tax. For a Business plan you can also enter your company name and a tax ID.
  • We do not receive your full payment details. From Stripe we receive and store the identifiers of the customer, the subscription and the checkout, the status of the subscription, the end of the paid period and the chosen plan. Stripe notifies our server about changes to the subscription; for this we store the identifier and type of each notification.
  • If you choose PayPal, PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg, also processes your data.
  • If you cancel via "Cancel contract here", we store the cancellation: your account e-mail address, the address for the confirmation, the type of cancellation, for an extraordinary cancellation the reason you give, the subscription identifier, the plan, the contract end, and the date and time of submission and of the confirmation. We send the confirmation through our e-mail service provider (section 5). This serves to carry out and prove your cancellation.

Stripe processes data partly on our behalf and partly under its own responsibility, for example to prevent fraud and to meet legal obligations. Stripe may also transfer data to the USA; Stripe, Inc. is certified under the EU-US Data Privacy Framework. Details: stripe.com/privacy.

The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR (conclusion and performance of the subscription) and lit. c GDPR (retention obligations under commercial and tax law). Payment and invoice data is kept for these statutory periods.

7. Fonts

Our pages use fonts that we host on our own server. Loading them makes no connection to a third party.

8. Contact by E-Mail

When you write to us by e-mail, we process your e-mail address and the information in your message in order to answer it. The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR if your request concerns an account or subscription, otherwise lit. f GDPR (our interest in answering requests). We delete the messages once the request is settled, unless a statutory retention obligation applies.

9. Reach Measurement

To understand which of our pages are used and where visitors come from, we evaluate page views statistically. For this we use the open-source software Umami, which we run ourselves on our server at Hetzner Online GmbH in Germany (section III.2). No data is passed to third parties.

The measurement takes place on our server only: the server reports the page view to Umami itself. Nothing is stored on or read from your device for this; we use no cookies and no script for it. We process:

  • the page visited and the time; from the address we take only details that mark a campaign (utm_source, utm_medium, utm_campaign)
  • the domain of the website you came from (referrer), without its exact address
  • browser, operating system, device type (smartphone, tablet or computer) and browser language
  • the country, derived from your IP address; we do not record region or city
  • for certain steps an event: sign-up completed, checkout started and return after a successful payment, each with the chosen plan (Personal or Business) where applicable

We use your IP address only briefly, to determine the country and to form a pseudonymous identifier. The identifier is computed with a secret key from the IP address and the browser identifier and changes daily, so we do not recognise you on another day. Umami does not store the IP address itself. Your name, e-mail address, user identifier and the identifiers at the payment provider are not passed on. We determine the country with the database "IP to Country Lite" by DB-IP, which we keep on our server and which is licensed under CC BY 4.0; your IP address is not sent to DB-IP for this.

The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest is to measure the reach of our service and to improve it. We store the data for 25 months and delete it afterwards.

Objection: You can object to the reach measurement at any time (Art. 21 GDPR). If "Do Not Track" or "Global Privacy Control" is enabled in your browser, we do not measure your page views. Alternatively, a message to privacy@finsenty.com is enough.

IV. Obligation to Provide Data

You do not have to give us any data to use Free. An account requires an e-mail address; Premium also requires the details asked for in the checkout. Without them we cannot provide the account or the subscription.

V. Your Rights

  • Right of access (Art. 15 GDPR): You can request information about your personal data processed by us.
  • Right to rectification (Art. 16 GDPR): If the information concerning you is not (or is no longer) correct, you can request rectification. If your data is incomplete, you can request completion.
  • Right to erasure (Art. 17 GDPR): You can request the deletion of your personal data.
  • Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of the processing of your personal data.
  • Right to data portability (Art. 20 GDPR): If you have consented to data processing or a contract for data processing exists and the data processing is carried out using automated procedures, you may have a right to data portability.
  • Right to object (Art. 21 GDPR): You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data based on Art. 6 para. 1 sentence 1 lit. f GDPR.
  • Right to withdraw consent (Art. 7 para. 3 GDPR): You can withdraw a consent at any time with effect for the future.
  • Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with the competent supervisory authority. A list of data protection officers and their contact details can be found here: bfdi.bund.de

An e-mail to privacy@finsenty.com or mail@finsenty.com is enough for your request.

VI. Changes

We update this Privacy Policy when the website or the processing changes. The version published here applies.