Skip to content
OrangeScope iconOrangeScope

Legal information

Privacy Policy

This policy explains which personal data OrangeScope processes, why it is needed, who receives it, how long it is retained, and which rights you have.

Version dated 30/8/2026

1. Controller

Sebastian Ehrig, trading as OrangeScope
Rosenthaler Str. 72a, 10119 Berlin, Germany
Email: info@orangescope.de

2. Website delivery, hosting, and security logs

When you open OrangeScope, the server processes connection and request data such as IP address, timestamp, requested URL, response status, referrer, and browser/device information. This is necessary to deliver the site, diagnose faults, defend against misuse, and maintain technical security. The legal basis is Article 6(1)(f) GDPR; where the request concerns a contract, Article 6(1)(b) GDPR also applies.

The website, application server, database, and transactional mailbox are hosted using Hostinger services. Hostinger may process technical and communications data under the applicable contractual data-protection arrangements. Security logs are retained only for the operational period needed to operate and protect the service, unless a security incident or legal claim requires restricted longer retention.

3. Essential cookies

OrangeScope currently uses only first-party, technically necessary HTTP-only cookies. orangescope_viewer assigns a random identifier to keep public chart requests and cached responses consistent and expires at the end of the browser session. orangescope_session maintains a signed dashboard session after login; its normal maximum lifetime is 12 hours and it expires sooner where the underlying trial or paid access ends. Both cookies use SameSite=Lax and are marked Secure in production.

The cookies are not used for advertising or cross-site tracking. Storage/access is permitted under Section 25(2)(2) TDDDG; subsequent processing relies on Article 6(1)(b) and (f) GDPR. Optional analytics, advertising pixels, and marketing cookies are not currently used, so no consent banner is displayed. This position must be reassessed before adding any non-essential browser storage or third-party tracking.

4. Trial requests and account access

For a trial request we process the submitted email address, request and approval timestamps, access status, expiry date, and a pseudonymized hash of the requesting IP address. The data is used to review the request, issue secure temporary credentials, prevent misuse, and operate access control. The legal bases are Article 6(1)(b) GDPR and, for security and abuse prevention, Article 6(1)(f) GDPR. Passwords and approval tokens are stored only as hashes.

Trial records are normally deleted 90 days after a pending request or granted access expires. A trial request does not subscribe you to marketing and does not automatically become a paid contract.

5. Paid subscriptions and Mollie

For checkout and contract performance, OrangeScope processes your name, email, German billing address, selected plan, billing interval, price, order and payment identifiers, payment status, access term, and the versions of the legal information accepted at checkout. The legal basis is Article 6(1)(b) GDPR. Tax and accounting records are processed under Article 6(1)(c) GDPR in conjunction with applicable German commercial and tax law.

Mollie B.V. processes payments for OrangeScope as a payment service provider. Mollie and OrangeScope generally act as independent controllers for their respective payment-processing activities. OrangeScope does not receive or store complete card, bank-account, or payment-credential details. Mollie's checkout privacy information applies in addition to this policy. See the Mollie Privacy Policy.

6. Withdrawal, cancellation, and support

When you use an electronic contract-action form, we process your name, email, contract/order reference, declaration, requested end date, optional reason, receipt reference, and timestamp. This is necessary to receive, document, confirm, and process your declaration under Article 6(1)(b) and (c) GDPR. Customer-service emails and support messages are processed to answer the request under Article 6(1)(b) GDPR or our legitimate interest in effective communication under Article 6(1)(f) GDPR.

7. Service messages and signal notifications

Service messages—including trial decisions, credentials, order-related information, withdrawal/cancellation receipts, and security notices—are sent through the Hostinger-hosted mailbox info@orangescope.de. Transactional messages are not promotional newsletters. OrangeScope will not send marketing email without a separate lawful basis.

