Privacy Policy
How Modern Stock Portfolio Tracker handles account, research, portfolio and optional broker data.
Effective: October 25, 2026
Controller and contact
MSPT is operated by Millwheel Oy, Myllynratas 1, 01840 Klaukkala, Finland. Questions and privacy requests may be sent to privacy@modernstockportfoliotracker.com.
Information MSPT processes
- Account and support: username, email address, password hash, verification and account-status records, support messages and the diagnostic details you choose to send.
- Membership: subscription product, status, expiry and store purchase identifiers or encrypted verification material. Apple, Google or the website payment provider handles payment-card entry.
- Research and portfolio content: portfolios, holdings, cash flows, stock and option trades, tracking lists, notes, valuations, thesis dates, tags, alerts and review decisions.
- Optional brokerage features: broker account references, positions and executions received through the connector you configure, plus paper-order requests and their status when you enable paper trading. MSPT does not ask for or store your broker password.
- Notifications and operations: device push token and preferences when enabled, request metadata such as IP address and user agent, and service logs used for security, diagnosis and reliability.
Why information is used
We process data to create and secure your account, provide memberships, save the research and portfolio features you choose, deliver requested alerts, synchronize optional broker information, support users, prevent misuse, meet legal obligations and operate the service. Where consent is required, you may withdraw it without affecting earlier lawful processing.
Service providers and transfers
MSPT uses service providers for hosting, database and object storage, email, Apple and Google store verification, push delivery, payment processing, market data and requested research-analysis features. They process information under their own terms and MSPT's applicable provider arrangements. Data may be processed outside Finland; applicable contractual or statutory transfer safeguards are used where required.
Optional brokerage data is exchanged with the MSPT connector and Interactive Brokers when you configure that feature. MSPT supports read-only synchronization and optional paper trading; it does not submit live orders. Disconnecting MSPT does not close positions or cancel paper orders already held by the broker.
Cookies and local storage
The website and mobile app use session storage, secure tokens, cookies and local app storage needed for sign-in, preferences, recent searches, security and core operation. Cookie controls are available on the website. Additional provider technology is reviewed in the applicable store privacy disclosures.
Retention
Active account content is retained while needed to provide MSPT. Operational and security logs are retained only for service operation, diagnosis and abuse prevention. When an account deletion request is verified, access is disabled immediately and account content is removed within 30 days.
Millwheel Oy may retain limited payment, subscription, security, broker synchronization or execution records, and paper-order audit records where required for accounting, fraud prevention, disputes, security, or regulatory compliance. Those records are separated from the deleted login profile, access is restricted, and they are kept only for the applicable statutory or claims period. Routine backup copies may remain until overwritten under the backup cycle and are not used for ordinary operations.
Your choices and rights
You may update profile information, notification preferences and saved content through MSPT. Depending on applicable law, you may request access, correction, portability, restriction, objection or erasure. You may also complain to the Finnish Data Protection Ombudsman or another competent supervisory authority.
To delete an account, use Delete your MSPT account or Account → Request account deletion in the mobile app. We verify public web requests by email, complete verified requests within 30 days and send confirmation. Deleting MSPT does not cancel Apple or Google billing.
Security and changes
MSPT uses access controls, encrypted network connections and operational safeguards appropriate to the service. No system can guarantee absolute security. We may update this policy as the service or legal requirements change and will identify the effective version.