1. Who we are
Stockio (“we”, “us” or “our”) operates Stockio.com from British Columbia, Canada. We are responsible for personal information under our control and handle it in accordance with British Columbia's Personal Information Protection Act (“PIPA”) and, where it applies, Canada's Personal Information Protection and Electronic Documents Act (“PIPEDA”). Where other privacy laws apply to visitors from outside Canada, we aim to honour the rights they give you, as described in section 12.
This policy explains what personal information we collect when you visit the site, use our tools or contact us, how we collect it (including through cookies and similar technologies), why we use it, who we share it with, how long we keep it, and the choices and rights you have. It should be read together with our Cookie policy and Terms of use.
2. Summary
- Your tool input stays in your browser. Text, code, images and files you enter into our tools are processed on your device and are not sent to our servers.
- No accounts, no sign-up. You can use everything on Stockio without giving us your name, email or payment details.
- We measure how the site is used. We use analytics, including cookies and similar technologies, to count visits and understand which pages and tools are useful. You can block or delete these at any time (section 13).
- We never sell your personal information and we do not use it for targeted advertising.
- You have rights. You can ask to access, correct or delete your information and complain to a privacy regulator.
3. Information we collect
Tool input
Most of our tools run entirely in your browser using JavaScript. What you paste or upload is processed in your device's memory and disappears when you close or reload the page. We do not receive, store or see it, and it is never included in our analytics.
A few tools reach out to the internet on your instruction. The API latency tester, for example, sends a request from your browser directly to the web address you enter. That request goes to the site you chose, not to us, and that site will receive your IP address and normal browser information under its own privacy policy.
Usage and analytics information
When you browse Stockio, analytics technologies automatically record information about your visit, such as:
- the pages and tools you view, the order you view them in, and how long you stay;
- the website, search engine, link or campaign that brought you to us (the “referrer”);
- the buttons, links and menus you click, how far you scroll, and other interactions with the page;
- your approximate location (country, region or city), estimated from your IP address;
- your browser, operating system, language, screen size and device type (desktop, mobile or tablet);
- page loading speed and technical errors; and
- a randomly generated identifier stored in a cookie, used to tell new visits from returning ones and to group the pages viewed in a single session.
We use two kinds of analytics:
- Cookie-free visitor statistics provided by our hosting platform. These set no cookies, store nothing on your device, do not keep IP addresses and cannot recognise you on a later visit.
- A third-party web analytics service that uses first-party cookies and similar technologies to produce aggregated reports about visits and traffic sources. According to the provider, IP addresses are used to estimate location and are not stored in our reports. We do not use this service's advertising features, and we do not combine analytics data with other information to identify you.
Analytics information on its own does not tell us your name or contact details. In some jurisdictions, however, online identifiers such as cookie IDs and IP addresses may be treated as personal information, so we protect them as such.
Log, device and security information
Like any website, the servers and networks that deliver Stockio receive technical information with every request, such as your IP address, the page requested, the date and time, the referrer and your browser's user-agent string. Our hosting and content-delivery providers process this information to serve pages, balance load, detect bots, keep the site secure and prevent abuse, and keep it in short-lived server logs.
Error and performance information
If a page or tool fails, technical details about the error (for example the page address, browser version and an error message) may be recorded so we can find and fix the problem. We design error reports so they do not include what you typed into a tool.
Web fonts and website icons
Some of our typefaces are delivered by a third-party font service, and the small website icons (favicons) shown next to listings on our Resources pages are fetched from a third-party icon service. When your browser downloads these files, the provider receives your IP address and normal browser information, as with any web request. We do not ask these providers to set cookies.
When you contact us
If you email us, for example with a question, a tool request, a bug report, a privacy or copyright request, or a sponsorship enquiry, we receive your email address, your name if you include it, and anything you choose to write or attach. We use it only to reply and to deal with your request.
Information we do not collect
We do not ask for or knowingly collect sensitive information, such as health, financial account, government ID, biometric, precise geolocation, racial or ethnic origin, religious or political information. We do not run user accounts, take payments or build advertising profiles. Please do not send us sensitive information by email.
