Privacy Policy.

This policy informs you about how we handle your personal data when you visit this website and use our services. We take the protection of your data very seriously.

01Data Controller

The controller responsible for data processing under the General Data Protection Regulation (GDPR) is:

02General Information on Data Processing

We process personal data only to the extent necessary to provide a functional website, to deliver our service, or to respond to your inquiries. Processing takes place on the basis of one of the following legal grounds:

• GDPR Art. 6(1)(a) — consent of the data subject
• GDPR Art. 6(1)(b) — performance of a contract or pre-contractual measures
• GDPR Art. 6(1)(c) — compliance with a legal obligation
• GDPR Art. 6(1)(f) — protection of legitimate interests

03When Visiting This Website

Server Log Files

Each time this website is accessed, our web server automatically collects a range of technical data, which is stored in so-called server log files. This includes:

• IP address of the accessing device (anonymized after processing)
• Date and time of access
• Page or file accessed
• HTTP status code of the response
• Volume of data transferred
• Referring website (referrer), if available
• Browser type and version, operating system

This data is processed exclusively for the purpose of ensuring the stable and secure operation of the website. Processing is based on GDPR Art. 6(1)(f) (legitimate interest in error-free operation and the security of the website). Server logs are deleted after a maximum of 14 days, unless security-relevant incidents require longer retention.

Cookies

This website does not use tracking cookies. Only technically necessary cookies are used, provided your browser confirms the corresponding requests. We do not use analytics tools such as Google Analytics, no Facebook Pixel, and no comparable third-party trackers.

Fonts (Google Fonts)

We embed fonts from Google Fonts to ensure a consistent display of the website. When the website is accessed, a connection to Google's servers (Google LLC, USA) is therefore established. In this process, your IP address is transmitted to Google. The legal basis is GDPR Art. 6(1)(f) (legitimate interest in an appealing presentation).

Note: A local integration of the fonts without a third-party connection is in preparation and will replace the connection to Google once implemented. Further information can be found in Google's privacy policy: https://policies.google.com/privacy.

04Contact by Email

If you contact us by email, the data you provide (name, email address, content of the message) will be processed for the purpose of handling your inquiry and any follow-up questions. The legal basis is GDPR Art. 6(1)(b) (pre-contractual measures) or GDPR Art. 6(1)(f) (legitimate interest in processing the inquiry).

The data collected in connection with your inquiry will be deleted once it is no longer required, but no later than upon expiry of any statutory retention periods.

05When Using Our Service

Once Feedrium is available as a service and you register, we collect the data necessary to provide our service:

• Email address for login, account recovery, and service notifications
• Password in encrypted form (Argon2id hash, never stored in plain text)
• Optional profile data such as name or selected location, if you voluntarily provide this in the settings
• Usage data: your subscribed feeds, saved bookmarks, subscribed stocks, read markers — this data remains exclusively on our servers and is never shared with third parties

Processing is based on GDPR Art. 6(1)(b) (performance of a contract). Your personal data is not disclosed to third parties, with the exception of the processors named under item 6.

06Recipients and Transfers to Third Countries

Personal data is only disclosed to third parties where necessary for the performance of the contract, where there is a legal obligation to do so, or where you have given your consent.

Hosting

This website and the Feedrium service are hosted on a server operated by IONOS SE in Germany. IONOS processes personal data on our behalf under a data processing agreement (GDPR Art. 28). The servers are located exclusively in data centers within the European Union.

Email Delivery

For sending service emails (e.g., account verification, password reset), we use IONOS's SMTP infrastructure. No data is passed on to external email service providers.

External APIs for Content

When using the Feedrium service, technical requests are made to the following external services, without any personal data being transmitted in the process:

• Open-Meteo (weather and geocoding) — no data transmitted other than the location you enter yourself
• Yahoo Finance (stock prices, market data) — no data transmitted other than the symbols you subscribe to
• RSS sources of the feeds you subscribe to — requests are made server-side by us; your IP address is not disclosed
• Stooq, ECB, NY Federal Reserve — for supplementary market data, without transmission of personal data

07Retention Period

We store personal data only for as long as necessary for the purposes for which it was collected, or as required by law.

• Server logs: max. 14 days
• Email correspondence: until your inquiry has been fully resolved, thereafter a maximum of 6 months
• Account data: for the duration of your use of the service; upon account deletion, all data is irrevocably deleted within 30 days, unless statutory retention obligations dictate otherwise

08Your Rights

You have the following rights at any time with respect to your personal data:

• Right of access (GDPR Art. 15) — you may request information about the data stored about you
• Right to rectification (GDPR Art. 16) — correction of inaccurate data
• Right to erasure (GDPR Art. 17) — also known as the «right to be forgotten»
• Right to restriction of processing (GDPR Art. 18)
• Right to data portability (GDPR Art. 20) — receipt of your data in a structured, commonly used format
• Right to object (GDPR Art. 21) — to processing based on legitimate interests
• Right to withdraw consent (GDPR Art. 7(3)) — with effect for the future
• Right to lodge a complaint with a supervisory authority (GDPR Art. 77) — the competent authority is, for example, the Data Protection and Freedom of Information Commissioner of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen)

To exercise these rights, an informal email to info@feedrium.com is sufficient.

09Data Security

We take comprehensive technical and organizational measures to protect your data:

• Full encryption of all connections via HTTPS (TLS 1.2 or higher)
• Passwords are stored exclusively as Argon2id hashes, never in plain text
• Regular security updates for the server and all components used
• Brute-force protection against unauthorized login attempts
• Daily backups, stored separately
• Strict access restrictions on the server and database

10Changes to This Policy

We reserve the right to amend this privacy policy if the legal situation changes or as we further develop our service. The current version is always available at this address. Registered users will be notified of material changes by email.

Last updated: April 2026