Privacy Policy

vnvalue ("we", "us") uses a self-hosted Umami service to understand aggregate use of the Service while keeping data collection limited. We do not require user accounts, sell user data, run advertising trackers, or build user profiles. This Privacy Policy explains the limited information we process and the choices available to you.

We do not ask for or collect your name, email address, phone number, date of birth, national ID, financial account information, investment portfolio, holdings, or free-text input. We do not operate user accounts.

Analytics does not receive search text, portfolio data, free text, arbitrary or user-supplied URLs, URL query strings or fragments, or a persistent user or device identifier. It receives only the current first-party page origin and path plus the limited common context described below. We do not use session replay, heatmaps, performance telemetry, cross-site tracking, advertising, or profiling.

We use your browser's localStorage to remember two small preferences: (a) your theme choice (dark or light), and (b) whether you have acknowledged the Methodology & Disclosure notice. These values are stored only on your device, are never transmitted to us, and can be cleared at any time through your browser settings.

If you choose a display language, we set one first-party preference cookie named vnvalue-lang containing en or vi. It expires after one year and is not used for analytics or tracking. Umami sets no analytics cookies and does not use localStorage for analytics.

Umami records the core events needed to count page views and visits or sessions. For every page view and custom product event, the browser tracker sends the website identifier, hostname, current first-party absolute page URL limited to its origin and path, page title, browser language, and screen size. It also sends a cross-site referrer with its query string and fragment removed; same-site referrers are omitted. The current page query string and URL fragment are also excluded.

On the analytics server, Umami derives the visit time, browser, operating system, device type, and approximate country, region, and city from the request's User-Agent header and IP address. These fields support aggregate usage reports rather than individualized profiles.

We record only three custom product events: search_result_selected with the selected symbol; screener_csv_exported with result_count and has_filters; and stock_report_downloaded with the stock symbol.

Each custom event includes the common page context listed in Section 4 plus its event name. Its custom data object contains only the fields named above. In particular, search text, individual filter selections, report contents, and any other free-form values are not sent. has_filters is only a yes-or-no indicator of whether any filter was active.

The analytics server processes the source IP address transiently to derive an approximate location and compute an anonymous session hash. The raw IP address is not written to or stored in the Umami analytics database.

The anonymous session hash uses a salt that rotates monthly. This creates a new anonymous hash after the rotation instead of a stable identifier that follows a visitor indefinitely. We do not assign a persistent distinct ID and do not fingerprint devices.

We host Umami and its analytics database ourselves on Fly.io infrastructure in Singapore. Analytics is not sent to Umami Cloud.

Page-view, visit or session, and custom-event records, including monthly anonymous session hashes, are retained indefinitely until we manually delete them or retire the analytics service. There is no automatic retention expiry. This retention period does not apply to raw IP addresses because Umami does not store them.

Separate from Umami analytics, our hosting provider may process standard network and web-server logs to deliver and secure the Service. These logs may include an IP address, User-Agent string, requested URL, referrer, response code, and timestamp.

Operational logs are used only for service operation, security, abuse prevention, and debugging, and are retained only as long as necessary for those purposes under our provider's practices. They are not combined with analytics to create user profiles.

The Service and our self-hosted analytics stack run on Fly.io (Fly.io, Inc.) infrastructure. Fly.io processes network traffic and logs as necessary to provide that infrastructure. See Fly.io's privacy policy at https://fly.io/legal/privacy-policy/ for details.

Financial data displayed on the Service is sourced from third parties including Vietcap (VCI) and KB Securities (KBS). Those data providers are not involved in your use of the Service and do not receive analytics information from us.

We do not use Google Analytics, Meta Pixel, Umami Cloud, advertising networks, or similar third-party tracking services.

We do not sell, rent, or trade analytics information, and we do not disclose it to third parties for advertising, marketing, or profiling. Our infrastructure provider processes data only as needed to host and deliver the Service.

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or port personal data, or object to its processing. Because our analytics has no account identifier, raw IP address, or persistent distinct ID, we may be unable to identify a particular analytics record as yours. You may nevertheless send a privacy request or concern to legal@vnvalue.tech.

You may clear localStorage and the vnvalue-lang cookie through your browser settings. You may also block the analytics script with browser controls or a content blocker; the Service's core features will remain available.

The Service is not directed at children under 18 and is not intended for use by them. We do not knowingly seek information from children.

We apply commercially reasonable safeguards to protect the integrity of the Service and the self-hosted analytics database. However, no system can be guaranteed to be perfectly secure, and we cannot warrant absolute security of information transmitted over the internet.

The Service is operated from Vietnam, and the Service and analytics database are hosted in Singapore. Information described in this Policy may therefore be processed in those jurisdictions. If you are subject to specific data-protection rules, including in the EU/EEA or the United Kingdom, you may contact us at legal@vnvalue.tech about your rights.

We may revise this Privacy Policy from time to time. Revised versions become effective when posted to the Service, and the last-updated date above will change. Please review this page periodically.

Questions, requests, or complaints about this Privacy Policy or our analytics practices may be directed to legal@vnvalue.tech.