4. Cookies and similar technologies
Cookies are small text files a website asks your browser to store. Similar technologies include pixels, scripts, local storage and server logs. We use them to measure visits and keep the site secure; we do not use them for advertising or to track you across other websites. Our Cookie policy lists the categories we use, how long they last and how to control them.
Do Not Track and Global Privacy Control
There is no common industry standard for responding to browser “Do Not Track” signals, and Stockio does not currently change its behaviour when it receives one. Because we do not sell personal information or share it for targeted advertising, there is no sale or sharing for a Global Privacy Control signal to opt you out of. You can still block analytics using the methods in section 13.
5. Why we use personal information
We collect, use and disclose personal information only for purposes a reasonable person would consider appropriate in the circumstances, namely to:
- deliver the website and make our tools work on your device;
- understand, in aggregate, how visitors find and use Stockio, which pages and tools are useful, and where people get stuck, so we can improve content and design;
- measure the reach of our content and, in aggregate, the performance of sponsored placements (without sharing your personal information with sponsors);
- monitor performance, fix errors and keep the site fast and available;
- detect, investigate and prevent security incidents, spam, fraud, scraping and abuse;
- respond to your messages and requests, including privacy, copyright and accessibility requests;
- manage sponsorship and advertising relationships with businesses; and
- comply with legal obligations, enforce our Terms of use and protect our legal rights.
We do not use personal information for automated decision-making that produces legal or similarly significant effects for you, and we do not sell it or use it to build advertising profiles.
6. Consent and legal bases
By using the site after being given notice through this policy and our Cookie policy, you consent to the collection, use and disclosure of personal information described here, as permitted by PIPA and PIPEDA. We rely on implied consent only for purposes that are obvious from the context and not sensitive, such as aggregated analytics or replying to an email you send us. You may withdraw consent at any time, subject to legal or contractual restrictions, by blocking or deleting cookies (section 13) or by contacting us. Withdrawing consent may mean some features work differently or we cannot respond to a request.
Where the EU or UK General Data Protection Regulation (“GDPR”) applies, we rely on: our legitimate interests in running, securing and improving the site and understanding its audience; your consent, where the law requires it for cookies or similar technologies; performance of a request you make, such as answering your email; and compliance with legal obligations.
7. How we share information
We do not sell or rent personal information, and we do not “share” it for cross-context behavioural or targeted advertising, as those terms are defined in US state privacy laws. We disclose it only to:
- Service providers that work on our behalf: website hosting and content delivery, analytics, error monitoring, font and icon delivery, and email. They may use the information only to provide their services to us, must protect it, and may not use it for their own advertising;
- Professional advisers such as lawyers, accountants and insurers, where needed;
- Authorities or others when required or permitted by law, for example to respond to a valid court order, subpoena or other legal request, or to protect the safety, rights or property of Stockio, our visitors or the public; and
- A successor organization if Stockio is involved in a merger, sale, financing or reorganization, subject to this policy and applicable law.
We may publish or share aggregated, de-identified statistics (for example, total monthly visits or the most popular tools) that cannot reasonably be used to identify anyone. A list of the service providers we currently use is available on request.
8. Affiliate links and sponsors
Sponsors and affiliate partners do not receive personal information from us, and sponsor placements on Stockio do not contain tracking pixels. If you click an affiliate link, the destination site may use cookies or link parameters to record that you arrived from Stockio and to credit us for a purchase or sign-up. That tracking is controlled by the destination site under its own privacy and cookie policies.
9. Storage and processing outside Canada
Some of our service providers store or process information outside Canada, including in the United States and the European Union, and in other countries where they or their sub-processors operate. When information is outside Canada, it is subject to the laws of that country and may be accessible to its courts, law-enforcement and national-security authorities. We choose reputable providers and take reasonable contractual and other steps to ensure a comparable level of protection. Where the GDPR applies to a transfer, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.
