Privacy policy
This policy explains how QuantLeaks, operated by Breathe IT AS ("we"), processes personal data. We are the data controller. Questions or requests: privacy@quantleaks.com.
What we collect
Account data (email, and an optional name and password hash) when you register. Newsletter data (email) when you subscribe. Basic technical logs (IP, user agent) needed to operate and secure the service. We do not sell personal data, and we do not use it for third-party advertising.
Feedback you choose to send us using the ✎ button on a page section: the message itself, which section it came from, an email address if you give one, and the account it came from if you are signed in. We do not store your IP address or browser details with a feedback message. Feedback is read by our staff so we can act on it. Please leave out sensitive personal details, and information about other people, when you write to us.
Why, and the legal basis
To provide the account and watchlist you request (contract), to send the newsletter you opt into (consent, withdrawable at any time), to review and act on feedback you send us (legitimate interest in correcting our data and improving the service), and to keep the service secure and working (legitimate interest).
Cookies
We use a strictly necessary session cookie for sign-in and a small non-sensitive display cookie so the menu can show your account. We do not use advertising or cross-site tracking cookies. Because we set no non-essential cookies, there is no cookie banner to click through.
Analytics
We measure aggregate traffic — page views, referrers, country, device type, and which features are used — with privacy-friendly analytics hosted in the EU. It sets no cookies, stores no IP addresses, assigns no persistent identifier, and cannot follow you across other websites. The result is a count of visits, never a profile of a visitor. Our legal basis is legitimate interest in understanding how the service is used; because no personal data is stored, there is nothing here to request access to or deletion of.
Retention & your rights
We keep account data while your account is active and newsletter data until you unsubscribe. We keep feedback messages for up to 24 months, and delete or anonymise them sooner once the issue is resolved. If you close your account, feedback you sent is kept but is no longer linked to you. Under the GDPR you may request access, correction, deletion, portability, or object to processing — email us and we will respond within one month. You may also complain to the Norwegian Data Protection Authority (Datatilsynet).
Processors
We host on Microsoft Azure (EU region) and use email and analytics providers strictly to run the service. A current list is available on request.