Privacy Policy

ChartLooper is operated by Jakob Wimmer in Germany. For privacy questions or to exercise your data-protection rights, contact [email protected].

The information we process depends on how you use ChartLooper and the consent choices you make:

• Account and support information, such as your name, email address, authentication details, and messages you send to us.
• Subscription information from Stripe, such as your plan, subscription status, billing interval, payment status, final checkout amount and currency, and limited payment-method details. ChartLooper does not store your complete card number.
• Necessary technical information used to deliver and secure the service, including authentication state, security logs, device and browser information, and IP address.
• With Analytics consent, public-page and demo usage information such as page title and path, permitted campaign parameters, referrer, traffic source, engagement time, approximate location, language, browser, device, scrolls, outbound clicks, and selected funnel events.
• With Marketing consent, advertising or affiliate attribution information such as Google Ads click identifiers, an opaque purchase transaction reference, conversion status, and PromoteKit referral code.

We process information only for the purposes and legal bases described below:

• To provide accounts, the demo, backtesting features, subscriptions, support, and security where necessary to perform our contract with you or pursue our legitimate interest in operating a secure service.
• To meet legal, accounting, fraud-prevention, and payment obligations where processing is required by law or supports our legitimate interests.
• To understand public website use and improve marketing performance through Google Analytics only when you consent to Analytics.
• To attribute paid subscriptions to Google Ads or PromoteKit partners only when you consent to Marketing.

When you enable Analytics, ChartLooper loads Google Analytics 4 (GA4) on public pages, the demo, login, and signup. Ordinary authenticated dashboard page navigation is excluded. GA4 helps us understand page views, engagement, acquisition channels, and the demo-to-subscription funnel.

• We do not send names, email addresses, form contents, auth codes, checkout query parameters, or arbitrary URL parameters to GA4.
• After a confirmed paid checkout, GA4 may receive an opaque transaction reference, plan, billing interval, final amount paid, and currency.
• Only recognized campaign parameters such as utm_source, utm_medium, utm_campaign, and Google click identifiers may be retained in a measured page URL.
• Google uses IP addresses during collection to derive approximate location and states that the IP address is discarded before Analytics data is logged.
• Google Signals, advertising personalization, heatmaps, keystroke capture, and session recordings are not enabled by this implementation.

When you enable Marketing, ChartLooper may use Google Ads conversion measurement and PromoteKit affiliate attribution:

• Google Ads receives a conversion event only after ChartLooper confirms that Stripe created a paid subscription. The event contains an opaque transaction reference, the final amount paid, and the currency, but no email address or name.
• Google Ads is configured without advertising personalization or remarketing.
• PromoteKit reads the via referral parameter and may store a promotekit_referral cookie for up to 90 days. The referral code is attached to Stripe Checkout so partner commissions can be calculated.

Necessary storage supports authentication, security, billing flows, and your consent preference. Optional technologies are disabled until you make the corresponding choice.

• Analytics enables GA4 identifiers such as _ga and related property cookies.
• Marketing may enable Google Ads attribution cookies such as _gcl_* and the PromoteKit referral cookie.
• Reject all leaves necessary storage enabled but prevents GA4, Google Ads, and PromoteKit tracking from loading.
• You can reopen Cookie Settings in the website footer at any time. Withdrawing consent stops future optional collection and ChartLooper makes a best-effort deletion of accessible optional first-party cookies.

We use service providers only where needed to run ChartLooper. These may include Supabase for authentication and data services, Stripe for billing, Google for consented Analytics and Ads measurement, PromoteKit for consented affiliate attribution, and hosting or email providers.

• Providers process information under their own terms and data-processing commitments.
• Some providers may process information outside your country, including in the United States. Where required, transfers rely on recognized safeguards such as adequacy decisions or standard contractual clauses.
• We do not sell your personal information.

We retain information only for as long as necessary for the purpose for which it was collected, contractual and legal requirements, dispute resolution, and security.

• GA4 user-level and event-level retention is configured conservatively; aggregate reporting may remain after user-level data expires.
• Cookie lifetimes are controlled by the relevant provider and may be renewed on later consented visits. You can withdraw consent or delete browser storage at any time.
• Account, subscription, invoice, and security records may be retained for the periods required by applicable tax, accounting, fraud-prevention, and legal obligations.

Reasonable technical and organizational measures are applied to protect your information. However, no method of transmission over the Internet is 100% secure.

You have the right to:

• Access the personal information we hold about you.
• Request corrections or updates to your information.
• Request deletion of your personal information.
• Object to or request restriction of certain processing.
• Withdraw consent at any time without affecting processing that occurred before withdrawal.
• Request data portability where applicable and lodge a complaint with your competent supervisory authority.

To exercise these rights, please contact us at [email protected].

This Privacy Policy may be updated from time to time. Updates will be posted on this page with the “last updated” date revised accordingly.