10. Retention
We keep personal information only as long as needed for the purposes above or as required by law, then securely delete or anonymize it:
- Cookie-free visitor statistics: detailed data for 90 days; daily totals for up to one year.
- Analytics reports based on cookies: no longer than 14 months, after which event-level data is deleted automatically. Aggregated totals may be kept longer.
- Analytics cookies on your device: up to two years unless you delete them sooner (see our Cookie policy).
- Server and security logs: generally a few days to a few weeks, unless needed longer to investigate an incident.
- Emails and requests: up to two years after our last exchange, unless we need them longer to resolve a dispute, enforce our terms or meet a legal obligation.
11. Safeguards and breaches
We protect personal information with security measures appropriate to its sensitivity, including encrypted HTTPS connections, access limited to people who need it, strong account security with our providers, and data minimization, meaning we avoid collecting what we do not need. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach of security safeguards creates a real risk of significant harm, we will notify affected individuals and the relevant privacy regulators, and keep records of breaches, as required by law.
12. Your rights
Everyone
Subject to legal exceptions, you have the right to:
- access the personal information we hold about you and learn how it has been used and to whom it has been disclosed;
- request correction of information that is inaccurate or incomplete;
- request deletion of information we no longer need;
- withdraw consent to further collection, use or disclosure; and
- complain about our handling of your information, to us or to a regulator.
Visitors in the EEA, UK and Switzerland
Where the GDPR or similar law applies, you also have the right to erasure, to restrict or object to processing (including processing based on legitimate interests), to data portability, to withdraw consent at any time without affecting earlier processing, and to lodge a complaint with your local data protection authority.
Visitors in US states with privacy laws
If you live in California or another US state with a consumer privacy law, you may have the right to know what personal information we collect and disclose, to access, correct and delete it, to opt out of its sale, “sharing” for targeted advertising or profiling, and to appeal a decision we make about your request. We do not sell or share personal information for targeted advertising and do not use sensitive personal information to infer characteristics about you. We will not discriminate against you for exercising your rights. You may use an authorized agent, who must provide proof of authority.
How to make a request
Email privacy@stockio.com. Because we do not run accounts and our analytics does not tell us who you are, we usually hold no personal information we can link to you unless you have emailed us; it helps if you tell us which email address you used. We may need to verify your identity, and we will respond within 30 days, or tell you if we need more time as the law allows. Requests are free unless they are clearly unfounded or excessive. If we refuse a request, we will explain why and how you can appeal or complain.
13. How to opt out of analytics and tracking
- Browser settings. Block or delete cookies, or block third-party cookies and site data. See our Cookie policy for links to instructions for common browsers.
- Privacy features and extensions. Browsers such as Firefox, Safari, Brave and Edge offer tracking protection, and content-blocking extensions can stop analytics scripts from loading. Stockio's tools and guides keep working when analytics is blocked.
- Private browsing. Private or incognito windows delete cookies when you close them.
- Mobile devices. Your device settings may let you limit tracking and reset advertising identifiers.
Blocking cookies stops analytics from recognising your browser between visits. Basic, cookie-free visit counts and short-lived server logs may still be recorded, because they are needed to deliver and secure the site and do not identify you.
14. Children
Stockio is not directed to children under 13 (or under 16 where local law sets a higher age), and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, please contact us and we will delete it.
15. Third-party websites
Our articles and Resources pages link to many third-party websites. We are not responsible for their content or privacy practices, which may include their own cookies, analytics and advertising. Please read the privacy policy of any site you visit.
16. Changes to this policy
We may update this policy as the site, our service providers or the law change, for example if we add new tools, analytics or advertising. We will change the “Last updated” date above and, for significant changes, may add a notice on the site and ask for your consent where the law requires it. Please check this page from time to time.
17. Privacy officer and complaints
Our privacy officer is responsible for compliance with this policy. Contact: privacy@stockio.com — Stockio, British Columbia, Canada.
If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada. Visitors in the EEA, UK or Switzerland may contact their local data protection authority.