Last updated 17 October 2026

Privacy

StockHolo keeps as little about you as it can: enough to sign you in and to keep your collection, watchlist and alerts on every device. No ads, no tracking, and your information is never sold.

Without an account

You can browse every price, set and card without telling us anything. We don't use analytics or advertising tools, and we don't set cookies for visitors. Your browser keeps a few conveniences on your own device (recently viewed products, which sellers you count), which never reach us.

What we keep when you have an account

• Your email address, to sign you in and, if you turn them on, to send your alerts.
• If you sign in with Google: your name, your profile photo (shown on your account button) and Google's ID for your account. We don't get your password or anything else in your Google account.
• What you add to the app: your collection (cards and sealed product, with what you paid), purchases and sales, your watchlist, your alerts, your own buy prices and ceilings, and your answers to the getting-started questions (what you collect, which sets, a monthly budget). Only you can see these.
• Sign-in records: for each device you're signed in on, when it signed in and was last used and which browser it is. For each sign-in code we email, the address it went to and the network address that asked for it, so we can stop someone flooding an inbox with codes. Codes are deleted after 30 days and sessions as soon as they expire.

We use what you add only to run StockHolo for you. The products people watch, in total and without names, also decide how often each one's stock and prices are checked.

Cookies and storage

Signed in, one cookie keeps you signed in (sh_session, for 30 days, renewed while you use the app). Signing in with Google uses a second, short-lived one for ten minutes (sh_oauth). Both are needed for signing in, and neither is used for anything else. A copy of your things is also kept in your browser so the app works offline.

Who helps us run it

• DigitalOcean hosts our servers and database, in the United States.
• Resend sends our emails (sign-in codes, and alerts if you choose email).
• Google handles "Continue with Google" if you use it, and serves the app's fonts, so your browser asks Google for them when a page loads.
• Cloudflare runs our domain name's records. Your visits don't pass through it.

Each only gets what it needs for that job. We don't share your information with anyone else unless the law requires it.

Your information, your call

• Download it: Account, then Download my data, gives you everything we keep about you as a file.
• Change it: edit or remove anything you've added, any time; Account, then Your preferences, for the getting-started answers.
• Delete it: Account, then Delete my account, removes your account and everything in it from our database straight away, on every device.

Wherever you live, you can ask us what we keep about you, or ask us to correct or delete it, by emailing privacy@stockholo.io.

Keeping it safe

Everything travels over encrypted connections. We never store passwords, because there aren't any: you sign in with a code or with Google. Sign-in codes and session keys are stored only in a scrambled form that can't be turned back into the original.

Children

StockHolo is for people aged 13 and over. If you think a child under 13 has made an account, email us and we'll delete it.

Changes

If this changes in a way that matters, we'll say so in the app before it takes effect. The date at the top shows the latest version.