Privacy Policy
Last updated: July 27, 2026
1. Who we are
Scanance (scanance.com) is a stock screening tool that provides technical analysis data for informational purposes. When we say “we”, “us”, or “Scanance” in this policy, we mean the operator of this website. Scanance is operated from Israel, and the operator is the data controller responsible for your personal data under the EU GDPR, UK GDPR, and Israel's Privacy Protection Law.
For any privacy question or request, contact us at [email protected].
2. What data we collect
We collect as little data as possible. Here is what we collect and why:
Data you provide
- Account information: If you create an account, we collect your email address and the information you use to sign in. This is used only for authentication and account management.
- Contact messages: If you reach out to us via email, we store the contents of that communication to respond to your inquiry.
Data collected automatically
- Analytics data: We use Umami, a self-hosted, privacy-focused analytics tool that sets no advertising or cross-site tracking cookies. It processes limited data that may be personal, such as an IP address (used only to derive an approximate country, then discarded), browser, operating system, referrer, and the pages viewed. We do not use this data to identify you. If you are in the EU, EEA, UK or Switzerland, this runs only after you allow it: nothing is measured until you choose. Elsewhere we rely on our legitimate interest in understanding, in aggregate, how the site is used so we can improve it, and you can object at any time in cookie settings.
- Page interaction data: For each page view we record a small set of first-party measurements so we can tell real visitors apart from automated traffic and see whether pages hold attention: whether a mouse or touch screen was used, a count of cursor movements (not their path), how far down the page you scrolled, how long the page was open, your screen size, and, if the cursor left the page area, which edge of the window it moved toward. This is stored with an approximate country (two-letter code), the page address, and a random identifier held in your browser. We deliberately do not store your IP address, your browser's user-agent string, or your account with these records. We do not record your cursor path, keystrokes, form contents, or screen, and we do not use this data to identify you. If you are in the EU, EEA, UK or Switzerland, none of this is recorded unless you allow it first. Elsewhere we rely on our legitimate interest in measuring genuine use of the site and detecting automated traffic. Either way you can switch it off at any time under Usage measurement in cookie settings. These records are deleted after 90 days.
- Notice and offer interactions: When you acknowledge our legal notice, subscribe to the email brief, follow a link to our social page, or close an on-site offer, we record that action with a timestamp, approximate country, and IP address. Acknowledgment records are kept as evidence that the terms were presented and accepted.
- Advertising measurement: We do not display third-party advertising on Scanance. We do advertise Scanance elsewhere, and we use Google Ads conversion tracking to measure whether an advert we paid for led to a signup or a subscription. Where this is active, Google sets a cookie and we store the Google click identifier from the advert you clicked, including against your account if you create one, so that a subscription starting after the free trial can be matched back to that click. If you are in the EU, EEA, UK or Switzerland, none of this runs until you allow it. Elsewhere it runs on our legitimate interest in knowing which adverts work, and you can switch it off at any time under Advertising measurement in cookie settings. Click identifiers are deleted after 90 days, or immediately if you turn advertising measurement off.
- Ad personalisation: Separately from the measurement above, Google can use your visit to build remarketing audiences and target adverts to you on other sites. This is off everywhere unless you switch it on under Ad personalisation in cookie settings. There is no regional exception and no default. If your browser sends a Global Privacy Control signal we treat it as an opt-out from both advertising measurement and personalisation, regardless of any setting stored on your device.
- Local storage: We store your preferences (theme choice, cookie consent, whether the disclaimer notice has been shown, whether you subscribed to the email brief, and a random identifier) in your browser's local storage. Preferences stay on your device. The random identifier is sent with the page interaction data described above so repeat views can be grouped without knowing who you are; it contains no personal detail and you can clear it at any time by clearing your browser data.
