Privacy policy

This policy explains how QuantLeaks, operated by Breathe IT AS ("we"), processes personal data. We are the data controller. Questions or requests: privacy@quantleaks.com.

What we collect

Account data (email, and an optional name and password hash) when you register. Newsletter data (email) when you subscribe. Basic technical logs (IP, user agent) needed to operate and secure the service. We do not sell personal data, and we do not use it for third-party advertising.

Why, and the legal basis

To provide the account and watchlist you request (contract), to send the newsletter you opt into (consent, withdrawable at any time), and to keep the service secure and working (legitimate interest).

Cookies

We use a strictly necessary session cookie for sign-in and a small non-sensitive display cookie so the menu can show your account. We do not use advertising or cross-site tracking cookies.

Retention & your rights

We keep account data while your account is active and newsletter data until you unsubscribe. Under the GDPR you may request access, correction, deletion, portability, or object to processing — email us and we will respond within one month. You may also complain to the Norwegian Data Protection Authority (Datatilsynet).

Processors

We host on Microsoft Azure (EU region) and use email and analytics providers strictly to run the service. A current list is available on request.