Legal · Updated October 27, 2026
Privacy policy
This policy explains which personal data Thesis Almanac processes and why, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Controller
Juan Daniel Delgado Montesdeoca, NIF 54053982A, delgadocon@gmail.com
What we process and why
- Email: to create your account, send your sign-in link, the weekly digest and any alerts you turn on, and service notices (for example, a failed payment). Basis: performance of the contract.
- Watchlist and preferences (tickers, sectors, language, email switches): to provide the service. Basis: performance of the contract.
- Payment data: collected and handled by Stripe; we only store a customer ID, the subscription status and the renewal date. Basis: performance of the contract and legal obligations (invoicing).
- Send log: which entries we have emailed you, so we never repeat them. Basis: performance of the contract.
- Contact form: your email and message, only to reply to you; they are not stored in our database, only in the email we receive, and are deleted when no longer needed. Basis: legitimate interest in answering your request.
We do not sell your data or use it for advertising. We make no automated decisions with legal effects on you.
Processors
- Supabase (database and authentication).
- Stripe (payments, invoices and tax).
- Resend (email delivery).
- Vercel (website hosting).
Some are based in the United States or use sub-processors there; transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
How long we keep it
For as long as you keep your account. If you delete it, we immediately erase your profile, ticker and sector watchlists and send log. Invoices and payment data are kept in Stripe for the period required by tax and commercial law (generally 6 years).
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to delgadocon@gmail.com. You can unsubscribe from emails with the link in each one or from Account, and delete your account yourself. If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es).
Cookies and local storage
We only use technical cookies, which require no consent:
sb-…-auth-token: keeps you signed in (only if you sign in).ta_lang: remembers the language you choose (1 year).tema(browser local storage): remembers whether you prefer paper or terminal mode.
We use no advertising or tracking cookies. To count visits we use Vercel Web Analytics, which sets no cookies and does not identify anyone across sites: it records aggregate data (page viewed, country, browser and device) from an identifier discarded every day.
YouTube videos
On the Videos tab and on stock pages, thumbnails load from YouTube's image servers (i.ytimg.com), which receive your IP address as with any image. The player does not load until you press play: it then opens from youtube-nocookie.com, YouTube's privacy-enhanced mode, and Google's privacy policy applies from that point.
Quality score
To score theses we send the Claude API (Anthropic) only the public text of each thesis and its metadata. We send none of your data.