MoatfoldRequest an invite

Privacy

Privacy, plainly.

Last updated 10 October 2026.

Who is responsible

Moatfold is a free, non-commercial project by Pavel Moravec, based in the Netherlands, who is responsible for the personal data described here (the "controller" under the EU General Data Protection Regulation, GDPR). For anything about your data, e-mail [email protected].

The app

Moatfold runs on your Mac. Your broker exports, analyses and settings stay in the data folder you choose. The app has no servers of its own, no login and no analytics, and it never connects to your broker. We do not receive your portfolio data.

To show prices, fundamentals and fund breakdowns, the app fetches public market data from free public sources and caches it on your Mac. When you run an analysis, Claude reads the files that analysis needs through your own Claude Code or Anthropic API account, under Anthropic's terms and privacy policy. With a local model in Ollama, nothing leaves your Mac.

This website

The website sets no cookies, loads no tracking or analytics scripts and uses no third-party fonts or embeds. It is hosted by Cloudflare, which processes technical request data such as your IP address to deliver the site and protect it against abuse. This is based on our legitimate interest in running a secure website (GDPR article 6(1)(f)).

Invite requests

When you request an invite we store:

  • your e-mail address,
  • the broker and the note you chose to give,
  • whether you also asked for news,
  • the country your request came from (as reported by Cloudflare, not your IP address) and the time.

Why and on what basis. We use this to send you an invite and, only if you ticked the separate box, occasional news about Moatfold. Both are based on your consent (GDPR article 6(1)(a)), which you can withdraw at any time without affecting what happened before. The broker and note help us decide which features and brokers to support next.

How long. We keep your request until you have been invited and for 12 months after that, or until you ask us to delete it, whichever comes first. If you only asked for an invite and we have not been able to invite you within 24 months, we delete the request.

Who else sees it. Nobody we sell or share it with. The list is stored in a Cloudflare D1 database (region Western Europe), with Cloudflare acting as our processor. Cloudflare is a US company; transfers outside the EU are covered by the EU-US Data Privacy Framework and the European Commission's standard contractual clauses in Cloudflare's data processing terms.

We make no automated decisions about you.

Your rights

You can ask to see, correct or delete your data, to restrict or object to its use, or to get a copy of it, and you can withdraw your consent at any time. E-mail [email protected] and we will reply within one month. Every news e-mail also has an unsubscribe link.

If you think we handle your data wrongly, you can complain to a data protection authority. In the Netherlands that is the Autoriteit Persoonsgegevens; elsewhere in the EU, the authority in your own country.