LEGAL

Privacy Policy

Last updated 2 November 2026

1. Who is responsible

XMKT ("we", "us") is responsible for the personal data described here. Polar, our reseller, is separately responsible for the data it collects at checkout, under its own privacy policy. Contact us at luke.wallace@xmkt.org.

2. The website (xmkt.org)

The website sets no cookies and uses no analytics or advertising tools. Like any website, it's served by a hosting provider (Netlify), which keeps standard server logs, such as IP addresses and the pages requested, for security and to run the service. The site loads its fonts from Google Fonts, so Google receives your IP address when you visit.

3. When you subscribe

Checkout happens on Polar. Polar collects your name, email address, billing address and payment details, and processes payments through its payment providers. We receive your email, your name, what you bought, your subscription status and your billing country, but never your card details. We use this to provide your subscription, send your licence key, answer support requests and meet our tax and accounting obligations.

4. When you use the app

• Licence checks. When you activate XMKT, the app sends your licence key and a label made from your Mac's name (for example "Alex's MacBook Air · XMKT Stream") to Polar. It then re-checks the key with Polar every few hours. This lets you see and remove your activated Macs, and lets the app confirm your subscription. Your activation details are also saved on your Mac.
• Things that stay on your Mac. Your watchlists, layout, alerts, chart settings and API keys are stored only on your Mac. We never receive them.
• Data sources. To show market data, the app connects from your Mac directly to its sources. These include Finnhub (with your own key), Coinbase, public index and futures quote providers, FRED, the ONS, the Bank of England, Japan's Ministry of Finance, the ECB, SEC EDGAR and news publishers. Like any website you visit, those services see your IP address. Requests to SEC EDGAR include a contact address for XMKT, as the SEC requires. Each source's own privacy policy applies.
• Interactive Brokers (optional). If you connect IB Gateway, the app reads prices and your positions from IB Gateway on your own Mac. That information is shown only on your screen and isn't sent to us. Account numbers are never displayed.

The app has no analytics or crash reporting, and sends nothing else to us.

5. Legal basis

We use your data to perform our contract with you (providing your subscription and the app), to meet legal obligations (tax and accounting records), and for our legitimate interests (preventing licence misuse and answering your messages).

6. How long we keep it

We keep subscription and billing records for as long as tax and accounting law requires, usually 6 years. Licence activations are kept while your subscription is active and for a reasonable period afterwards. Support emails are kept for up to 2 years after we last hear from you.

7. Who we share it with

We share your data only with the services that help us run XMKT: Polar for checkout, subscriptions and licence keys, and Netlify for website hosting. We'd also share it if the law required us to. We don't sell your data. Some of these providers process data outside the UK and EU. Where they do, they use legal safeguards such as standard contractual clauses.

8. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another service. Email luke.wallace@xmkt.org. Some details we must keep for tax reasons even if you ask us to delete them. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk) or your local data protection authority.

9. Changes

If we change this policy in a way that matters, we'll update the date above and email subscribers.