Privacy Policy

Last updated: November 11, 2026

1. Controller

Quantix PLT
UOA Corporate Tower
Avenue 10
8, Jalan Kerinchi, Bangsar South
59200 Kuala Lumpur
Malaysia
Email: hello (at) aktien-prognose (dot) com

If you have any questions about data protection, you can reach us at this email address.

2. Overview

You can use QuantumForecast without an account. We process personal data only to the extent necessary to operate the website and its features, or where you have given your consent. We do not show ads, we do not sell data, and we share it only with the service providers listed below. Fonts and code libraries are loaded from our own server; simply visiting the site does not send any data to third parties unless you consent to Google Analytics.

3. Hosting and server logs

The website is run by a hosting provider with whom we have a data processing agreement. Whenever a page is requested, the server processes technically necessary data: IP address, date and time, the requested URL, amount of data transferred, referrer, and browser and operating system. This serves to deliver the website, keep it secure, and analyze errors (Art. 6(1)(f) GDPR). Logs are deleted automatically after a short period unless they are needed to investigate a security incident.

4. Cookies and browser storage

We use technically necessary cookies and browser storage entries without consent, because the respective feature could not be provided otherwise (Sec. 25(2) TDDDG [German Telecommunications Digital Services Data Protection Act], Art. 6(1)(b) and (f) GDPR). Anything else is used only with your consent (Sec. 25(1) TDDDG, Art. 6(1)(a) GDPR).

You can change or withdraw your choice at any time via Cookie settings.

5. Account and registration

For an account, we process your email address, username, your password (only as a secure hash, never in plain text), the times of registration and sign-in, the date of your last activity, the sign-in method, the reason for registering (e.g., “Watchlist” or “Forecast League”), your account language (English or German, so that we can send emails in that language), and which stocks you have viewed (without a timeline). We use the latter in aggregated form to improve our service (Art. 6(1)(f) GDPR). To confirm your registration, we send you an email with a link. If you already had an account on our previous website, we carry it over the first time you sign in. The purpose is to provide account features such as a watchlist synced across devices and the Forecast League (Art. 6(1)(b) GDPR). You can have your account deleted at any time by emailing us; your data will then be deleted unless statutory retention obligations apply.

Usage statistics without personal reference: We count, per day, how often certain things happen – for example, views of stock pages, registrations, Forecast League calls, or how many browsers have viewed a certain number of different stocks. We store only the date, type, and count – no IP address, no cookies, and no link to any individual. We also count page views per page and day. To determine the number of visitors per day, we derive a short check value (hash) from the IP address and browser identifier using a secret key that changes daily. The IP address cannot be derived from it; the check value is kept only until the end of the day and then deleted, and the IP address itself is not stored for this purpose. Visitors are not recognized across days and no user profiles are created. This helps us improve our service (Art. 6(1)(f) GDPR).

6. Abuse prevention

To fend off automated sign-in attempts, we store sign-in and registration attempts as a non-reversible hash value with a timestamp and delete them after 24 hours. For registration, sign-in, and “Forgot password,” we also use Cloudflare Turnstile by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile uses technical characteristics of your browser and connection (including your IP address) to check whether a human is using the form; no advertising cookies are set. The data is transferred to Cloudflare, possibly also to the US. The legal basis is our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-U.S. Data Privacy Framework.

7. Sign in with Apple

If you choose “Sign in with Apple,” you are redirected to Apple (Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland). Apple thereby learns that you are signing in to QuantumForecast. From Apple we receive an identifier, your email address (if you wish, a relay address forwarded by Apple that hides your real address), and, the first time, your name, so that we can create or match your account (Art. 6(1)(b) GDPR). Apple's privacy policy applies to processing by Apple.

8. Emails

We send emails only when they are required for your account – for example, to confirm your registration, reset your password, or when you change your email address. Emails are sent via our hosting provider's mail server (Art. 6(1)(b) GDPR).

9. Community forecast and Forecast League

When you cast a vote or make a call, we store the direction, price target, time frame, timestamp, the price at the time of submission, your username, and a truncated IP address. Calls are scored automatically once they expire. Your username, your calls, points, and your leaderboard rank are publicly visible. We analyze all users' assessments in aggregated form and factor them into the Quantum Forecast (collective intelligence). If you make a call without an account, it is linked only via the guest cookie and assigned to your account if you sign in later; guest calls do not appear on the leaderboard or in the feed. The legal basis is your use of these features (Art. 6(1)(b) GDPR).

10. Google Analytics (only with consent)

With your consent, we use Google Analytics 4 by Google Ireland Limited to understand which pages are used and how. Google processes pseudonymous usage data such as pages viewed, time on page, device, browser, and approximate region; Google Analytics 4 does not store IP addresses. Advertising features and links to Google advertising services are turned off. Data may be transferred to the US; Google is certified under the EU-U.S. Data Privacy Framework, and standard contractual clauses apply in addition. Data in Google Analytics is deleted after 2 months. The legal basis is your consent (Art. 6(1)(a) GDPR, Sec. 25(1) TDDDG), which you can withdraw at any time via Cookie settings; the analytics cookies will then be deleted.

11. Recipients

Personal data is received only by: our hosting provider (hosting, email), Cloudflare (Turnstile during registration and sign-in), Google (Google Analytics, only with consent), and Apple (Sign in with Apple, if chosen). We obtain price data and EUR/USD exchange rates on the server side and convert prices to US dollars on our own server; none of your data is transmitted in the process.

12. Retention

We keep data only as long as necessary for the respective purpose or as required by law. We delete account data together with the account; calls and votes you submitted may then be kept for statistics without any personal reference.

13. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to withdraw any consent you have given with effect for the future (Art. 7(3)). Where we process data on the basis of legitimate interests, you may object on grounds relating to your particular situation (Art. 21). An email to the address above is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state of your habitual residence or place of work.

14. No automated decision-making

We do not make any decisions based solely on automated processing that produce legal effects concerning you. The automatic scoring of league calls determines only points and leaderboard ranks.

15. Notice for California residents

This section supplements the policy above for residents of California under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA).

Categories of personal information we collect:

• Identifiers: email address, username, account identifier (including from Sign in with Apple), IP address (in server logs and Turnstile checks; truncated for votes and league calls).
• Internet or other electronic network activity: technical log data (requested URLs, referrer, browser, operating system), stocks viewed while signed in, votes and league calls; with your consent, pseudonymous usage data via Google Analytics.
• Account information: password (stored only as a secure hash), times of registration, sign-in, and last activity, sign-in method, reason for registering, account language.

We collect this information from you directly and from your browser or device, for the purposes described in Sections 3 to 10. We do not collect sensitive personal information for the purpose of inferring characteristics about you.

No sale or sharing: We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the past 12 months. We do not knowingly collect personal information of consumers under 16.

Your rights: You have the right to know what personal information we collect, use, and disclose; to access it; to request its correction; and to request its deletion – subject to legal exceptions. To exercise these rights, email us at hello (at) aktien-prognose (dot) com. We may need to verify your identity, for example by asking you to confirm the request from the email address linked to your account. You may use an authorized agent to submit a request on your behalf. We will not discriminate against you for exercising any of your rights.