Privacy Policy

This Privacy Policy explains how personal data is processed when using this website.

1. Controller

Albin Krenz
Am Markt 22
14542 Werder (Havel)
Germany
Email: info@csstream.xyz

2. Hosting and Server Log Files

This website is hosted by Hetzner Online GmbH, which provides the technical infrastructure.

When the website is accessed, the following information is automatically recorded in server log files:

These data are required to ensure stable and secure operation (Art. 6(1)(f) GDPR). Server log files are stored by the hosting provider for security and operational purposes and are automatically deleted according to the provider’s retention policies.

All data processing takes place in data centers within the European Union.

3. User Accounts

Certain features (e.g. watchlist) require a user account. For account creation and usage, the following data are processed:

This processing is necessary to provide the service (Art. 6(1)(b) GDPR). Data is stored for as long as the account exists.

4. Cookies and Local Storage

This website uses essential cookies that are required for the operation of core functions.

An authentication cookie is used to keep users logged in across visits and to associate the account with personal features such as the watchlist. This cookie contains an anonymized authentication token and enables the system to recognize a previously logged-in user. It is not used for analytics, tracking, or marketing purposes.

The cookie is set for the domain ".csstream.xyz" and may therefore be accessed by subdomains when necessary for the functioning of the service. The cookie is a persistent cookie and is stored for up to 30 days (or until the user logs out or deletes their account). The processing is based on the legitimate interest in providing a secure and user-friendly login system and personalized functionality (Art. 6(1)(f) GDPR).

If Local Storage is used for storing watchlist data or user preferences:

Data stored in your browser’s Local Storage is not transmitted to the server unless explicitly stated. The use of Local Storage is based on the legitimate interest in providing user-friendly functionality (Art. 6(1)(f) GDPR).

5. Communication

If you contact us by email, your message including personal data is processed for handling your inquiry (Art. 6(1)(b) or Art. 6(1)(f) GDPR). Data is deleted when it is no longer required for processing your request.

6. Data Processing Agreement

A Data Processing Agreement pursuant to Art. 28 GDPR has been concluded with Hetzner Online GmbH. Hetzner processes personal data only as instructed and exclusively for hosting this website.

7. Disclosure of Data

Personal data is only transmitted to third parties where necessary for operating this website (e.g. hosting providers, content delivery networks). No further disclosures are made unless legally required or permitted.

8. Security Measures

Technical and organizational measures are implemented according to Art. 32 GDPR to protect personal data. This includes encrypted communication via TLS/HTTPS and hashed password storage.

9. Storage and Deletion

Personal data is stored only for as long as required for the specified purposes or as required by law.

You may request deletion of your account at any time.

10. Rights of Data Subjects

You have the following rights under the GDPR:

To exercise these rights, contact the controller using the contact details in Section 1.

If processing is based on consent, consent can be withdrawn at any time (Art. 7(3) GDPR). Withdrawal does not affect the lawfulness of processing prior to withdrawal.

11. Automated Decision-Making

No automated decisions or profiling are carried out.

12. Third-Party Libraries / CDN

This website loads the JavaScript library “Lightweight Charts” via the external CDN unpkg (operated by Fastly). When accessing this file, your browser connects to the CDN, transmitting your IP address and other technically required data.

The integration is necessary to display the charts and is based on our legitimate interest in providing a secure and efficient website (Art. 6(1)(f) GDPR).

No cookies or tracking technologies are used by this library to profile users.

13. Additional Information for California Residents (CPRA)

This website may be accessed by users from California. If you are a California resident, you have certain rights regarding your personal information under the California Privacy Rights Act (CPRA).

Categories of Personal Information

The categories of personal information that may be collected when you use this website are described in Sections 2–5 of this Privacy Policy (for example: identifiers such as IP address and email address, and internet or other electronic network activity information such as server log data). This information is obtained directly from you (e.g. when creating an account or contacting us) and automatically through your use of the website (e.g. server logs, CDN requests).

We use this information for the purposes described in this Privacy Policy, including providing and securing our services, operating the website, responding to inquiries and complying with legal obligations.

We disclose personal information only to the categories of recipients described in Sections 2, 6, 7 and 12 (e.g. hosting provider, CDN and other service providers acting on our behalf).

No Sale or Sharing of Personal Information

We do not “sell” or “share” personal information as these terms are defined under the CPRA, and we do not use personal information for cross-context behavioral advertising.

Your Rights under the CPRA

As a California resident, you have the right to:

Exercising Your Rights

You may exercise these rights by contacting the controller using the contact details in Section 1 (for example, by email at info@csstream.xyz). We may need to verify your identity before processing your request and will respond within the timeframes required by applicable law.

14. Changes to This Privacy Policy

This Privacy Policy may be updated if technical changes or new features require it. The current version is always available on this page.