Privacy & Analytics
Analytics & Tracking Policy
We use Google Firebase Analytics to understand how visitors interact with our application. This information is vital for us to improve our services, identify potential bugs, and ensure a smooth user experience.
What Information Do We Collect?
When you grant us consent to use analytics cookies, the tracking scripts may collect:
- Usage Data: Information about which pages you visit, buttons you click, and how long you spend on the site.
- Device Information: Basic anonymous metrics about your browser type, screen resolution, and operating system.
- General Location: Broad geographical data (such as your city or country level) to help us understand our global audience.
Your Consent & GDPR Compliance
In compliance with the GDPR and ePrivacy Directive, we strictly operate on an "opt-in" basis for analytics tracking. We do not initialize any analytics scripts, nor do we place any tracking cookies on your device, until you explicitly click "Accept" on our bottom consent banner. Data processing is subject to the Google Privacy Policy and Firebase Terms of Service.
Data Storage & Cloud Sync
Guest users keep all financial data entirely on their local device (LocalStorage/IndexedDB). Registered users benefit from encrypted cloud sync via Firebase Realtime Database. For full details on data handling, behavioral analytics, and our disclaimer, read our Terms & Conditions.
Personal Information & User Privacy
Personal account information (such as your email address, display name, or account ID) is strictly protected. We never sell, broadcast, share, or monetize user personal details with third-party advertising networks, data brokers, or other users.
Legal Bases for Processing (GDPR Article 6)
- Contractual Performance (Art. 6(1)(b)): To authenticate user accounts, provide cloud portfolio synchronization, and calculate portfolio metrics requested by the user.
- Consent (Art. 6(1)(a)): For optional Firebase Analytics performance cookies and browser Web Push notification alerts.
- Legitimate Interests (Art. 6(1)(f)): To maintain platform security, prevent unauthorized access, and ensure server stability.
EU Data Hosting & Server Location
Our cloud database infrastructure is hosted in Google Cloud's European Union region (europe-west1 in Belgium), ensuring that synchronized portfolio data for European users is stored within the EU in compliance with EU data protection requirements.
Your Data Subject Rights Under EU Law (GDPR Arts. 15–22)
Under the GDPR, you possess specific enforceable rights:
- Right to Access & Portability (Arts. 15 & 20): You can access and review your complete portfolio records and configuration data directly within the application.
- Right to Rectification (Art. 16): You may edit, update, or correct your transactions, assets, and settings at any time.
- Right to Erasure / "Right to be Forgotten" (Art. 17): You have the right to erase all your portfolio data by deleting positions, clearing local storage, or requesting complete account deletion.
- Right to Withdraw Consent (Art. 7(3)): You can withdraw cookie consent at any time without penalty by clearing your local storage.
- Right to Lodge a Complaint: You have the right to contact or lodge a complaint with your national Data Protection Authority (DPA) within the European Union.
Data Security & Encryption Standards
All data transmitted between your browser and our servers is secured with HTTPS / TLS 1.3 encryption in transit. Synchronized database records are encrypted at rest on Google Cloud infrastructure. Local-first guest data never leaves your device and is isolated within your browser's sandboxed storage.
Data Retention & Erasure Schedule
Local guest data is retained in your browser storage until you choose to clear it or delete your portfolios. Registered account data is retained for the duration of your account's existence. When an account or portfolio is deleted, the corresponding records are permanently erased from the active cloud database.
Age Limitation (18+)
Gofolio is designed exclusively for adult users aged 18 and older. We do not knowingly collect, process, or store data from children.
How to Opt-Out or Manage Cookies
If you have previously accepted analytics and wish to revoke your consent, you can do so by clearing your browser's local storage data for this website. Upon doing so, the consent banner will reappear, allowing you to choose "Decline". You can also use standard adblockers or browser extensions to natively block tracking scripts.
Data Controller & Contact Inquiries
For any data protection inquiries, access requests, or privacy concerns, please submit a message via our Feedback & Feature Requests Page.