Privacy Policy

Responsible Party

foliograph.ch G. Stöckli
Owner: Gerhard Stöckli
Rankhofstrasse 14
6006 Luzern, Switzerland
Email: info@foliograph.ch or via contact form

Data I Collect

I collect data that you actively submit, plus the technical data that arises when you visit the website, when the desktop app checks for updates and when you buy a license:

• Contact form: name, email address, message
• Download registration: name, email address, the page on foliograph.ch from which you registered and the click ID if you arrived through a Google ad
• Technical data: your browser automatically transmits technical information (e.g. IP address, browser type). It ends up in the hosting provider's access log, serves only the secure operation of the site and is not evaluated on a personal basis.
• License purchase: email address, instance ID of your installation, country, amount and payment status, transmitted by the payment processor Stripe. I never see card details, they stay with Stripe.

Purpose of Data Processing

• Responding to your contact inquiry
• Providing the download link for the Foliograph software
• Ensuring the technical operation of the website
• Issuing and delivering the license key and keeping the books on the purchase
• Measuring whether my Google ads lead to download registrations

License Purchase via Stripe

You buy the annual license in the app through a checkout page hosted by Stripe (Stripe Payments Europe Ltd., Dublin, Ireland). Stripe processes your payment data under its own privacy policy. After payment, Stripe reports email address, instance ID, country, amount and payment status to me. With that I issue the license key and send it to you by email. The instance ID is a random identifier of your installation and is not derived from your hardware.

Advertising with Google Ads

I run ads with Google Ads (Google Ireland Limited, Dublin, Ireland). When you click such an ad, Google appends a random click ID to the website address. The website keeps this ID in the session and stores it with your download registration. Once you have confirmed your email address, I upload the click ID and the time of confirmation as a file to my Google Ads account. Your name and email address are not sent to Google. This shows me whether the ads lead to registrations. The website sets no advertising cookie for this and loads no Google tag. The legal basis is my legitimate interest in measuring the results of my advertising. The click ID is deleted after 90 days. If you do not want to be counted, write to me and I will delete the click ID right away.

Data Retention

Contact inquiries and download registrations are anonymised automatically twelve months after receipt: name, email address and message are removed, what remains are counts without personal reference (time, referring page, number of downloads). The click ID of a Google ad is deleted after only 90 days. The notification emails I receive for every registration and inquiry are deleted in the normal rhythm of my mailbox. Records of license purchases are kept for ten years as required by the Swiss Code of Obligations.

Desktop App: Update Checks

The Foliograph desktop app periodically checks foliograph.ch/updates/latest.json (by default once per hour) to see whether a new version is available. The following information is transmitted with this request and stored in a server-side access log:

• public IP address
• Anonymous install ID: a random UUID generated on first launch. It is not derived from your hardware and is deliberately not linked to your license, email address or identity.
• User-Agent string containing the app version, operating system (e.g. Windows 11, macOS 14.5), platform (win-x64, macos-arm64) and interface language (en/de)
• Timestamp and HTTP method of the request

Purpose: delivering software updates and counting active installations per version and platform. Deliberately not transmitted: email address, hostname, username, hardware identifiers (MAC, hardware UUID) or license ID.

Retention: raw access logs are deleted after at most 30 days. Anonymous aggregate counts (installations per version, platform and language, with no IP address) may be retained longer for product analytics.

Desktop App: Connections to External Services

The desktop app stores your trades and journal data in a local database on your machine. Foliograph runs no server that this data is uploaded to. For individual functions, however, the app connects directly from your machine to external services:

• Interactive Brokers: the TWS API runs locally on your machine, the Flex Web Service fetches your reports with your token directly from IBKR. These connections exist between you and your broker.
• Optional AI trade review: only when you trigger it for a trade does the app send the data of that trade (symbol, side, quantity, prices, profit or loss, commission, strategy, timestamps and your notes) with your own API key to the provider you chose: OpenAI, Google Gemini or Anthropic. That provider's privacy terms apply. Foliograph does not see this data and does not store it on servers of its own.
• Market data: prices and option data come from your Trader Workstation, economic and fundamental data from public sources such as SEC EDGAR and FRED. No data about you is transmitted, apart from the IP address that every internet connection carries.
• License purchase: the buy button opens the Stripe payment page with your instance ID, see License purchase above.

Third Parties

Your data is not sold. Four service providers process data: Infomaniak Network SA (Geneva, Switzerland) for hosting, database and email delivery, Stripe Payments Europe Ltd. (Dublin, Ireland) for payment processing when you buy a license and Cloudflare Inc. (USA) for the bot protection of the forms with Turnstile, where Cloudflare processes technical data such as your IP address. Google Ireland Limited (Dublin, Ireland) receives only click IDs and timestamps to measure the results of the ads, see Advertising with Google Ads.

Your Rights

Under the Swiss Data Protection Act (DSG), you have the right to access, correct and delete your personal data at any time. Contact me via the contact form.

Cookies

This website sets only technically necessary cookies: a session cookie protecting the forms (CSRF) and, where shown, a cookie from Cloudflare Turnstile for bot protection. There are no tracking or advertising cookies and no web analytics. If you arrive through a Google ad, its click ID is kept on the server in this session and not in a cookie of its own. The language is part of the address (/de or /en), not a cookie.

Changes

I reserve the right to update this privacy policy as needed. The current version is always available on this page.