Privacy Policy

NordScreen (nordscreen.app) is an AI-powered stock screener. It is operated by Matias Salmela as an individual, not through a registered company. The contact form at nordscreen.app/contact is the primary channel for reaching us, including to exercise any of the rights described below.

We only collect what's needed to run the features you actually use. Specifically:

• Account information: if you sign up, your email address and (optionally) name, handled by our authentication provider, Clerk.
• App data tied to your account: your watchlist, saved searches, search history, and subscription status — stored as account metadata via Clerk, not in a separate database of ours.
• Search queries: the text you type into the search box is sent to Anthropic (to interpret it into filters) and to Financial Modeling Prep (to fetch matching stocks). These providers do not receive your name, email, or account identity alongside the query.
• Payment information: handled entirely by Stripe on its own secure checkout page. We never see or store your card details — only an opaque customer/subscription reference used to know your plan is active.
• Contact form submissions: your name, email address, and message, stored so we can reply, plus your account ID if you were signed in when you sent it.
• Technical data: your IP address, used only to prevent abuse and enforce fair-use search limits. It is held in server memory, never written to a database, and is automatically discarded within an hour.
• Anonymous usage statistics: we use Vercel Web Analytics, which does not use cookies and does not collect data that identifies you. It processes a temporary, hashed identifier that is discarded within 24 hours and reports only aggregate traffic numbers (e.g. how many people visited a page).

We do not buy, sell, or rent personal data, and we do not use it for advertising.

NordScreen uses very few cookies, and none for advertising or cross-site tracking:

• Authentication cookie (Clerk): strictly necessary to keep you signed in. Set only if you create an account.
• Bot-protection cookie (Cloudflare Turnstile, via Clerk): strictly necessary to prevent automated sign-ups. Set only during the sign-up process.
• Language and theme preference: stored in your browser's local storage, not a cookie. It never leaves your device and is only used to remember whether you prefer English or Finnish, and light or dark mode.

Because none of these are used for tracking or advertising, we don't show a cookie-consent banner — everything set is either strictly necessary for a feature you actively use, or (in the case of language/theme) never transmitted to us at all.

• Performance of a contract: account data, watchlist, saved searches, and subscription management exist to provide the service you signed up for.
• Legitimate interest: IP-based rate limiting and abuse prevention, to keep the service available and fairly usable for everyone.
• Legal obligation: payment records, retained as required by tax and accounting law.
• Consent: only where we explicitly ask for it — currently, nowhere on the site, since we don't run marketing or tracking cookies.

We use the following third-party services ("processors") to run NordScreen. Each only receives the data it needs to perform its specific function:

• Clerk — authentication and account data storage.
• Stripe — payment processing for NordScreen Pro subscriptions.
• Anthropic (Claude) — interprets your natural-language search queries.
• Financial Modeling Prep — supplies stock market data.
• Vercel — hosting, infrastructure, and web analytics.
• Upstash / Redis Cloud — stores site settings, usage statistics, and contact messages.

Some of these providers are based outside the EU/EEA (notably the United States). Where that's the case, we rely on the safeguards they provide for international transfers, such as Standard Contractual Clauses. We do not share your data with anyone beyond what's needed to run the service — no data brokers, no advertising networks.

• Account data (watchlist, saved searches, history, subscription status): kept as long as your account exists, deleted when you delete your account.
• Contact messages: kept until you ask us to delete them, capped automatically at the 200 most recent messages site-wide.
• IP addresses: never stored beyond server memory; cleared automatically within one hour.
• Payment records: kept as required by applicable tax and accounting law, typically several years, independent of whether you keep using the service.

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your national data protection authority — in Finland, the Office of the Data Protection Ombudsman (tietosuojavaltuutetun toimisto).

To exercise any of these, use the contact form at nordscreen.app/contact. You can also delete most of your own data directly: removing items from your watchlist, saved searches, or history deletes them immediately; deleting your account (via your account settings) removes the rest.

NordScreen is not directed at children. You must be at least 16 years old to create an account or use the service.

We apply reasonable technical measures to protect your data, including encrypted connections (HTTPS) for all traffic, rate limiting and abuse detection, and restricted access to administrative tools. No system is perfectly secure, but we take reasonable steps appropriate to the scale of a service like this.

We may update this policy as the service changes. The "Last updated" date at the top reflects the most recent revision. Material changes will be noted on the site.

Questions about this policy or your data: use the contact form at nordscreen.app/contact.