Privacy Policy
theSECfiles is built without user accounts. We collect as little personal data as possible and use optional features only when you request them.
Controller
Responsible party: Anna Sosnowski, c/o IP-Management #17839, Ludwig-Erhard-Str. 18, 20459 Hamburg, Germany. Contact: info@theSECfiles.com.
What We Store
- Search queries, used to resolve dashboards, improve results and rank public dashboard popularity.
- A salted SHA-256 hash of your IP. We do not store the IP in clear text.
- A hash of your User-Agent. We do not store the original string.
- Contact form messages, including the name, email, subject and message you submit.
- If you subscribe to the newsletter or watchlist notifications: an encrypted copy of your email plus a lookup hash for duplicate detection, confirmation and unsubscribe handling.
What We Do Not Store
- No personal accounts, no profile data, no logins.
- No server-side copy of your browser watchlist unless you separately opt in to email notifications for your watchlist.
- No sale of personal data and no sharing of personal data for cross-context behavioral advertising.
- No third-party analytics before you consent to analytics.
Local Browser Storage
Your watchlist is saved in your browser's local storage. It is not an account and does not sync across browsers. The Save and Load buttons export and import a JSON file that stays under your control.
Newsletter
Newsletter sign-up uses double opt-in. You can unsubscribe at any time via the link in every email. We use your email only to send the newsletter and manage subscription status.
Watchlist Notifications
If you enter an email address for your watchlist, we send a double opt-in confirmation. After confirmation, we monitor the selected dashboards for relevant filing or dashboard data changes and send email notifications. Each notification contains an unsubscribe link.
Analytics And Google Tag
We use Google Analytics through the Google tag only after you accept analytics in the consent banner. Until then, the Google tag is not loaded by your browser. If you accept, Google may process usage data, device/browser data, approximate location data and identifiers for analytics measurement. You can withdraw consent by clearing this site's local storage or browser data and then choosing a different option when the banner is shown again.
Provider: Google Ireland Limited for users in the European Economic Area and Switzerland, and Google LLC where applicable. Google may process data in countries outside your country of residence. More information is available in Google's privacy information and the Google Analytics privacy disclosures.
Legal Bases
- Consent: newsletter, watchlist email notifications and analytics after opt-in.
- Legitimate interests: security logs, rate limiting, abuse prevention and anonymous aggregate dashboard popularity.
- Pre-contractual or legitimate communication interests: contact form requests.
- Legal obligations: records we must keep to comply with applicable law.
Retention
We keep contact messages and operational logs only as long as needed for the relevant request, security, debugging or legal retention purposes. Pending double opt-in records may be removed if they are not confirmed. Confirmed email notification data is kept until you unsubscribe or request deletion.
Your Rights
Depending on your location, including the EU/EEA, UK, Switzerland and certain U.S. states, you may have rights to access, correction, deletion, restriction, portability, objection and withdrawal of consent. You may also have the right to lodge a complaint with a supervisory authority.
Processors And Sources
theSECfiles processes public SEC filing data and may request market price data from configured data providers. Hosting, email delivery and analytics providers may process data on our behalf where those features are used.
Deletion Requests
If you want a search query, hashed identifier, contact request, newsletter entry or watchlist notification entry removed, please contact us via the contact page or the imprint contact address.
Last updated: May 1, 2026.