Privacy Policy

Last updated: 15 October 2026

This English translation is provided for your convenience. The German version ("Datenschutzerklärung") is the legally binding version; in case of discrepancies, the German text prevails.

1. Controller

The controller responsible for data processing on this website is:

OptionsMastery GmbH
Eschenbachstr. 25
97762 Hammelburg, Germany
E-mail: info@edgeseeker.io

2. General Information on Data Processing

2.1 Scope of Processing of Personal Data

As a rule, we process personal data of our users only to the extent necessary to provide a functioning website as well as our content and services.

2.2 Legal Basis

Personal data is processed on the basis of the EU General Data Protection Regulation (GDPR):

  • Art. 6 (1) (a) GDPR (consent)
  • Art. 6 (1) (b) GDPR (performance of a contract)
  • Art. 6 (1) (f) GDPR (legitimate interest)

3. Data Collection When Visiting the Website

3.1 Log Files

Each time our website is accessed, we automatically collect data and information from the computer system of the accessing device. The following data is collected:

  • User's IP address
  • Date and time of access
  • Pages accessed
  • Browser type and version
  • Operating system used
  • Referrer URL

The data is stored in the log files of our system. This data is not stored together with other personal data of the user.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in technical security and optimisation)

Retention period: 30 days

4. Registration and User Account

4.1 Registration

Registration is required to use our Platform. We collect the following data:

  • E-mail address
  • Full name (when accepting the Terms and Conditions)
  • Password (stored in encrypted form via Auth0)
  • Selected subscription plan
  • Payment information (processed via Stripe)

Legal basis: Art. 6 (1) (b) GDPR (performance of a contract)

4.2 Authentication via Auth0

We use Auth0 for authentication. Auth0 is a service of Okta, Inc., 301 Brannan Street, San Francisco, CA 94107, USA.

As part of authentication, Auth0 processes:

  • E-mail address
  • Time of login
  • IP address
  • Device information

Further information: https://auth0.com/privacy

Data transfer to the USA: Auth0 is Privacy Shield certified.

5. Payment Processing

5.1 Stripe

We use Stripe for payment processing. Stripe is a service of Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA.

Stripe processes:

  • Payment data (credit card number, etc.)
  • Billing address
  • E-mail address
  • Transaction data

Further information: https://stripe.com/privacy

Legal basis: Art. 6 (1) (b) GDPR (performance of a contract)

5.2 Stored Data

In our database we store only:

  • Stripe Customer ID
  • Stripe Subscription ID
  • Subscription status
  • Subscription plan

Payment data (credit card numbers, etc.) is NOT stored in our database, but exclusively at Stripe.

6. Cookies and Tracking

6.1 Necessary Cookies

We use the following technically necessary cookies:

Cookie name Purpose Duration
rr_access_token Auth0 JWT token for authentication Session
rr_session_id Session management for single-session enforcement Session

Legal basis: Art. 6 (1) (f) GDPR (technical necessity)

6.2 Partner Programme Cookies (FirstPromoter)

For our partner/referral programme we use FirstPromoter, a service of IGIL WEBS S.R.L., Strada Ploiești 9, Cluj-Napoca 400157, Romania (EU). If you open our website (edgeseeker.io) or the Platform via a partner's referral link, the FirstPromoter script sets the following cookies in your browser:

Cookie name Purpose Duration
_fprom_ref Identifier of the referring partner (attribution of a later purchase) 60 days
_fprom_tid Identifier of the click on the referral link 60 days

The cookies are only set if you arrive via a referral link. If you take out your first subscription within their lifetime, we transmit your e-mail address to FirstPromoter so that the purchase can be attributed to the partner and their commission can be settled. In our database we store the partner identifier as well as the dates of your registration and your first subscription.

Further information: https://firstpromoter.com/privacy

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in settling partner commissions)

6.3 Partner Discount Cookie (rr_partner_ref)

If you reach our website via a partner's referral link, we store the partner code and the time of the click in a cookie of our own so that the discount agreed with that partner can be applied on the platform.

Cookie name Purpose Duration
rr_partner_ref Partner code and click time for the partner discount (domain .edgeseeker.io) 30 days

This cookie is strictly necessary to provide the discount you asked for (Section 25 (2) No. 2 TDDDG).

