Privacy Policy

Effective Date: March 14, 2026

Weft Screener ("we", "us", "our") operates weftscreener.com. This policy describes how we collect, use, and protect your personal information.

1. Data Controller

Weft Screener is operated as a personal project. For privacy inquiries, contact: [email protected]

2. Information We Collect

We collect the minimum data necessary to provide the service:

• Account information: Email address, display name, and password (stored as a one-way cryptographic hash — we cannot read your password).
• User-created data: Saved screens, watchlists, and custom formulas you create within the app.
• Technical data: IP address, browser type, and pages visited (via server access logs).
• Advertising data: If you consent to non-essential cookies, Google AdSense may collect data such as your IP address, device identifiers, and browsing behavior to display personalized ads. See How Google uses data when you use our partners' sites.
• Cookies: Session cookie for authentication and a CSRF token for security (see our Cookie Policy).
• Browser storage: We use localStorage to cache your screens, watchlists, formulas, and global variables locally on your device for performance.

3. Lawful Basis for Processing (GDPR Art. 6)

• Consent: You consent to data processing when you create an account and accept the Terms of Service.
• Legitimate interest: Server logs for security, abuse prevention, and service reliability.
• Contract performance: Processing your account data to provide the screening service.

4. How We Use Your Information

• To provide and maintain the service (authentication, saving your screens and watchlists).
• To improve the service and fix bugs.
• To enforce our Terms of Service.

5. Data Sharing

We do not sell, rent, or trade your personal data. If you consent to advertising cookies, we use Google AdSense to display ads; Google may collect and process data according to their Privacy Policy. We do not share your data with any other third-party analytics or marketing services. We may disclose data if required by law or to respond to a valid legal process.

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, all personal data (profile, screens, watchlists, formulas) is permanently removed from our database immediately. Server access logs are retained for up to 90 days for security purposes.

7. Your Rights

• Access & Export: You can export all your data at any time from the user menu ("Export My Data") or via the API (GET /api/auth/export-data).
• Deletion: You can delete your account and all associated data at any time from the user menu ("Delete Account").
• Correction: You can update your display name from Account Settings. For email corrections, contact us.
• Data portability: Your data export is provided in JSON format.

8. GDPR (EU/EEA Users)

If you are in the EU/EEA, you have additional rights under the General Data Protection Regulation:

• Right to access your personal data (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure / "right to be forgotten" (Art. 17)
• Right to restrict processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object to processing (Art. 21)
• Right to lodge a complaint with your local supervisory authority

To exercise any of these rights, use the in-app account management features or email [email protected]. We will respond within 30 days.

9. CCPA (California Users)

If you are a California resident, under the California Consumer Privacy Act (CCPA):

• Categories of personal information collected: Identifiers (email, name), internet activity (server logs), user-generated content (screens, watchlists, formulas).
• We do not sell personal information. We have not sold personal information in the preceding 12 months.
• Right to know: You may request disclosure of the categories and specific pieces of personal information collected about you.
• Right to delete: You may request deletion of your personal information.
• Non-discrimination: We will not discriminate against you for exercising your CCPA rights.

10. Children's Privacy

Weft Screener is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. By creating an account, you confirm that you are at least 13 years old. If we learn that we have collected personal information from a child under 13, we will delete it promptly.

11. Security

Passwords are hashed with industry-standard algorithms (Werkzeug/PBKDF2). All data is transmitted over HTTPS (TLS 1.2+). We use Cloudflare for DDoS protection and WAF. Access to the server is restricted to SSH key authentication.

12. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify affected users via email within 72 hours of becoming aware of the breach, and will report to relevant supervisory authorities as required by law.

13. Changes

We may update this policy. Changes will be posted on this page with an updated effective date. Material changes will be communicated to registered users.

14. Contact

For privacy inquiries: [email protected]