PRIVACY POLICY & TERMS OF USE
This document explains what personal data StockClock collects, why it collects it, which third-party services process it on our behalf, and what rights you have as a user. Please read it before using this platform.
StockClock is a web-based research platform that aggregates and presents publicly available U.S. federal contract data for informational purposes. It is operated as a private commercial service.
By accessing StockClock -- whether as a complimentary account or a paid subscriber -- you agree to the terms of this Privacy Policy and our Terms of Use. If you do not agree, you must not use this platform.
This policy applies to all users of stockclock.pages.dev and any associated subdomains or future custom domains operated by StockClock.
StockClock collects the minimum personal data necessary to operate a secure, subscription-gated research platform. We do not sell personal data. We do not use personal data for advertising.
| DATA POINT | WHAT IT IS | WHY WE COLLECT IT | LEGAL BASIS |
|---|---|---|---|
| EMAIL ADDRESS | The email address you provide at login or checkout | To verify your identity, send a one-time login link, confirm subscription status, and deliver platform access. Without this we cannot operate a paywall. | Contract performance -- necessary to fulfill your subscription |
| PAYMENT DATA | Billing details entered at checkout | To process subscription payments. StockClock never sees or stores raw payment card data -- it is collected and held entirely by Lemon Squeezy, our payment processor and Merchant of Record. | Contract performance -- necessary to process your subscription |
| SESSION TOKEN | A randomly generated string stored in your browser's local storage | To keep you logged in across page loads without requiring repeated authentication. The token does not itself contain personal data. It expires after 24 hours of inactivity. | Legitimate interest -- essential platform security and usability |
| IP ADDRESS | Your network IP address on each request to our backend | To enforce rate limits and prevent abuse of our login and authentication endpoints. IP addresses are not stored permanently -- they are used only for in-memory rate limit counters that expire hourly. | Legitimate interest -- security, fraud prevention, and abuse mitigation |
| USAGE ANALYTICS | Page views, session duration, traffic source, and device type | To understand how the platform is used so we can improve it. Collected by Google Analytics 4 with IP anonymization enabled. No personally identifiable information is passed to Google. | Legitimate interest -- product improvement and traffic analysis |
| ADMIN GRANT NOTES | Optional internal notes entered when granting complimentary access | Internal record-keeping only (e.g., "press contact"). Never shared with third parties. | Legitimate interest -- internal business records |
StockClock does not collect your name, phone number, physical address, date of birth, government ID, or any demographic data. We do not collect data from minors -- this platform is intended for adults only. We do not build behavioral profiles for advertising. We do not log which companies or tickers you view.
StockClock uses the following third-party services to operate. Each receives only the data necessary for its specific function. By using StockClock, you acknowledge that your data is processed by these sub-processors under their respective privacy policies.
| SERVICE | PURPOSE | DATA SHARED WITH THEM | THEIR PRIVACY POLICY |
|---|---|---|---|
| CLOUDFLARE | Website hosting (Cloudflare Pages) and serverless backend execution (Cloudflare Workers). All web traffic passes through Cloudflare's global network, which provides DDoS mitigation, TLS encryption, and edge routing. | IP addresses, HTTP request metadata, and all data transmitted between your browser and our platform. Cloudflare processes this as a data processor under its Data Processing Addendum. | open_in_newVIEW |
| GITHUB | Source code and static asset storage. The StockClock codebase is stored in a private GitHub repository. Cloudflare Pages deploys from this repository. GitHub is not involved in serving the live site to users. | No user personal data is stored in or transmitted to GitHub. GitHub hosts code only, not subscriber records. | open_in_newVIEW |
| UPSTASH | Serverless Redis database. Stores the list of licensed email addresses, active session tokens, and temporary rate-limit counters. This is the authoritative record of who holds active platform access. | Email addresses (used as database keys), session tokens, subscription type (paid or complimentary), and grant date. No payment card data is stored here. | open_in_newVIEW |
| RESEND | Transactional email delivery. When you request a login link, Resend delivers the one-time magic link to your email address. No marketing or promotional emails are sent through Resend. | Your email address and the content of the login link email. Resend may retain email delivery logs per its own retention policy. | open_in_newVIEW |
| LEMON SQUEEZY | Payment processing and subscription management. Lemon Squeezy acts as Merchant of Record for all StockClock subscriptions, meaning they are legally responsible for collecting payment, remitting applicable taxes, and issuing receipts to customers. | Your email address, billing address, payment card details, and transaction history are collected and held by Lemon Squeezy. StockClock receives only your email address and a payment confirmation event via a signed webhook. We never see your card number or billing address. | open_in_newVIEW |
| GOOGLE ANALYTICS | Website analytics. Google Analytics 4 (GA4) is used to measure aggregate traffic patterns, page views, session duration, device types, and geographic region. This data is used solely to improve the platform. | Anonymized usage data including pages visited, approximate geographic region (country or city level), browser type, device category, and session behavior. IP addresses are anonymized before transmission to Google. No personally identifiable information is passed. Google may process this data in the United States. | open_in_newVIEW |
After a successful login, a session token is stored in your browser's localStorage under the key sc_token. This token is checked on every page load to verify your session. It expires after 24 hours. You can clear it at any time by clicking Logout or clearing your browser's local storage. This is not a cookie and is not transmitted to any advertising network.
Google Analytics 4 sets cookies in your browser to measure usage patterns. These typically include _ga and _ga_[ID]. These cookies contain no personally identifiable information and persist for up to 2 years per Google's default settings.
You may opt out at any time by installing the Google Analytics Opt-Out Browser Add-On.
