Privacy Policy
Last updated: 25 May 2026
1. Who we are
Epicenter Exchange is a non-commercial, educational website operated solo. It is hosted on GitHub Pages and the source is open on GitHub. Contact: see the contact form.
2. What we collect
- Google Analytics 4: anonymous usage data (pages viewed, country, device class, referrer). IP anonymisation is enabled. Analytics cookies only run after you click Accept all on the consent banner. If you choose Reject non-essential, no analytics cookies are set.
- Google AdSense: serves the ads you see on the site. If you accept, ads may be personalised using AdSense cookies. If you reject, AdSense still loads but serves only non-personalised ads (no profiling). AdSense may also use the IAB Europe Transparency & Consent Framework where applicable.
- Server logs (GitHub Pages): GitHub may temporarily log IP addresses, user agent strings, and timestamps for abuse prevention. We do not access or store these logs separately. See GitHub's privacy statement.
- Contact form: when you submit, your name, email, topic, and message are sent through Formspree, who relays them to us. See Formspree's privacy policy.
- Newsletter: if you subscribe, your email address is stored by Buttondown solely for the purpose of sending the newsletter. See Buttondown's privacy policy.
- Calculator inputs: values you type into the SIP / EMI / retirement / tax / FX calculators are stored only in your own browser via
localStorage. They are not sent anywhere. - Backtester: all calculations happen client-side in your browser. The tickers you query go directly to CoinGecko or Stooq from your browser.
3. Google Consent Mode v2
We implement Google Consent Mode v2 as required for users in the EEA, UK and Switzerland. Before you make a choice, all advertising and analytics storage signals default to denied and no cookies are set. When you choose Accept, we update ad_storage, ad_user_data, ad_personalization and analytics_storage to granted. When you choose Reject, they stay denied and Google receives only aggregated, cookieless pings.
4. Third-party services we use
- Google AdSense — advertising. How Google uses ad data. You can opt out of personalised ads at Google Ad Settings.
- Google Analytics 4 — anonymous usage analytics. Google Privacy Policy. You can opt out with the GA opt-out browser add-on.
- CoinGecko — free public API for live crypto prices. Your browser requests data directly.
- Stooq — free public CSV API for historical equity prices used by the backtester.
- Formspree — contact form delivery.
- Buttondown — newsletter service.
- Google Fonts — web typography (Inter, Fraunces, IBM Plex Mono).
- GitHub Pages — static site hosting.
5. Cookies
See the cookie policy for a full table of every cookie that can be set, including AdSense and Google Analytics cookies.
6. Your rights
Depending on where you live (GDPR, UK GDPR, India DPDP Act, CCPA, etc.), you may have the right to access, correct, delete, or restrict processing of your personal data. To exercise these rights, write to us via the contact form. To withdraw consent at any time, clear your browser storage for this site and reload — the consent banner will reappear.
7. Children
The site is not directed at children under 13 (or under 16 in some jurisdictions) and we do not knowingly collect data from them.
8. Data transfers
Google, Formspree, Buttondown, and GitHub may process data in the United States or other countries. Where applicable they rely on Standard Contractual Clauses approved by the European Commission.
9. Security
The site is served entirely over HTTPS. We don't run a database that holds personal data — only an anonymous request-counting database on the optional API server. We have no usernames or passwords to lose because there is no login system.
10. Changes
If this policy materially changes, the date at the top will be updated. Material changes will be highlighted on the homepage for at least 30 days.
Contact for privacy queries: via the contact form, subject "Privacy".