Privacy Policy
This page explains which data BlissPoint collects, why, and with whom it is shared. In short: we collect the minimum needed to let you sign in, and we sell data to no one.
Data controller
The controller of the data collected through this site is BlissPoint, reachable at info@bpblisspoint.com. We process data to provide the service you request (legal basis: performance of the contract) and, for non-essential cookies, only after your consent, which you can withdraw at any time.
What we collect
When you register we ask for your first name, last name, email address and date of birth, plus a password we store only in encrypted form and never in the clear: not even we can read it. The date of birth is used for one thing only, checking that you are of age. You may say, if you like, how much experience you have with investing: it is optional and only decides whether the technical panels in the results open by themselves. We also keep whether you confirmed your account. We do not ask for your phone number, we do not ask where you live and we ask nothing about your wealth.
The portfolios you analyse
The securities you enter for an analysis are used for the calculation and stay in your browser session while you remain signed in, so you do not have to type them again every time: those are not stored in the database. Portfolios you deliberately save under «My portfolios» are a different matter: for those we keep the name you gave and the list of symbols, linked to your account, until you delete them. We never keep prices or the results of the calculation — those are redone every time — and we do not ask how much you invested or where, unless you choose to tell us (see the section below). When you close your account, saved portfolios are deleted along with everything else.
The portfolio you own, if you choose to tell us
Below the result of an analysis there is an optional switch, off by default, where you can say how much you hold of each security, what your portfolio is worth today and how it is doing. It serves one purpose: putting your portfolio next to the ones BlissPoint computes. If you never turn it on, none of this ever reaches the database. If you do turn it on and attach the information to a saved portfolio, we keep the quantities or percentages you gave, the value, the capital invested that follows from it, and the date of every reading, so that on your next visit you find everything updated to the latest prices without entering it again. It is the most sensitive data this site keeps — it does not say what you are interested in, it says what you own — and for that reason you can delete it at any moment from «My portfolios», on its own and without touching the portfolio, and it goes away with everything else when you close your account. We share it with no one and use it for nothing else.
Third-party services
BlissPoint relies on external providers to work: Render for web infrastructure, Neon for the database, Resend to send confirmation and reset emails, Yahoo Finance for historical prices and Google AdSense for advertising. Each processes data under its own policy.
Anti-robot check
The sign-up form is protected by Cloudflare Turnstile, which tells a person from a program by watching how the browser behaves: it installs no profiling cookies and is not used to recognise you on other sites. Your browser contacts Cloudflare, which sees its IP address and technical characteristics; our server then asks Cloudflare only whether the check succeeded, without sending it your IP address. It exists to stop a program from creating automated accounts — which is also how our domain would end up sending email to people who never asked for it.
Advertising
The site hosts Google AdSense ads. Google and its partners may use cookies to serve ads based on your visits to this and other sites. You can turn off ad personalisation in Google's advertising settings.
How many people use the site
We count visits and analyses to know whether the site is of use to anyone. We do not use Google Analytics or any other external service: counting happens on our own server and never leaves it. No cookie is written. To avoid counting the same person twice on the same day we compute an irreversible code from IP address and browser, mixed with a secret value that changes every midnight: the next day that code matches nobody, so we cannot follow you over time and we do not keep your IP address. Only daily totals remain, and they are about nobody in particular.
What you accepted, and how to change it
We keep a register of what you accept: which document, in which version, on what date, and from which IP address and browser. It is what lets us show the consent was collected properly, and tell you even two years later exactly what you had accepted. Emails about news and updates are a separate matter: the box is never pre-ticked, the account works the same if you leave it empty, and you can change your mind at any time from your profile page, without writing to us. Withdrawing does not erase the earlier line: it adds a new one saying when you withdrew. Service emails — account confirmation and password reset — do not depend on this consent, because they are what lets you sign in.
Data retention
Account data remains for as long as the account exists. When you close it, first name, last name, date of birth and experience are deleted straight away; from the consent register only dates and versions stay, with no IP address or browser left and nothing linking them to a person. Confirmation links expire after seven days, reset links after one hour. Sessions last at most seven days. Market prices are not stored: they stay in memory for the duration of the calculation and in a cache that clears itself after fifteen minutes.
Your rights
You can access your data, correct it, delete it, object to the processing or ask for a copy. Many of these you do yourself from your profile page, without asking anyone: there you find what we know about you, the consent register and the button to close your account. Closing it deletes your first name, last name, date of birth and experience; a placeholder replaces your email and your password becomes a random value, so neither an address nor a credential remains. From the consent register only dates and versions stay, with nothing left linking them to you: they show the consent was collected and withdrawn properly, and this is one of the cases where the law itself asks us to keep records. For everything else write to info@bpblisspoint.com: we reply within thirty days. If you think we are handling your data improperly, you can turn to the data protection authority of your country.
info@bpblisspoint.com