Cloudflare may set a cookie such as __cf_bm for bot management and security. This is an operational cookie required for Cloudflare's network protection to function. It does not track you across other websites.
We retain personal data only for as long as necessary for the purpose for which it was collected.
| DATA | RETENTION PERIOD | HOW TO DELETE |
|---|---|---|
| EMAIL ADDRESS (LICENSED) | Duration of active subscription plus a reasonable period for dispute resolution. Deleted promptly upon written request. | Contact us at the address in Section 11 |
| SESSION TOKEN | 24 hours from last activity. Automatically purged by database TTL. | Click Logout, or clear browser local storage |
| MAGIC LINK TOKEN | 15 minutes from issuance, or immediately upon first use -- whichever is earlier. | Automatic |
| RATE LIMIT COUNTERS | 1 hour. Not stored permanently. | Automatic |
| PAYMENT RECORDS | Retained by Lemon Squeezy per their policy and applicable tax law. StockClock retains only the payment confirmation event. | Contact Lemon Squeezy directly |
| ANALYTICS DATA | Retained by Google per GA4 default settings (14 months for user-level data). | Google Analytics Opt-Out Add-On |
Depending on your country of residence, you may have some or all of the following rights regarding your personal data:
- Right to access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate personal data.
- Right to erasure: Request deletion of your personal data from our systems. We will remove your email and session data promptly. Note that Lemon Squeezy may retain billing records as required by tax law.
- Right to restrict processing: Request that we limit how we use your data while a dispute is pending.
- Right to data portability: Request a machine-readable copy of the personal data you have provided to us.
- Right to object: Object to processing of your data on the basis of legitimate interest.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
To exercise any of these rights, contact us using the details in Section 11. We will respond within 30 days and may request verification of your identity before proceeding.
California residents have the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information. StockClock does not sell personal information. To submit a request, contact us at the address in Section 11.
The legal bases for our processing are set out in the Legal Basis column of Section 02. You have the right to lodge a complaint with your national data protection supervisory authority at any time. We will cooperate fully with any such inquiry.
Nothing on StockClock constitutes financial advice, investment recommendations, or solicitation to buy or sell any security.
Contract values, supplier relationships, company profiles, and all other data displayed are provided for research and informational purposes only. They represent a snapshot of public government records as of the most recent data pipeline run and may not reflect current conditions.
StockClock is not a registered investment adviser, broker-dealer, financial analyst, financial institution, or securities firm. Nothing on this platform should be construed as an offer to buy or sell, or a solicitation to buy or sell, any security or financial instrument.
StockClock is not affiliated with, endorsed by, or connected to the U.S. Department of Defense, the U.S. Treasury, the Securities and Exchange Commission, USASpending.gov, SEC EDGAR, or any other government agency or entity.
Use of this platform is entirely at your own risk. StockClock accepts no liability for any financial loss, trading decision, or investment outcome made in reliance on data presented here. Verify all figures against primary sources before acting on them.
To the maximum extent permitted by applicable law, StockClock's total aggregate liability to you for any claim arising out of or in connection with this platform or these terms shall not exceed the total amount you paid for your current active subscription period.
The following limitations apply to all data displayed on this platform and should be understood before relying on any figure.
| LIMITATION | DETAIL |
|---|---|
| CACHED DATA | All data reflects the most recent pipeline run. Contract values are not updated in real time. Check the Last Refresh date on the dashboard. |
| ENTITY NAME MATCHING | USASpending.gov requires exact legal entity names. Companies with non-standard registered names may appear to have $0 in contracts even if awards exist under a variant of their name. |
| INFERRED SUPPLIERS | The majority of supplier relationships are inferred from bill-of-materials and sector matching, not confirmed contractual records. They indicate possibility, not verified fact. |
| DEOBLIGATIONS | Negative contract values caused by funding reductions are floored to $0. True net obligations may differ from displayed totals. |
| UNIVERSE SCOPE | Only NYSE and NASDAQ listed companies are tracked. Private contractors, foreign-domiciled entities, small businesses, and unlisted subsidiaries are excluded. |
All contract and company data displayed on StockClock is sourced exclusively from the following official public records.
| SOURCE | WHAT IT PROVIDES | STATUS | LINK |
|---|---|---|---|
| USASPENDING.GOV | Federal contract award values, awarding agencies, award dates, and performance descriptions | U.S. government public domain data. Reproduced for informational purposes. | open_in_newVISIT |
| SEC EDGAR | 10-K annual filings, SIC industry codes, company CIK identifiers, and ticker symbols | U.S. government public domain data. Reproduced for informational purposes. | open_in_newVISIT |
| NYSE / NASDAQ | Listed securities universe defining the set of exchange-listed companies that StockClock tracks | Publicly listed exchange data. Used only to define the tracked universe. | -- |
We may update this Privacy Policy to reflect changes in our practices, legal requirements, or the services we use. When we make changes, we will update the effective date at the bottom of this page.
For material changes affecting how we handle your personal data, we will make reasonable efforts to notify active subscribers via their registered email address. Continued use of the platform after changes take effect constitutes acceptance of the revised policy.
Previous versions of this policy are available upon written request.
For questions about this Privacy Policy, to exercise your data rights, to request deletion of your personal data, or to report a data concern, contact us at:
StockClock
Email: privacy@stockclock.io
Subject line: Privacy Request -- [your email address]
We will acknowledge your request within 5 business days and provide a substantive response within 30 days. For complex requests, we may extend this by a further 30 days and will notify you accordingly.
For subscription billing disputes, contact Lemon Squeezy directly -- they hold your payment records as Merchant of Record.
For data accuracy concerns, the authoritative sources are USASpending.gov for contract data and SEC EDGAR for company filings.