Legal basis: Art. 6 (1) (b) GDPR (steps taken at your request prior to entering into a contract)

6.4 Consent Management

We store your choice in the cookie banner (accept or decline) in your browser's local storage (es_consent) so that we do not ask you again on every page. You can change or withdraw your choice at any time via the "Cookie Settings" link in the website footer.

Legal basis: Art. 6 (1) (c) in conjunction with Art. 7 (1) GDPR (proof of consent); Section 25 (2) No. 2 TDDDG

6.5 Meta Pixel (only with your consent)

With your consent, our website (edgeseeker.io) uses the Meta Pixel of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland ("Meta"). It lets us measure how our ads on Facebook and Instagram perform (for example, whether a click on an ad leads to a webinar registration) and build audiences for ads.

The Meta Pixel is loaded only after you click "Accept" in the cookie banner. It sets cookies (including _fbp, lifetime up to 90 days) and transmits the following data to Meta: IP address, browser and device information, pages visited, time of visit, referrer, and the events "page view" and "registration" (Lead). We do not send your form entries (e.g. your email address) to Meta. If you are logged in to Facebook or Instagram, Meta may link the data to your account.

We and Meta are joint controllers for collecting the data and transmitting it to Meta (Art. 26 GDPR); the agreement: https://www.facebook.com/legal/controller_addendum. Meta alone is responsible for any further processing. Meta may transfer data to the USA; Meta is certified under the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023).

Meta's privacy policy: https://www.facebook.com/privacy/policy

Legal basis: Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG (consent). You can withdraw your consent at any time with effect for the future via "Cookie Settings" in the footer.

6.6 Analytics

Beyond this, we currently do not use any analytics tools.

7. External Services

7.1 Financial Modeling Prep (FMP) API

We use the FMP API for market data. API requests are made exclusively from our servers (server-to-server). No personal data is transmitted to FMP.

7.2 Redis (Database)

We use Redis for the temporary storage of session data and caching. Redis is operated on our own servers or at our hosting provider (Render.com).

7.3 PostgreSQL (Database)

We use PostgreSQL for the permanent storage of user data. The database is operated at our hosting provider (Render.com) in a European data centre.

8. Hosting

8.1 Render.com

Our website is hosted by:

Render Services, Inc. 525 Brannan St, Suite 300 San Francisco, CA 94107, USA

As part of hosting, Render processes:

  • IP addresses
  • Log files
  • Database data

Further information: https://render.com/privacy

Data transfer to the USA: Render offers Standard Contractual Clauses (SCC).

9. Transfer of Data to Third Parties

Your personal data is transferred to third parties only:

  • Where this is necessary for the performance of the contract (e.g. Stripe for payments)
  • Where you have given your express consent
  • Where there is a legal obligation to do so

10. Data Security

We use appropriate technical and organisational security measures:

  • SSL/TLS encryption for all data transfers
  • Encrypted storage of passwords (via Auth0)
  • Regular security updates
  • Access controls
  • Backup systems

11. Your Rights

Under the GDPR you have the following rights:

11.1 Right of Access (Art. 15 GDPR)

You have the right to obtain information about the personal data we process about you.

11.2 Right to Rectification (Art. 16 GDPR)

You have the right to request the rectification of inaccurate data.

11.3 Right to Erasure (Art. 17 GDPR)

You have the right to have your data erased ("right to be forgotten").

11.4 Right to Restriction of Processing (Art. 18 GDPR)

You have the right to request the restriction of processing.

11.5 Right to Data Portability (Art. 20 GDPR)

You have the right to receive your data in a structured, commonly used and machine-readable format.

11.6 Right to Object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.

11.7 Withdrawal of Consent (Art. 7 (3) GDPR)

You have the right to withdraw your consent at any time. The lawfulness of processing carried out on the basis of the consent before its withdrawal remains unaffected.

11.8 Right to Lodge a Complaint (Art. 77 GDPR)

You have the right to lodge a complaint with a data protection supervisory authority.

12. Erasure of Data

Personal data is erased as soon as the purpose of its storage no longer applies. Data may be stored beyond this where statutory retention periods require it.

Standard erasure periods:

  • Account data: 30 days after cancellation
  • Payment data (at Stripe): 7 years (statutory retention obligation under tax law)
  • Log files: 30 days

13. Data Protection Contact

If you have any questions about data protection or wish to exercise your rights, please contact:

Data Protection Officer
OptionsMastery GmbH
Eschenbachstr. 25
97762 Hammelburg, Germany
E-mail: info@edgeseeker.io

Version: 9 October 2026