Monolith Quant takes the privacy of visitors seriously. This policy explains what personal data we collect, why we collect it, how it is used, and what rights you have under Swiss law (DSG / revised FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
This website uses no tracking pixels, advertising networks or analytics tools. It sets one strictly necessary cookie when you log in to the dashboard, stores your dashboard preferences in your own browser, and processes the personal data you actively submit through the contact and waitlist forms. Customer accounts and payments are not yet offered; the sections marked from public launch describe what will apply once they are.
The data controller is Nicolas Ossa Contreras, trading as Monolith Quant. Full contact details are in the Impressum. For privacy enquiries: contact@monolithquant.com.
Today we process the personal data you submit through the contact form and the waitlist form. No data is collected passively by us beyond what hosting requires (see Hosting).
| Field | Purpose | Legal basis | Retention |
|---|---|---|---|
| First & last name | Addressing your enquiry | Consent (Art. 6(1)(a) GDPR) | Until resolved + 12 months |
| Email address | Responding to your message | Consent (Art. 6(1)(a) GDPR) | Until resolved + 12 months |
| Waitlist form: name, email, plan of interest, how you trade, referral source | Inviting you when access opens | Consent (Art. 6(1)(a) GDPR) | Until launch + 12 months, or until you ask us to delete it |
| Message content | Understanding your enquiry | Consent (Art. 6(1)(a) GDPR) | Until resolved + 12 months |
When customer accounts open, we will store on our own server, located in Switzerland: your username, your e-mail address, a salted hash of your password (never the password itself), your subscription plan, billing status and invoices, security events (logins, password and username changes, with time and IP address) and the dashboard preferences you save to your account. This data is processed to provide the service you subscribe to (Art. 6(1)(b) GDPR) and to keep the account secure (Art. 6(1)(f) GDPR). It is kept for the life of the account and for 12 months after closure, except invoices, which Swiss law requires us to keep for 10 years.
Your e-mail address is fixed at signup and cannot be changed. Changing your password or username requires a verification code sent to that address; every security change is confirmed by e-mail. Accounts can be deleted from the account page or by e-mail request.
Subscriptions will be billed by a payment processor (planned: Stripe Payments Europe, Ltd., Ireland). Card details are entered on the processor's pages and never reach our servers; we receive a payment token, the card brand and last four digits, and the billing status. Stripe acts as an independent controller for the payment itself; see stripe.com/privacy.
Recurring billing requires that we e-mail you: when a payment becomes due (ten days before renewal), on every charge, and when a charge fails. These notices are part of the contract and cannot be switched off while a subscription is active. Product news is separate and only sent with your consent.
The dashboard shows analytics computed from CME Group market data delivered by Databento, Inc. Exchange licensing requires us to record which subscribers access real-time data and to report subscriber counts and professional/non-professional status to the exchange. We do not share your name with the exchange unless its licence terms require it; in that case we tell you first.
This website is hosted on Vercel Inc. (USA), which serves pages via its global Edge Network. When you visit the site, Vercel automatically processes standard technical data, including IP address, browser type, referring URL, and timestamp, for security and operational purposes.
Vercel acts as a data processor on our behalf under a Data Processing Addendum that incorporates Standard Contractual Clauses for transfers outside the EEA/Switzerland. Vercel is certified under the EU-US Data Privacy Framework. See vercel.com/legal/privacy-policy for details.
Contact form submissions are processed by Formspree, Inc. (USA), which acts as a data processor solely to transmit your message to us. Formspree does not use your data for any other purpose.
Data transfer to the USA is covered by Formspree's Standard Contractual Clauses. See formspree.io/legal/privacy-policy.
We do not use any analytics software, advertising networks, or social tracking tools. The website sets one first-party cookie, mq_session, when you log in to the dashboard: it holds a signed session token so that the dashboard and the data stream know you are logged in, expires after 7 days or when you log out, and is never used for tracking. Under Swiss law and the ePrivacy rules this strictly necessary cookie needs no consent.
The dashboard also stores your preferences (time zone, palette, layout, selected instrument, sign-in state) in your browser's local storage. This data stays on your device and is not sent to us.
Vercel may set a short-lived technical cookie for edge routing and security purposes. This is strictly necessary and does not track individuals for marketing. Cloudflare (DNS/CDN layer) may similarly set a bot-management cookie (__cf_bm). Neither is used for profiling or advertising.
Under Swiss DSG and, where applicable, the GDPR, you have the following rights:
To exercise any right, contact contact@monolithquant.com. We will respond within 30 days.
We may update this policy from time to time. The date at the top reflects when it was last revised. Continued use of the website after changes constitutes acceptance of the updated policy.