Datenschutzerklärung gemäß DSGVO / GDPR & TTDSG · Stand: August 2026
This privacy policy explains how thecompoundfamily.com collects, uses, and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR), the German TTDSG, and the German Federal Data Protection Act (BDSG).
Controller / Verantwortlicher:
Mykola Klymenko
c/o IP-Management #9740, Ludwig-Erhard-Straße 18, 20459 Hamburg, Germany
E-Mail: [email protected]
When you visit our website, Cloudflare automatically collects standard server log data:
Legal basis: Art. 6(1)(f) GDPR — legitimate interest in secure website operation. Log files are retained for a maximum of 30 days.
This website is hosted via Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). Cloudflare may set technically necessary cookies (e.g. __cf_bm, cf_clearance) for bot protection — no consent required under TTDSG § 25(2).
Data transfer to the USA is based on Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR. See: cloudflare.com/privacypolicy
All fonts (Playfair Display, DM Sans, DM Mono, JetBrains Mono) are served locally from our own server. No requests are made to Google Fonts or any external font CDN.
We use Cloudflare Web Analytics to understand aggregate site usage (page views, referrers, approximate country, browser type). This service is cookieless: it sets no cookies, does not fingerprint your device, and does not track you across websites. Individual visitors are not identified. Your IP address is processed transiently by Cloudflare, Inc. (USA) to deliver the measurement script and is not stored for analytics purposes.
Legal basis: Art. 6(1)(f) GDPR — legitimate interest in measuring aggregate site usage. Since no information is stored on or read from your device beyond what is technically necessary, no consent under § 25 TTDSG is required. Data transfer to the USA is covered by Standard Contractual Clauses (Art. 46(2)(c) GDPR). We do not use Google Analytics, Meta Pixel, or any behavioural or advertising tracking.
Purely mathematical tools (Compound Calculator, Monte-Carlo simulations, BPS Analyzer inputs) run in your browser; the figures you type into them are not stored on our servers. Tools that display market or company data (Stock Terminal, Valuation, Screener) request that data from our API (api.thecompoundfamily.com) — these requests include the ticker symbols you look up and standard connection data (IP address), used solely to answer the request. The tools use localStorage to remember your theme and language preference. Where a feature explicitly stores data for you (e.g. watchlists, portfolio import — see sections 2.12–2.13), this is stated on the respective page.
On some pages you can enable browser push notifications (e.g. macro-event alerts). If you actively grant permission, your browser generates a push subscription (endpoint URL and cryptographic keys), which we store on our server to deliver notifications. Delivery is handled by your browser vendor's push service (e.g. Google FCM, Apple Push, Mozilla Push), which may process data outside the EU.
Legal basis: Art. 6(1)(a) GDPR — your explicit consent via the browser permission prompt. You can revoke it at any time in your browser's site settings; revoking deletes the subscription's usability, and we remove stale subscriptions from our server.
If you contact us by e-mail, we process your name and e-mail address solely for the purpose of responding to your inquiry. Legal basis: Art. 6(1)(f) GDPR. Data is deleted once the inquiry is resolved.
We offer an optional email subscription to notify you about new features and updates. If you subscribe, your email address is transmitted to and stored by MailerLite UAB (J. Basanavičiaus 15, LT-03108 Vilnius, Lithuania — EU-based).
Legal basis: Art. 6(1)(a) GDPR — your explicit consent. You may withdraw your consent at any time by clicking "Unsubscribe" in any email.
MailerLite uses a double opt-in process: you must confirm your subscription via a confirmation email before being added to any list. MailerLite is GDPR-compliant and processes data within the EU. See: mailerlite.com/legal/privacy-policy
Art. 6(1)(a) DSGVO · Verarbeitungsvertrag gemäß Art. 28 DSGVO mit MailerLite abgeschlossen.
For paid subscriptions and services, payments are processed by Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland).
When you make a payment, the following data is transmitted to Stripe:
Legal basis: Art. 6(1)(b) GDPR — performance of a contract. Stripe may also use data for fraud prevention pursuant to Art. 6(1)(f) GDPR.
Stripe is PCI DSS Level 1 certified. Data is processed in the EU (Ireland). See: stripe.com/privacy
Art. 6(1)(b) DSGVO · Stripe Ireland Ltd. ist als Auftragsverarbeiter gemäß Art. 28 DSGVO tätig.
We offer the option to support our work via Buy Me a Coffee (operated by Buy Me a Coffee, Inc., 340 S Lemon Ave #3717, Walnut, CA 91789, USA).
If you use this service, you are redirected to the Buy Me a Coffee platform. Any data you provide there (e-mail, payment details) is processed by Buy Me a Coffee under their own privacy policy. We receive only confirmation of a successful donation.
Legal basis: Art. 6(1)(a) GDPR — your voluntary action.
Data transfer to the USA is based on the EU-US Data Privacy Framework and Standard Contractual Clauses. See: buymeacoffee.com/privacy
User registration, login, and session management are handled by Clerk, Inc. (548 Market St, PMB 72878, San Francisco, CA 94104, USA).
When you create an account or sign in, the following data is transmitted to and stored by Clerk:
Legal basis: Art. 6(1)(b) GDPR — performance of the contract (user account is required to access the service). Art. 6(1)(f) GDPR — legitimate interest in secure authentication and fraud prevention.
Data transfer to the USA is based on Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR. A Data Processing Agreement (DPA) pursuant to Art. 28 DSGVO has been concluded with Clerk. Clerk does not use your data for advertising or model training. See: clerk.com/legal/privacy
Session cookies set by Clerk (__session, __client_uat) are technically necessary for login functionality — no consent required pursuant to TTDSG § 25(2)(2).
