How DYOR HQ handles (or rather, does not handle) your data
DYOR HQ does not collect, store, or transmit your personal data, with one exception: if you subscribe to the email digest, your email address is processed by Buttondown. See the Newsletter section below. No cookies. No analytics. No tracking pixels.
The optional email digest signup at the foot of the homepage is the only part of DYOR HQ that processes personal data.
The Portfolio Analyser parses your DEGIRO CSV entirely in your browser using PapaParse, a well-known open-source CSV parser that runs as JavaScript in the page. No part of the file contents is sent to any server.
Your portfolio CSV is processed entirely in your browser. No holdings data is uploaded or stored.
Specifically:
reports-index.json that ships with the site.This site sets no cookies. There is no cookie banner because there is nothing to consent to. The only browser storage used is a localStorage key called dyorhq_favourites that holds the list of report tickers you have starred on the homepage. It is not transmitted off your device. You can clear it from your browser settings at any time.
DYOR HQ does not use Google Analytics, Plausible, Fathom, or any other third-party analytics provider. There is no server-side log analysis. Netlify's default CDN access logs are operational diagnostics only (request counts, error rates) and contain no personal information; they are retained by Netlify under their own privacy policy and not exposed to the site owner in any identifiable form.
The site loads the following external resources at page load:
These are static asset loads; they are not used to track you across sites.
There is no personal data on DYOR HQ to retain, delete, or export, except for newsletter subscribers held by Buttondown as described above. If you have starred reports, the localStorage key lives in your browser. Clear it from your browser settings, or run localStorage.removeItem('dyorhq_favourites') in the browser console.
If you are in the European Economic Area or the UK, you have the right to access, rectify, erase, restrict, or port any personal data a service holds on you. For the email digest, the data controller is Buttondown and the data processor is DYOR HQ. To exercise any right against the digest list (access, erasure, portability), email hello@dyorhq.ai and the request will be actioned within 30 days. For all other parts of the site, DYOR HQ holds no personal data, so there is nothing to action.
DYOR HQ is not directed at children under 16. It does not knowingly collect any information from children.
If this policy changes, the "Last updated" date at the top will change and a short note will be added to the homepage blurb. Material changes will be flagged prominently for at least 30 days.
Questions: hello@dyorhq.ai.