Privacy Policy — acidcapitalist.com

Effective Date: 22 March 2026
Last Updated: 22 March 2026
Website: acidcapitalist.com
Contact: privacy@acidcapitalist.com

Quick Reference — At a Glance

| Field | Details | |---|---| | Website | acidcapitalist.com | | Data Controller | Acid Capitalist | | Based in | Estonia, European Union | | Legal Framework | GDPR (EU) 2016/679 + Estonian PDPA (2019) | | Supervisory Body | Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) | | Contact | privacy@acidcapitalist.com | | Last Updated | 22 March 2026 |

1. Who We Are

Acid Capitalist ("we", "us", "our") operates the financial news and commentary website located at acidcapitalist.com. We are the data controller for all personal information collected through this website.

We are registered and operating in Estonia, a Member State of the European Union, which means all personal data we collect is governed by the GDPR and supplemented by the Estonian Personal Data Protection Act.

For any questions or concerns about this Privacy Policy or how we handle your data, please contact us:

Email: privacy@acidcapitalist.com
Website: https://acidcapitalist.com/contact
Postal Address: [Your registered address, Estonia]
Supervisory Authority: Andmekaitse Inspektsioon (aki.ee)

2. What Personal Data We Collect

2.1 Data You Give Us Directly

Newsletter subscription: your email address and name (when you subscribe)
Account registration: email address, username, and password (hashed)
Comments: your display name, email address, and the content you post
Contact form submissions: your name, email address, and message

2.2 Data Collected Automatically

IP address and approximate geographic location (country / city level)
Browser type, version, and operating system
Pages visited, time spent on page, referring URL
Date and time of your visit
Device type (desktop, mobile, tablet)

2.3 Data from Cookies and Tracking Technologies

Google Analytics: anonymised usage statistics and behaviour patterns
Meta Pixel (Facebook): conversion tracking and ad performance measurement
Other advertising network cookies: for ad targeting and frequency capping
Session cookies: required for website functionality and login state

See Section 7 for our full Cookie Policy.

3. Why We Collect Your Data & Our Legal Basis

Under GDPR, we must have a lawful reason ("legal basis") for every type of data processing.

| Purpose | Legal Basis (GDPR Art. 6) | Retention Period | |---|---|---| | Delivering news content and operating the website | Art. 6(1)(f) — Legitimate interests | Duration of your visit; analytics: 26 months | | Sending our newsletter | Art. 6(1)(a) — Consent | Until you unsubscribe | | Managing user accounts | Art. 6(1)(b) — Contract performance | Duration of account + 3 years after deletion | | Managing and displaying comments | Art. 6(1)(a) — Consent | Until comment deletion or account closure | | Analytics (Google Analytics) | Art. 6(1)(a) — Consent (via cookie banner) | 26 months (Google default) | | Advertising and retargeting (Meta Pixel, ad networks) | Art. 6(1)(a) — Consent | 90 days or per network policy | | Legal compliance and fraud prevention | Art. 6(1)(c) — Legal obligation | As required by applicable law (min. 3 years) | | Responding to contact form enquiries | Art. 6(1)(f) — Legitimate interests | 3 years |

4. Who We Share Your Data With

We do not sell your personal data. Ever. We may share it only with the following trusted third parties, each acting as a data processor on our behalf under appropriate agreements:

4.1 Analytics

Google LLC (Google Analytics) — Usage statistics and site performance. Data may be transferred to the USA under Standard Contractual Clauses (SCCs). You can opt out via our cookie banner or install the Google Analytics Opt-out Browser Add-on.

4.2 Advertising

Meta Platforms, Inc. (Facebook / Instagram) — Conversion tracking and ad targeting via the Meta Pixel. Data may be transferred to the USA under SCCs.
Other advertising networks — as disclosed in our cookie banner at the time of your visit.

4.3 Email / Newsletter

Email service provider (e.g., Mailchimp / ConvertKit / SendGrid) — Used to send newsletters. Your email and name are processed by them under a Data Processing Agreement.

4.4 Hosting & Infrastructure

Website hosting provider — Processes server logs and may store user data. All hosting providers are selected for GDPR compliance and held under Data Processing Agreements.

4.5 Legal Requirements

We may disclose your personal data if required to do so by law, court order, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request. In Estonia, data breach notification to the Data Protection Inspectorate must be made within 72 hours where feasible.

5. International Data Transfers

Some of our third-party providers (Google, Meta) are based in the United States. When we transfer your data outside the European Economic Area (EEA), we ensure adequate protection through one of the following mechanisms:

Standard Contractual Clauses (SCCs) approved by the European Commission
Adequacy decisions where applicable
Data Processing Agreements with full GDPR compliance obligations

You can request details of the specific safeguards in place by contacting us at privacy@acidcapitalist.com.

6. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights over your personal data:

| Your Right | What It Means for You | |---|---| | Right to Access | You can request a copy of all personal data we hold about you. We will respond within 30 days. | | Right to Rectification | You can ask us to correct any inaccurate or incomplete personal data we hold. | | Right to Erasure | You can request that we delete your personal data ('right to be forgotten'), subject to legal exceptions. | | Right to Restriction | You can ask us to limit how we process your data while a dispute is resolved. | | Right to Portability | You can request your data in a structured, machine-readable format (e.g., JSON or CSV) to transfer elsewhere. | | Right to Object | You can object to processing based on legitimate interests or for direct marketing at any time. | | Right to Withdraw Consent | Where processing is based on consent (e.g., newsletter, cookies), you can withdraw at any time without affecting prior lawful processing. | | Right to Complain | You have the right to lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee) or any EU supervisory authority. |

To exercise any of these rights, contact us at: privacy@acidcapitalist.com

We will respond within 30 days. In complex cases, we may extend this by a further 60 days, and we will inform you of any extension within the initial 30-day period.

7. Cookies & Tracking Technologies

7.1 Essential Cookies (No Consent Required)

Session management: keeping you logged in during your visit
Security cookies: protecting against CSRF and other attacks
Cookie banner preference: remembering your cookie consent choice

7.2 Analytics Cookies (Consent Required)

Google Analytics (_ga, _gid, _gat): tracking page views, user behaviour, and site performance

These are activated only after you provide consent via our cookie banner. You may opt out at any time.

7.3 Advertising & Marketing Cookies (Consent Required)

Meta Pixel: conversion tracking, ad retargeting, lookalike audience building
Other ad network cookies: as specified in our cookie banner

These are activated only after you provide consent. You may withdraw consent at any time via our cookie preferences panel (accessible in the website footer).

7.4 Managing Cookies

Cookie banner: shown on your first visit, and accessible anytime via the footer link "Cookie Preferences"
Browser settings: you can disable cookies in your browser settings, though this may affect site functionality
Google opt-out: https://tools.google.com/dlpage/gaoptout
Meta opt-out: https://facebook.com/privacy/explanation
Your Online Choices (EU): https://www.youronlinechoices.eu

8. Data Security

We take data security seriously and implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage.

HTTPS encryption on all pages
Hashed and salted password storage (we never store plain-text passwords)
Access controls limiting who can access personal data internally
Regular security updates and vulnerability monitoring
Data Processing Agreements with all third-party processors

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Estonian Data Protection Inspectorate within 72 hours and, where required, notify affected individuals without undue delay.

9. Children's Privacy

Acid Capitalist is a financial news website intended for adults. We do not knowingly collect personal data from individuals under the age of 16. If you are under 16, please do not submit personal data to us.

If we become aware that we have inadvertently collected data from a child under 16, we will delete it promptly. If you believe we may have collected data from a child, please contact us at privacy@acidcapitalist.com.

10. Newsletter Subscriptions

When you subscribe to our newsletter, we collect your email address and optionally your first name. We use this to send you financial news, market commentary, and updates from Acid Capitalist.

Legal basis: Your explicit consent (GDPR Art. 6(1)(a))
Frequency: As published — typically [X] times per week
Unsubscribing: Click "Unsubscribe" in any email footer at any time. We will process your request immediately.
Service provider: [Your email service provider name] under a Data Processing Agreement

We do not share your email address with third parties for their own marketing purposes.

11. User Accounts

When you create an account on acidcapitalist.com, we collect your email address, username, and a hashed password. Account data is used solely to:

Allow you to log in and access personalised features
Save your comment history and preferences
Send transactional emails (password resets, security alerts)

You may delete your account at any time from your account settings. Upon deletion, we will remove your personal data within 30 days, except where retention is required by law.

12. Comments Section

If you post comments on our articles, we collect your display name, email address (not publicly visible), and the content of your comment. Comments may be publicly visible.

Moderation: We reserve the right to moderate, edit, or remove comments that violate our community guidelines
Third-party comment systems: If we use a third-party commenting platform (e.g., Disqus), their own privacy policy applies in addition to ours
Deletion: You may request deletion of your comments by contacting us

13. Financial Content & Data Accuracy Disclaimer

IMPORTANT — PLEASE READ: All content published on acidcapitalist.com is for informational and educational purposes only. Nothing on this website constitutes financial advice, investment advice, trading advice, or any other professional advice. We are a news and commentary website, not a regulated financial adviser. Always conduct your own research and seek advice from a qualified financial professional before making any investment decisions.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

Update the "Last Updated" date at the top of this policy
Post a notice on our website homepage for at least 30 days
Where we have your email address, send you a notification of significant changes

Your continued use of acidcapitalist.com after changes take effect constitutes your acceptance of the revised policy. We encourage you to review this policy periodically.

15. Contact Us & How to Complain

If you have any questions, requests, or concerns about this Privacy Policy or our data practices, please contact us:

Email: privacy@acidcapitalist.com
Website: https://acidcapitalist.com/contact
Postal Address: [Your registered address, Estonia]

If you are not satisfied with our response, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate:

Name: Andmekaitse Inspektsioon (Data Protection Inspectorate)
Address: Tatari 39, Tallinn 10134, Estonia
Website: https://www.aki.ee
Email: info@aki.ee

You may also lodge a complaint with the supervisory authority in your country of residence if you are located in another EU Member State.

Acid Capitalist | acidcapitalist.com | privacy@acidcapitalist.com | Last updated: 22 March 2026