MoneyCity privacy policy

Last updated: 20 October 2026

Who is responsible for your data

The controller of your personal data is Tomasz Cyranski, who runs MoneyCity (moneycity.pl) as a private individual. For anything about your data, write to [email protected].

What we process

Your Google account: its Google id, email address, name and profile picture URL. Google gives them to us when you sign in.
Your city and portfolio: what you type in or import: tickers and names of holdings, share counts, cost, values, dividends and building positions. When you import from a broker we also keep the broker's name with the last four characters of the account number (e.g. "XTB …4482") to tell your accounts apart. Broker files are read only in your browser and never reach our server; the full account number is never stored.
Settings: display currency, completed goals and whether the introduction has been shown.
Account activity: when the account was created, when you last signed in and when you were last active in the app (recorded at most every few minutes), and whether the account is blocked.
Session: a random token in a cookie in your browser. The server stores only its hash and expiry date.
Messages you send with Contact us in the app, and our replies.

We don't store your IP address or details of your browser. We don't use analytics or advertising tools.

Why, and on what legal basis

Running your account and the service (saving your city and settings, fetching prices, logos, exchange rates and news about your holdings, broker import) – Art. 6(1)(b) GDPR (performing the contract: providing MoneyCity at your request).
Keeping the service secure, preventing abuse (including blocking accounts) and overall usage statistics from the activity dates – Art. 6(1)(f) GDPR (our legitimate interest in a secure, working service).
Answering your messages – Art. 6(1)(f) GDPR (legitimate interest in talking to our users).
Database backups – Art. 6(1)(f) GDPR (protection against data loss).

Your Google account details are needed to create an account; without them you can't use MoneyCity. Everything else is up to you. We make no automated decisions about you and don't profile you. MoneyCity is meant for people aged 16 and over.

Who can see it

We don't sell your data. The administrator can see, in the admin panel, the list of users (email, name, picture, dates of sign-up, sign-in and activity, and the size of each city – not its contents) and messages sent with Contact us. The following process data on our behalf or receive it:

Cloudflare, Inc. (USA) – hosts the app and the database (created with a Western Europe location) and forwards mail to [email protected]. It also processes IP addresses to deliver pages.
Google – sign-in (Google is a separate controller of your Google account data). Your browser loads your profile picture from Google's servers. Our server searches Google News for the names of the stocks and crypto in your portfolio to show news about them.
Yahoo Finance – our server sends tickers, the search text you type, and the ISINs, symbols and names of securities from imported files to look up prices.
Financial Modeling Prep, Parqet and jsDelivr – our server fetches logos from them by ticker.
frankfurter.dev – your browser fetches exchange rates from it, so it sees your IP address and currency codes.
Resend, Inc. (USA, sending from its EU region) – emails our replies to your messages; it receives your email address, your message and the reply.

Our server never sends your name, email, IP address or amounts to Yahoo, Google News or the logo services – only symbols and names of holdings.

Transfers outside the EEA

Cloudflare, Google and Resend are US companies, so data may be processed outside the European Economic Area. This relies on the European Commission's adequacy decision for the EU–US Data Privacy Framework or on the standard contractual clauses in these providers' data processing agreements.

How long we keep it

Account, city, settings and activity dates – until you delete the account.
Blocked accounts – deleted with their city and messages 12 months after being blocked.
Sessions – 30 days from last use; expired sessions are deleted.
Contact messages – 12 months after our reply, or 24 months if unanswered. Emails exchanged with [email protected] stay in our mailbox as long as needed to deal with your request, at most 24 months.
Copies: the database history at Cloudflare covers 7 days and backups are kept for at most 30 days. After you delete your account, your data is gone from the copies within 30 days.

Cookies

We use only two cookies, both needed for signing in, so they don't require your consent:

__Host-mc_session – keeps you signed in, valid for 30 days (renewed while you use the app).
__Host-mc_oauth – protects the Google sign-in, valid for 10 minutes and removed right after you sign in.

Nothing else is stored in your browser, and we use no analytics or advertising cookies.

Your rights

Access and portability: Download my data in the account menu saves everything stored about you as a JSON file.
Rectification: you change your city in the app; your name, email and picture are updated from your Google account the next time you sign in.
Erasure: Delete account in the account menu permanently removes your account, sessions, city, settings and messages from the database at once (and from the copies within 30 days).
Restriction of processing, and objection to processing based on legitimate interest.

You can also use any of these rights by writing to [email protected] – including when your account is blocked and you can't sign in. We answer within a month. You also have the right to lodge a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).

Changes

If we change this policy, we'll update the date at the top of the page.