Legal Notice

Publisher and Publication Director

Contact email: bonjour@spreadtool.eu. This project is neither lucrative nor professional.

Hosting Provider

OVHcloud SAS — 2 rue Kellermann, 59100 Roubaix, France — Phone: +33 9 72 10 10 07

License

This project is under MIT License. Source code available on GitHub

Personal Data

OVH Hosting and Server Logs

OVH collects IP, user-agent and timestamps as required by French law (LCEN).

Duration: 1 year (LCEN) — 12 months max for technical logs.

OVH Privacy Policy

Server Statistics (OVH Web Statistics)

Included OVH hosting service. Data comes from logs retained for 1 year (LCEN). No cross-referencing with other databases.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Duration: based on 1-year logs.

Cloudflare

This site uses a Cloudflare Worker to route requests to the Yahoo Finance API (bypassing CORS restrictions). Your IP address is processed during this transit to enable technical execution of the service. Cloudflare is certified under the EU-U.S. Data Privacy Framework (DPF), which legally covers data transfers to the United States.

Purposes: security, performance and technical execution of the proxy service.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Cloudflare GDPR Information

Transparency on the data transfer legal framework

Although Cloudflare is certified under the EU-U.S. Data Privacy Framework (DPF) — currently deemed valid by the European Union's General Court (Latombe case, T-553/23, September 2025) — expert voices such as the NOYB association challenge this decision. The structural issues highlighted by the Schrems II ruling (US surveillance via FISA 702, CLOUD Act, extraterritoriality) remain unresolved, and the US RISAA law (April 2024) has even expanded surveillance capabilities. A "Schrems III" ruling invalidating the DPF is highly likely to happen.

We are genuinely interested in implementing a European alternative. To date, no free European equivalent service exists for this technical functionality (CORS proxy). If you know of a free European sovereign solution or wish to collaborate on developing an alternative, please contact us at bonjour@spreadtool.eu. This disclosure aims to fully embrace transparency regarding a transfer made in an uncertain legal context, while complying with current law.

localStorage Data

Certain information is stored locally in your browser (localStorage). This data is not transmitted to our servers and remains under your exclusive control. You can delete it at any time via your browser settings.

Legal basis: technical necessity of the requested service.

Your Rights

User Rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR), you have the following rights: right of access, rectification, erasure, restriction of processing, objection to processing, and data portability.

The only data collected is your IP address and user agent via server logs (OVH hosting).

Exercise Your Rights

To exercise these rights, contact us at: bonjour@spreadtool.eu

Response time: 1 month in accordance with Article 12(3) GDPR.

Recourse

In case of dispute, you have the right to contact your local data protection authority (in France: CNIL).