Legal
Last updated: August 2026 — the German version of this page is authoritative.
Protecting your data matters to us. We process personal data exclusively on the basis of the GDPR and the Austrian Data Protection Act (DSG), and only to the extent described here.
This website runs on servers of IP-Projects GmbH & Co. KG, Germany (ip-projects.de). When you visit the site, technically necessary access data is processed: IP address, date and time, requested page, and browser user agent.
The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR). Server logs are stored briefly and deleted automatically.
acuno uses strictly necessary cookies only: session cookies for signing in to the protected area (Auth.js). These are required to provide the service and do not need consent (§ 165(3) Austrian Telecommunications Act, TKG 2021).
No tracking, analytics, or advertising cookies are set. For that reason, this website does not show a cookie banner.
For audience measurement we use Plausible Analytics, operated on our own infrastructure. Plausible works without cookies and without cross-device tracking; no personal profiles are created. IP addresses are processed only transiently for aggregation and are not stored.
The legal basis is our legitimate interest in privacy-friendly analysis of website usage (Art. 6(1)(f) GDPR).
If you sign up for our newsletter, we process your email address to send you information about the launch and development of acuno. The legal basis is your consent (Art. 6(1)(a) GDPR, § 174 TKG 2021).
Sign-up uses a double-opt-in process: it only takes effect once you confirm it via the link in the confirmation email. Unconfirmed sign-ups are deleted automatically after 30 days.
You can withdraw your consent at any time — via the unsubscribe link in every email or informally by emailing us. Your address is stored until withdrawal and deleted afterwards.
We use an email service provider as a processor for sending ([provider to be added before launch]).
If you create an account, we process the data you provide: email address, name, and password. Passwords are stored exclusively as a cryptographic hash (bcrypt).
Alternatively, you can sign in with your Google account. Google then learns of the sign-in; Google’s privacy policy additionally applies. Any transfer to the United States takes place on the basis of the EU-US Data Privacy Framework.
As part of your use of the service, we also process the content you create: portfolios, transactions, watchlists, and learning progress. The legal basis is the performance of the usage contract (Art. 6(1)(b) GDPR).
Account data is stored until you delete your account. You can delete your account at any time in the settings; this also deletes your product data.
We do not pass personal data to third parties for advertising purposes. To provide the service we use processors (hosting, email delivery) under contracts pursuant to Art. 28 GDPR.
You have the rights to access, rectification, erasure, restriction of processing, data portability, and objection. You can withdraw any consent you have given at any time with effect for the future. To do so, contact the email address listed above.
If you believe the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde): Barichgasse 40–42, 1030 Vienna, dsb.gv.at.
We update this privacy policy when the service or the legal situation changes. The current version published on this page applies.