Premium customers may separately activate standardized market alerts by email, SMS, or both. These include Buy/Sell signals, crossings of modelled drawdown-risk or breakout levels, weekly Gaussian market-phase transitions, and material changes in the displayed macro summary. For this purpose OrangeScope processes the subscription email address or submitted German mobile number, channel preferences and activation time, alert category, relevant signal or market timestamp, reference price or level, previous and current model state where applicable, and technical dispatch status. Processing is necessary to perform the activated notification feature under Article 6(1)(b) GDPR. If a separate consent is required for a particular channel or message, Article 6(1)(a) GDPR also applies. A mobile number is optional and is used only after the customer actively enables SMS and confirms the number. SMS can be disabled at any time in the dashboard with future effect.

When SMS delivery is enabled, messages are transmitted through seven communications GmbH & Co. KG, Willestraße 4–6, 24103 Kiel, Germany. The provider receives the destination number, sender identifier, message content, and delivery metadata required to transmit and troubleshoot the message. See seven.io's privacy information.

8. Recipients and international transfers

Data is disclosed only where necessary to hosting and email provider Hostinger, payment provider Mollie, SMS provider seven.io, and professional, accounting, or IT service providers; to public bodies where legally required; or to establish, exercise, or defend legal claims. Providers receive only the data needed for their task. Mollie generally acts as an independent controller for regulated payment processing, fraud prevention, and its own legal duties. Other providers act under the role and contractual safeguards applicable to their service.

Where personal data is processed outside the European Economic Area, OrangeScope relies on a valid transfer mechanism, such as an adequacy decision or the European Commission's standard contractual clauses, and supplementary measures where required. Customers may request information about the relevant safeguards. Provider or subprocessor changes that materially affect this policy will be reflected here.

9. Retention

  • Trial records: normally 90 days after expiry or final resolution.
  • Session data: until logout, cookie expiry, access expiry, or security-driven invalidation.
  • Signal preferences and mobile number: while the channel remains activated. The number is removed from the active preference when SMS is disabled; evidence required to demonstrate activation or resolve claims may be retained separately for the relevant limitation period.
  • Signal delivery metadata: normally 365 days for duplicate prevention, fault diagnosis, and evidence of delivery.
  • Contract, payment, withdrawal, cancellation, and complaint records: for the contract term and then as required to meet retention duties or defend claims, normally until the relevant limitation period ends.
  • Accounting and tax records: for the applicable statutory retention period, which may be six, eight, or ten years depending on the document and legal basis.
  • Support messages: until resolved and thereafter only while a documented legal, security, or operational reason remains.

Data is deleted or anonymized when no purpose or legal obligation remains.

10. Whether data is required

Technical request data is required to deliver the website. Name, email, German billing address, and payment-related information are required to conclude and perform a paid contract; without them, checkout and access cannot be provided. The information marked as required in a withdrawal or cancellation form is needed to identify and process the contract. A mobile number is optional; if it is not supplied, SMS notifications cannot be delivered and another enabled channel may still be used.

11. Your rights

Subject to the statutory conditions, you have rights to access, rectification, erasure, restriction, data portability, and objection. You may withdraw consent at any time with future effect.

Objection under Article 21 GDPR

Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. OrangeScope will stop the processing unless compelling legitimate grounds override your interests or the processing is needed for legal claims. You may object to direct marketing at any time; no direct marketing is currently performed.

Send requests to info@orangescope.de. OrangeScope may request proportionate proof of identity before disclosing personal data.

12. Complaints, automated decisions, and minors

You may lodge a complaint with a supervisory authority. The competent local authority is the Berlin Commissioner for Data Protection and Freedom of Information. OrangeScope does not make decisions producing legal or similarly significant effects solely through automated processing and does not intentionally offer paid subscriptions to minors.

13. Market-data providers and public sources

OrangeScope retrieves market, macroeconomic, sentiment, and related source data on the server. Merely viewing an OrangeScope page does not cause those source providers to receive your identity from OrangeScope. If you follow an external source link, the destination provider processes the resulting request under its own privacy information.

14. Changes to this policy

This policy is updated when processing operations, providers, or legal requirements materially change. The version date above identifies the current public text. Material changes affecting an existing contract will be communicated where required.