Privacy policy

Last updated:

1. Who we are

Stock Broker Review ("we", "us") operates the website at stockbrokerreview.com. We are the data controller for the personal data described in this policy.

Exalo Media
Osingastate 13
8926 LK Leeuwarden
The Netherlands
exalo@europe.com

2. What data we collect

We collect three categories of data:

  • Data you give us — when you create an account we collect your email address and name. If you sign in via magic link, no password is stored.
  • Data we collect automatically — when you visit the site we log IP address, browser type, referrer, and pages viewed. When you sign in we log an audit event (e.g. "login", "password_changed") with your IP address, visible only to you in your account dashboard (action + timestamp, no IP shown). We use this to detect abuse and to understand which comparisons are popular.
  • Data from cookies — see cookie policyfor the specific cookies we set and why.

3. Why we collect it

We use the data to (a) run the comparison service, (b) remember your shortlist across visits, (c) detect and prevent abuse, (d) understand which content is useful, and (e) comply with legal obligations.

We do not sell personal data. We do not use your data for automated profiling or decision-making that produces legal effects.

For users in the EEA/UK, our legal bases under the GDPR are:

  • Article 6(1)(a) — consent — for non-essential cookies and for marketing emails (if we ever send them).
  • Article 6(1)(b) — contract — for account creation and shortlist persistence.
  • Article 6(1)(f) — legitimate interest — for abuse detection, aggregated analytics, and improving editorial content. We balance this against your rights and freedoms.

5. How long we keep it

Account data is kept until you delete your account. Server access logs are kept for 30 days and then deleted. Aggregated analytics (page views, no personal identifiers) are kept indefinitely.

6. Who we share it with

We use the following processors and services:

  • Cloudflare — hosting, edge cache, and DDoS protection
  • Self-hosted Matomo — internal, privacy-focused analytics

We do not share your data with brokers. We do not share your data with advertisers. We do not share data with third parties for marketing. We may disclose data if compelled by law.

7. Cookies

See our cookie policy for the full list, including how to opt out.

8. Your rights

If you are in the EEA/UK, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Data portability (where applicable)
  • Withdraw consent at any time (where processing is based on consent)
  • Lodge a complaint with your local data protection authority

To exercise any of these rights, emailexalo@europe.com. We respond within 30 days.

9. How to contact us

For privacy questions, see our contact page or emailexalo@europe.com.

10. Changes to this policy

We may update this policy. Material changes will be announced on the homepage for at least 14 days. The "last updated" date at the top of this page reflects the current version.