Privacy Policy

1. Who we are

“Unusual Breakouts” (the “Site”) is a web application that presents stock screening-style lists (for example momentum, growth, and thematic views) for educational informational purposes only. The Site is owned and operated by Niv Goren, Israel (“we,” “us,” or “our”), who is the controller of personal data processed through the Site. Contact details are in section 17 below.

2. Scope

This policy applies to information processed when you visit or use the Site in a browser. It does not cover third-party websites, brokers, or data vendors you may visit separately.

3. Information we process

Depending on how you use the Site, we may process:

• Technical and usage data (automatic) — When you load pages or call our API routes, standard server and hosting systems may process information such as IP address, browser type, general location derived from IP (e.g., country/region), date/time, requested URLs, and HTTP status. Our hosting provider (for example, when deployed on Vercel or similar) may also process similar technical data to deliver the service and protect against abuse.
• Analytics and session replay (only if you accept) — If you click Accept on the cookie banner, we load tools that help us understand usage, including Google Analytics 4, Microsoft Clarity (which may record interactions such as clicks, scrolling, and page content for session replay and heatmaps), and Vercel Web Analytics. These tools may set cookies or use similar storage and may collect device and usage data according to their own policies.
• Consent preference (device storage) — We store your Accept/Decline choice in localStorage on your device so we do not ask again on every visit. This is not used to sell personal information.
• No accounts required — You do not need an account to browse lists. If you choose to sign in with Google, see section 4. We do not knowingly collect government IDs or payment card data through this Site.

4. Google user data (Sign in with Google)

You can sign in to the Site with your Google account to unlock the full UB Score breakdown and all hottest themes. Signing in is optional and free; you can browse the rest of the Site without it. This section explains exactly what we receive from Google and what we do with it.

• What we receive — Only your basic Google profile information: your name, email address, profile picture, and a Google account identifier. We request no other access. We cannot see your Gmail, Google Drive, Calendar, contacts, or any other data in your Google account.
• How we use it — Only to sign you in, keep you signed in, and identify your account on the Site (for example, to show your first name in the menu and unlock content for signed-in users). We also keep a record of your account (Google account identifier, email, name, profile picture link) with the dates of your first and latest sign-in, how many times you have signed in, which part of the Site you signed up from, the IP address and country of your first sign-in (to understand where our users come from and to detect abuse), and the date of your latest visit and on how many days you visited while signed in. We do not use Google user data for advertising, to build marketing profiles, or to target ads. The only other use is sending you emails, and only if you separately opt in (section 5).
• Sharing — We do not sell, rent, or trade Google user data. We do not share it with third parties, except with service providers that host the app for us (who may process it only to provide that service), or when required by law.
• Storage and security — Your signed-in session is kept in an encrypted, signed cookie in your browser. Your account record is stored in our database on a secured server. Google user data is sent only over encrypted connections (HTTPS) and is accessible only to the operator.
• Retention and deletion — We keep it while your account is active. You can ask us to delete it at any time using the contact details in section 17, and we will delete it within 30 days. You can also remove our access at any time from your Google account at myaccount.google.com/permissions.

Unusual Breakouts' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Marketing emails

You can choose to receive emails from us (members-only research, articles, market and product updates) by ticking the box next to “Sign in with Google”, or, after you sign in, by clicking “Yes, email me”. We send them only if you do one of these. The box is never pre-ticked, saying no doesn't limit your access to the Site, and signing in alone is never treated as agreement.

• What we record — your choice, the exact wording you were shown, its version, the date and time, and your IP address and country at that moment, so we can show when and how you agreed.
• Withdrawing — you can unsubscribe at any time with the link in every email, or by clicking your name at the top of the Site and choosing “Unsubscribe”. We stop emailing you promptly.
• Sharing — we never sell or share your email address. We may use an email delivery provider to send the emails on our behalf, under its contractual safeguards.
• Retention — we keep your address for marketing until you unsubscribe or delete your account. Records of consent decisions are kept as proof for as long as the law requires.

6. How we use information

We use information to:

• Provide and maintain the Site and fetch list data for display;
• Measure audience size and site performance, diagnose errors, and improve the product — only where you have accepted analytics in the banner (except for essential technical logs needed to operate secure infrastructure);
• Detect abuse, fraud, or security incidents;
• Comply with law and enforce our terms, if any.

7. Legal bases (EEA, UK, and similar jurisdictions)

Where the GDPR or UK GDPR applies, we rely on the following bases:

• Consent (Art. 6(1)(a)) — For optional analytics, session replay, and similar technologies loaded only after you choose Accept, and for marketing emails, sent only if you choose Yes, email me.
• Legitimate interests (Art. 6(1)(f)) — For operating the Site, ensuring network and information security, maintaining server logs in line with good practice, and understanding aggregate service reliability — balanced against your rights.
• Legal obligation (Art. 6(1)(c)) — Where we must retain or disclose information to comply with applicable law.

8. Cookies and similar technologies

We ask for permission before loading non-essential analytics scripts. If you choose Decline, those scripts are not loaded. Strictly necessary technical operation of the Site may still involve processing by our hosting stack as described above.

For more on how Google, Microsoft, and Vercel handle data, see their privacy documentation: Google Analytics, Microsoft Privacy Statement / Clarity, and Vercel’s privacy policy.

9. Sharing and subprocessors

We do not sell your personal information for money. We may share data with service providers who assist us — for example hosting, analytics (when enabled), and content delivery — solely to provide the Site. Those providers process data under contractual safeguards appropriate to their role.

10. International transfers

Our service providers may process data in the United States and other countries. Where required, we rely on approved transfer mechanisms (such as Standard Contractual Clauses) or other lawful grounds for cross-border processing.

11. Retention

We keep technical logs only as long as needed for security, debugging, and legal compliance — typically weeks to months unless a longer period is required by law. Analytics providers retain data according to their settings and policies. Your stored consent preference remains until you clear site data in your browser or we change how consent is stored.

12. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or export personal data, and to object to certain processing. You may also withdraw consent for optional analytics at any time by clearing localStorage for this Site and refreshing — you will see the banner again. Some browsers offer global opt-outs for interest-based ads; our current implementation is consent-based at the banner.

EEA/UK users may lodge a complaint with a supervisory authority. California residents may have additional rights under the CCPA/CPRA (see below).

13. California residents

We do not sell personal information as defined by California law. You may have the right to know categories of personal information collected, to request deletion of personal information subject to exceptions, and to opt out of certain sharing — where applicable, contact us using the details below. We will not discriminate against you for exercising these rights.

14. Children

The Site is not directed at children under 16, and we do not knowingly collect personal information from children.

15. Financial and educational disclaimer

Information shown on the Site is for educational and informational purposes only. It is not investment, financial, tax, or legal advice. Past performance does not guarantee future results. See our Terms of Service for the full disclaimer.

16. Changes

We may update this policy from time to time. The “Last updated” date will change when we do. Material changes may be highlighted on the Site where practical.

17. Contact

For privacy-related requests or questions about this policy, contact us on X (Twitter) via direct message.