Privacy Policy

This Privacy Policy explains how personal data is processed when using this website.

1. Controller

Albin Krenz
Am Markt 22
14542 Werder (Havel)
Germany
Email: info@csstream.xyz

2. Hosting and Server Log Files

This website is hosted by Hetzner Online GmbH, which provides the technical infrastructure.

When the website is accessed, the following information is automatically recorded in server log files:

• IP address
• Date and time of access
• Requested URL
• HTTP status code
• Transferred data volume
• Referrer URL
• Browser type and version
• Operating system

These data are required to ensure stable and secure operation (Art. 6(1)(f) GDPR). Server log files are stored by the hosting provider for security and operational purposes and are automatically deleted according to the provider’s retention policies.

All data processing takes place in data centers within the European Union.

3. User Accounts

Certain features (e.g. watchlist) require a user account. For account creation and usage, the following data are processed:

• Email address
• Password (stored exclusively in hashed form)
• Account-related data (e.g. watchlist or preferences)

This processing is necessary to provide the service (Art. 6(1)(b) GDPR). Data is stored for as long as the account exists.

4. Cookies and Local Storage

This website uses essential cookies that are required for the operation of core functions.

An authentication cookie is used to keep users logged in across visits and to associate the account with personal features such as the watchlist. This cookie contains an anonymized authentication token and enables the system to recognize a previously logged-in user. It is not used for analytics, tracking, or marketing purposes.

The cookie is set for the domain ".csstream.xyz" and may therefore be accessed by subdomains when necessary for the functioning of the service. The cookie is a persistent cookie and is stored for up to 30 days (or until the user logs out or deletes their account). The processing is based on the legitimate interest in providing a secure and user-friendly login system and personalized functionality (Art. 6(1)(f) GDPR).

If Local Storage is used for storing watchlist data or user preferences:

Data stored in your browser’s Local Storage is not transmitted to the server unless explicitly stated. The use of Local Storage is based on the legitimate interest in providing user-friendly functionality (Art. 6(1)(f) GDPR).

5. Communication

If you contact us by email, your message including personal data is processed for handling your inquiry (Art. 6(1)(b) or Art. 6(1)(f) GDPR). Data is deleted when it is no longer required for processing your request.

6. Data Processing Agreement

A Data Processing Agreement pursuant to Art. 28 GDPR has been concluded with Hetzner Online GmbH. Hetzner processes personal data only as instructed and exclusively for hosting this website.

7. Disclosure of Data

Personal data is only transmitted to third parties where necessary for operating this website (e.g. hosting providers, content delivery networks). No further disclosures are made unless legally required or permitted.

8. Security Measures

Technical and organizational measures are implemented according to Art. 32 GDPR to protect personal data. This includes encrypted communication via TLS/HTTPS and hashed password storage.

9. Storage and Deletion

Personal data is stored only for as long as required for the specified purposes or as required by law.

• Server logs: Stored for security and operational purposes and deleted when no longer required for these purposes.
• User accounts: stored until deletion of the account
• Communication: stored until the inquiry is resolved

You may request deletion of your account at any time.

10. Rights of Data Subjects

You have the following rights under the GDPR:

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Right to lodge a complaint with a supervisory authority (Art. 77)

To exercise these rights, contact the controller using the contact details in Section 1.

If processing is based on consent, consent can be withdrawn at any time (Art. 7(3) GDPR). Withdrawal does not affect the lawfulness of processing prior to withdrawal.

11. Automated Decision-Making

No automated decisions or profiling are carried out.

12. Third-Party Libraries / CDN

This website loads the JavaScript library “Lightweight Charts” via the external CDN unpkg (operated by Fastly). When accessing this file, your browser connects to the CDN, transmitting your IP address and other technically required data.

The integration is necessary to display the charts and is based on our legitimate interest in providing a secure and efficient website (Art. 6(1)(f) GDPR).

No cookies or tracking technologies are used by this library to profile users.

13. Additional Information for California Residents (CPRA)

This website may be accessed by users from California. In accordance with the California Privacy Rights Act (CPRA), California residents have the following rights regarding their personal information:

• Right to know what personal information is collected and for which purposes
• Right to request deletion of personal information
• Right to correct inaccurate personal information
• Right to access personal information
• Right to data portability
• Right to object (Art. 21)
• Right to non-discrimination for exercising privacy rights

This website does not sell personal data within the meaning of the CPRA and does not share data for cross-context behavioral advertising. California residents may exercise their rights by contacting the controller using the information provided in Section 1.

14. Changes to This Privacy Policy

This Privacy Policy may be updated if technical changes or new features require it. The current version is always available on this page.