Data we do NOT collect
- We do not sell or rent your data
- We do not use Google Analytics or Facebook Pixel
- Ad personalisation and remarketing are off unless you switch them on
- We honour Global Privacy Control signals as an advertising opt-out
3. Cookies and similar technologies
Scanance uses minimal cookies:
| Cookie / Storage | Type | Purpose |
|---|---|---|
| scanance_theme | Essential | Remembers your light/dark mode preference |
| scanance_disclaimer | Essential | Remembers that the “not financial advice” disclaimer notice was shown |
| cookie_consent | Essential | Stores your cookie consent choice |
| scanance_anon_id | Analytics | Random identifier sent with page interaction data so repeat views can be grouped. Not set if you turn analytics off |
| scanance_terms_ack | Essential | Records that you acknowledged the legal notice, so it is shown once |
| scanance_exit_seen | Essential | Stops the on-site offer from reappearing for 7 days |
| scanance_digest | Essential | Remembers that you subscribed to the email brief, so we stop asking |
| Authentication session | Essential | Keeps you signed in (if you have an account) |
| Google Ads conversion cookies (_gcl_*) | Advertising measurement | Set by Google to record that an advert we paid for led to a signup or subscription. Opt-in in the EU, EEA, UK and Switzerland; elsewhere active until you turn it off in cookie settings. |
| Google click identifier (gclid) | Advertising measurement | Stored in your browser, and against your account if you create one, so a subscription that starts after the free trial can be matched to the advert you clicked. Deleted after 90 days. |
| Google Ads remarketing | Ad personalisation (opt-in) | Off by default everywhere. Only if you switch on Ad personalisation may Google use your visit to target adverts to you on other sites. |
You can manage your cookie preferences at any time through your browser settings. Clearing your browser data will reset all stored preferences.
4. How we use your data
We use the data we collect to:
- Provide and maintain the Scanance service
- Authenticate users who create accounts
- Remember your preferences (theme, disclaimer, cookie consent)
- Understand how the site is used in aggregate, including whether visits come from real browsers or automated clients, and whether pages hold attention
- Measure whether the notices and offers shown on the site are seen, accepted, or dismissed
- Respond to your questions or support requests
We do not use your data for automated decision-making that produces legal or similarly significant effects, and we do not build profiles to target you as an individual. Advertising measurement runs only if you turn it on in cookie settings. Our usage measurement is statistical: it describes how the site is used, and it is never used to make decisions about you personally.
5. Payment processing
If you purchase a premium subscription, payments are processed by a third-party payment provider who acts as the Merchant of Record. This means the payment provider is the legal seller of the subscription and handles all payment data (credit card numbers, billing addresses) directly. Scanance does not store or have access to your full payment card details.
The payment provider may collect information necessary to process your transaction, including your name, email, billing address, and payment method. Their use of your data is governed by their own privacy policy.
6. Data sharing
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share data only in these limited cases:
- Payment provider: To process premium subscriptions (see section 5)
- Legal requirements: If required by law, court order, or governmental authority
- Service protection: To prevent fraud, abuse, or security threats to the service
7. Data retention
Account data is retained for as long as your account is active. If you delete your account, we delete your data within 30 days, except where we are legally required to retain it.
Analytics event data is deleted or fully aggregated within 14 months.
8. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Withdraw consent for non-essential data processing
- Request a copy of your data in a portable format
- Object to data processing
- Request restriction of processing (for example, while a dispute about accuracy is resolved)
You also have the right to lodge a complaint with your supervisory authority: in the EU, your national data protection authority; in the UK, the Information Commissioner's Office (ico.org.uk); and in Israel, the Privacy Protection Authority. If you are in Israel, you additionally have the right under the Privacy Protection Law to inspect the personal data we hold about you and to request its correction.
To exercise any of these rights, email us at [email protected] or use our contact page. We will respond within 30 days.
9. International data transfers
Scanance is operated from Israel, and our own systems process your data there. Israel benefits from an adequacy decision of the European Commission and is recognised as providing adequate protection under the UK data-protection regime, so transfers of personal data from the EEA and the UK to Israel are permitted without additional safeguards.
Some service providers acting on our behalf are based in the United States and necessarily see request data such as your IP address: Cloudflare, which delivers and protects every request to this site, and Google, but only for advertising measurement and only if you have turned that on in cookie settings. These providers are engaged under data-processing terms that include the European Commission's standard contractual clauses. Our email is delivered by a self-hosted mail server we operate. We do not sell or share personal data with third parties for their own marketing.
