Privacy policy
Last updated 21 September 2026
Tape is a personal project run by one person. This page says exactly what it collects, why, and how to get rid of it. It is short because the site does very little with your data.
Who is responsible
Georges Al Haddad, an individual based in France, is the data controller. For anything on this page, write to georges.alhaddad28@gmail.com.
What the site collects
Without an account: nothing that identifies you personally, beyond the server logs described below. Every screen except the watchlist works without signing up.
With an account: your first name, last name and email address, and your password stored as a hash, never as text anyone can read. Alongside those, the site keeps the watchlist and layout settings you choose, so the terminal looks the same when you come back. There is no email sending, so your address is used to sign you in and nothing else. No newsletter, no marketing, no verification mail.
Server logs: the web server records the IP address, browser user agent, requested address, time and response code for every request. This is the ordinary record any web server keeps, and it is what tells me the site is up and being used. Logs are deleted automatically after 14 days.
Cookies: one, and only if you sign in. It holds your session so you stay logged in between pages. There are no analytics cookies, no advertising cookies and no third-party cookies, which is why this site has no cookie banner asking you to accept anything.
What the site does not do
- No analytics. No Google Analytics, no Meta Pixel, no tracking script of any kind.
- No advertising, and no profiling or automated decisions about you.
- Nothing is sold, rented or shared with anyone for their own purposes.
Why it is allowed to hold this
Account details are held to provide the account you asked for, which is a contract between you and the site. Server logs are held because keeping a public service running and secure is a legitimate interest, and 14 days is the shortest window that is any use for it.
Where it is kept, and who else sees it
Everything sits on a single virtual private server rented from Contabo GmbH, a German hosting company, and in a database file on that same machine. Nothing is copied to another service.
Two things reach outside that machine. Your browser loads fonts from Google Fonts, which means Google receives your IP address when a page loads. And market data is fetched by the server, not by your browser, so the data providers never see you, only the server.
How long it is kept
Account details and your settings stay until the account is deleted, then they are gone. Server logs roll off automatically after 14 days.
Your rights
Under the GDPR you can ask for a copy of what is held about you, ask for it to be corrected, ask for it to be deleted, ask for it in a portable form, or object to it being held at all. Email georges.alhaddad28@gmail.com and I will do it. Deleting an account removes the name, the email, the password hash and the settings together.
If you think this is being handled badly, you can complain to the CNIL, the French data protection authority, at cnil.fr.
Changes
If this page changes, the date at the top changes with it.