This policy explains what SmartScanner collects, why, and what you can do about it. It is written to meet the disclosure expectations of India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the requirements of the advertising networks used on this site.
| Data | When | Why |
|---|---|---|
| Email address, name and profile picture | When you sign in with Google | To identify your account and keep your portfolio separate from other users' |
| Portfolio entries — symbols, quantities, prices, dates, notes | Only if you enter them | To show you your own holdings and their profit/loss |
| Session cookie | On login | To keep you signed in. Strictly necessary; the site cannot work without it |
| Server logs — IP address, request time, page requested | Automatically | Security, abuse prevention and debugging |
The operator does not collect your Google password, does not access your Gmail, Drive, contacts or any other Google data. The sign-in requests only your basic profile and email address.
The operator does not ask for and does not want your bank details, demat account credentials, broker login, PAN, Aadhaar or any payment information. Never enter those on this website.
Your data is processed for the specific purposes listed above, on the basis of the consent you give by signing in and by entering information. It is not used for any unrelated purpose.
Two kinds of cookies are involved:
Secure, HttpOnly and SameSite=Lax, so it
travels only over HTTPS and cannot be read by scripts.Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this and/or other sites.
You can opt out of personalised advertising by Google at google.com/settings/ads, and opt out of some third-party vendors' use of cookies at aboutads.info/choices. You can also block or delete cookies in your browser settings; the site will still work, though you will have to sign in again.
Your personal data is not sold and is not shared with third parties for their own marketing. It is handled only by:
Data may also be disclosed if required by law or a valid order of a court or authority.
Data is stored in a database on the site's own server, located in the United States, and is retained while your account is in use. Server logs are kept only as long as needed for security and debugging. If you ask for your account to be deleted, your profile and portfolio records are removed.
Access requires authentication, all traffic is served over HTTPS, secrets are held outside the source code, and each user's portfolio is readable and writable only by that user, which is enforced on the server for every single operation.
No system is perfectly secure, and no absolute guarantee can be given. Because this site never handles money, credentials or payment data, a compromise cannot cost you funds — but please use a strong, unique Google account password and enable two-factor authentication.
Under the DPDP Act you may request:
To exercise any of these, use the contact address below. You may also raise a grievance with the Data Protection Board of India if you are not satisfied with the response.
This site is not intended for children, and children's data is not knowingly collected. If you believe a child has provided personal data, contact the operator so it can be deleted.
For any privacy question, correction or deletion request, contact the operator at sumit_pal@creativefrenzy.in.
This policy may be updated. The "last updated" date at the top will change, and continued use after an update means you accept it.