10. Children
Scanance is not intended for anyone under 18 years of age. We do not knowingly collect data from minors. If you believe we have collected data from a minor, contact us and we will delete it.
11. Security
We take reasonable measures to protect your data, including encryption in transit (HTTPS), secure authentication, and restricted access to production systems. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
12. Legal bases for processing (EU/EEA/UK users)
If you are in the European Union, European Economic Area, or United Kingdom, we process your information based on the following legal bases:
- Contract performance: Processing necessary to provide the service to you (e.g., account authentication, displaying scan results)
- Consent: Where you have given consent for non-essential processing (for example, advertising cookies, if we enable advertising in future). You can withdraw consent at any time
- Legitimate interests: Processing necessary for our legitimate interests (for example, aggregate analytics to improve the service, and preventing fraud), where those interests are not overridden by your rights. You can object at any time
- Legal obligation: Where we are legally required to process your data
13. Data retention details
| Data type | Retention period |
|---|---|
| Account data (email, preferences) | Until account deletion + 30 days |
| Authentication sessions | Until logout or session expiry |
| Local storage (theme, consent) | Until you clear browser data |
| Analytics event data | Deleted or aggregated within 14 months |
| Page interaction data (scroll, dwell, cursor edge) | Deleted after 90 days |
| Notice and offer interactions (shown, dismissed, clicked) | Deleted after 180 days |
| Terms acknowledgment records | Kept while needed as proof the terms were accepted |
| Payment data | Handled by payment provider per their policy |
| Support emails | Up to 2 years after resolution |
We may retain certain data for longer periods where required by law (e.g., financial records, tax obligations) or to resolve disputes and enforce our agreements.
14. Third-party data providers
Scanance uses market data from third-party financial data providers. These providers may have their own privacy policies governing how they collect and process data. Scanance does not control and is not responsible for the privacy practices of third-party data providers.
15. California residents (CCPA and CPRA)
If you live in California, the California Consumer Privacy Act as amended by the CPRA gives you specific rights. This section describes how they apply here.
We do not sell your personal information. We have never done so. We do not share your personal information for cross-context behavioural advertising unless you switch on Ad personalisation in cookie settings, which is off by default for every visitor in every region; switching it back off stops it. We treat a Global Privacy Control signal from your browser as a binding opt-out from advertising measurement and personalisation alike, without requiring you to change any setting. We do not knowingly collect or sell the personal information of anyone under 16.
In the twelve months before the date at the top of this page we collected the categories described in section 2: identifiers (such as an email address if you create an account or subscribe to our email brief, and an approximate country), internet activity (pages viewed and the interaction measurements described above), and commercial information (subscription status). We collect it for the purposes in section 4, from the sources in section 2, and we disclose it only to the service providers named in section 9, who are contractually barred from using it for their own purposes.
You have the right to:
- Know what personal information we have collected about you, and the categories, sources, purposes and recipients
- Request a copy of that information in a portable form
- Request deletion of it, subject to exceptions such as records we must keep to show that our terms were accepted
- Request correction of inaccurate personal information
- Limit the use of sensitive personal information, which we note is not applicable because we do not collect any
- Not be discriminated against for exercising any of these rights. We do not offer different prices or a different service based on whether you exercise them
To exercise any of these rights, email [email protected] from the address associated with your account, or describe the request if you do not have an account. We verify a request by confirming control of the email address involved, and we respond within 45 days. You may use an authorised agent, in which case we may ask for proof of their authority. You may also turn off usage measurement and advertising at any time using the Cookie settings link at the bottom of any page, which is how we treat an opt-out preference signal.
16. Changes to this policy
We may update this privacy policy from time to time. If we make significant changes, we will post a notice on the website. The “Last updated” date at the top of this page indicates when the policy was last revised.
17. Contact
If you have questions about this privacy policy or how we handle your data, email us at [email protected] or use our contact page.