Art. 6(1)(b) DSGVO · Art. 6(1)(f) DSGVO · Auftragsverarbeitungsvertrag gemäß Art. 28 DSGVO mit Clerk, Inc. abgeschlossen · Standardvertragsklauseln gemäß Art. 46(2)(c) DSGVO.
Our platform offers an optional AI-powered analysis feature ("AI Analysis") for premium subscribers. When you use this feature, the financial model outputs for the analyzed company (scores, metrics, sector data) are transmitted to Anthropic, PBC (548 Market St, PMB 90375, San Francisco, CA 94104, USA) to generate an AI interpretation.
Only anonymised financial model outputs (scores and public market data) are sent — no name, email, IP address, or any personally identifiable information.
Legal basis: Art. 6(1)(b) GDPR — performance of the premium service contract. Art. 6(1)(f) GDPR — legitimate interest in providing AI-enhanced analysis.
Data transfer to the USA is based on Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR. Anthropic's API does not use submitted data to train its models by default. See: anthropic.com/privacy
Art. 6(1)(b) DSGVO · Art. 6(1)(f) DSGVO · Standardvertragsklauseln gemäß Art. 46(2)(c) DSGVO.
Users who choose to connect a brokerage account use the service of Passiv Technologies Inc. ("SnapTrade") (360 Bay St Suite 900, Toronto, ON M5H 2V6, Canada). SnapTrade acts as an OAuth aggregation layer — it facilitates the secure connection between your brokerage account and this platform.
No trading orders are placed. The connection is read-only by default. SnapTrade does not receive your TCF password or email address.
SnapTrade is SOC 2 Type II certified. Data is stored in Canada and the USA. Transfer to third countries is governed by SnapTrade's sub-processor agreements. See: snaptrade.com/privacy
Art. 6(1)(b) DSGVO (contract fulfilment) · Art. 6(1)(a) DSGVO (consent) · Data transfer: adequacy decision Canada (Art. 45 DSGVO) + Standard Contractual Clauses for US sub-processors.
Users of Interactive Brokers may optionally synchronise their portfolio using Claude Code (Anthropic, PBC) in combination with the Interactive Brokers MCP (Interactive Brokers LLC, One Pickwick Plaza, Greenwich, CT 06830, USA). This is a voluntary, user-initiated action.
When syncing, the following data is transmitted from the user's own IBKR account to this platform:
This data is transmitted directly from the user's device to The Compound Family API (Cloudflare Workers) over encrypted HTTPS and stored in our D1 database. It is not shared with third parties. The user controls when syncs occur.
Art. 6(1)(b) DSGVO · Art. 6(1)(a) DSGVO · Interactive Brokers privacy policy: interactivebrokers.com/privacy
Stock pages can display an interactive price chart provided by TradingView (TradingView Inc., 470 Olde Worthington Road, Suite 200, Westerville, OH 43082, USA). The chart is embedded as an iframe from tradingview-widget.com.
The widget is not loaded automatically: it appears only after you actively click the chart placeholder (two-click solution). Before that click, no connection to TradingView is made and no data leaves this site. Once activated, your browser connects to TradingView's servers, which necessarily transmits your IP address and browser information to TradingView and may set third-party cookies; TradingView may process this data on servers in the USA. You can switch back to the built-in chart at any time (chart toggle on the page).
Art. 6(1)(a) DSGVO (consent by activation) · Art. 49(1)(a) DSGVO · TradingView privacy policy: tradingview.com/privacy-policy
tcf-theme — localStorage key — stores dark/light mode preference. No personal data. Duration: until browser data is cleared.
tcf-lang — localStorage key — stores language preference (EN/DE/RU/UA/ES/FR). No personal data.
__cf_bm, cf_clearance — Set by Cloudflare for bot protection. Strictly necessary. No consent required under TTDSG § 25(2)(2).
__session, __client_uat — Set by Clerk for user authentication and session management. Strictly necessary. No consent required under TTDSG § 25(2)(2).
cookieyes-consent — Set by our consent-management tool (see below) to remember your cookie choices. Strictly necessary for consent documentation. Duration: 12 months.
We do not set any marketing, analytics, or tracking cookies. Our web analytics (section 2.4) is cookieless.
To manage and document cookie consent we use CookieYes, a consent-management platform by CookieYes Ltd. (3 Warren Yard, Warren Park, Milton Keynes MK12 5NW, United Kingdom). The CookieYes script displays the consent banner, records your choices, and stores them in the cookieyes-consent cookie. The UK is covered by an EU adequacy decision (Art. 45 GDPR).
Legal basis: Art. 6(1)(c) GDPR — compliance with the legal obligation to obtain and document consent (§ 25 TTDSG, Art. 7(1) GDPR). See: cookieyes.com/privacy-policy
Gemäß TTDSG § 25 und Art. 6 DSGVO
Under GDPR you have the following rights:
To exercise these rights: [email protected]
You may also lodge a complaint with the national supervisory authority. In Germany: Bundesbeauftragte für den Datenschutz (BfDI).
Our website contains links to external sites (YouTube, Yahoo Finance, etc.). The respective provider's privacy policy applies to those sites. Our YouTube channel (@TheCompoundFamily) is operated by Google Ireland Ltd. — Google Privacy Policy.
This website is served exclusively over HTTPS (TLS encryption). Cloudflare provides additional DDoS protection and security filtering.
We may update this policy if our data processing or legal requirements change. The current version is always available at thecompoundfamily.com/datenschutz.html.
Letzte Aktualisierung / Last updated: Mai 2026 · inkl. Clerk, Anthropic, Stripe, MailerLite, SnapTrade, IBKR MCP