Privacy policy

Last updated 31 October 2026

Short version: we collect only what running the site and your account needs, we don't use ad networks or third-party trackers (the few ads we show are our own, marked "Sponsored"; our page counts are our own), and we don't sell your data.

1. What we collect

• Your account details, if you create an account: first and last name, mobile number, email, gender, date of birth, how you heard about us, and your password (stored only as a one-way hash - we can't read it). We use them to run your account, confirm your email, check you're 18 or older, keep one free trial per person, and understand where our users come from. We don't sell them or use them for advertising.
• A session cookie that keeps the site working between pages and keeps you signed in. With "keep me signed in", a second cookie remembers you on that device until you sign out.
• Your cookie choice (mlnp_cookie_consent, kept 180 days): "Accept all" or "Necessary only" from the cookie notice. Only with "Accept all", one more cookie, mlnp_first (kept up to 400 days), holds the date of your first visit - nothing else, no ID - so we can count how many visitors come back. The site's fonts are served from our own server, so no font request goes to a third party.
• An anonymous browser ID cookie (mlnp_wl, kept up to 400 days) so your watchlist and portfolio tracker are still there next time. It is a random number - it does not contain your name or contact details.
• What you enter in the watchlist and portfolio tracker - stock symbols, quantities, prices and dates - stored on our server under that anonymous ID, so the pages can show your holdings and returns. Don't enter anything else there.
• Preferences in your own browser (light / dark theme, folded menus), kept in your browser's local storage and never sent to us.
• Standard server logs - IP address, browser type, the page requested and the time - kept for security and to fix problems, and deleted on a rolling basis.
• Total page, visit and ad counts - how many times each page was viewed and how long it was on screen on average, where visits came from (for example Facebook, a search engine or another website, as your browser reports it, or a tag in the link you followed), and how many times each ad was on screen or clicked. These are plain daily totals: they record nothing about who you are, use only the session cookie the site already needs, and are what we report to advertisers. To count different visitors once a day, the server makes a one-way code from your address and browser with a secret that changes every day; the code and the secret are thrown away within two days and nothing that identifies you is stored. Search engines and other automated visitors are left out.
• How you use the site, if you're signed in - which pages you open each day and how long each is on screen (time in a background tab doesn't count), measured by a small script of our own on our own server. We use it to see which features members use and improve them. We keep it day by day for 90 days, then only as monthly totals. It's never shared or sold, it's in the copy of your data you can download, and it's deleted with your account.
• Payments, if you buy a plan: the plan, amount, payment code, how you paid, the transaction reference and date you give us, and a receipt screenshot if you upload one (stored privately, seen only by us). We use them to confirm your payment and keep our accounts. We never see or store your bank login, card or wallet PIN - you pay from your own bank or wallet.
• API keys, on the Institutional plan: a one-way fingerprint of each key (not the key itself), its name and when it was last used.
• Anything you send us by email, to answer it.

2. What we don't do

We don't use third-party analytics or tracking scripts (no Google Analytics, no ad pixels), we don't use your data for advertising, and we don't sell, rent or trade it. Our own page counts and members' page usage (above) stay on our server. The site shows a few ads we place ourselves, marked "Sponsored": no ad network is involved, and a click on one is counted on our server (just the count - not who clicked) before it opens the advertiser's page.

3. Third parties

The site's fonts are served from our own server - no font request goes to Google or any other third party. The contact form uses Google reCAPTCHA to tell people from automated spam: on that page Google receives your IP address and information about your browser and how you use the page, under Google's own privacy policy. Messages you send through it are kept so we can answer them, with your IP address and the spam check's score, to keep spam out. Pictures on the world news cards load from the news outlets that published them (sent without the page you're on), so those outlets see your IP address when your browser fetches them. Our hosting provider stores the site and its data. Payments go from your bank or wallet to our account, under your bank's or wallet's own privacy policy. If we send email through a mail provider, it handles the messages for us only.

4. Your choices

You can change your name, mobile and email, choose which emails you get, download a copy of everything your account holds, or delete your account - which deletes your watchlist, portfolio, API keys and payment screenshots too - from your account settings at any time. Records of payments made are kept for our accounts, no longer linked to you. Without an account, you can delete your watchlist and portfolio entries from those pages, and clear the browser ID cookie in your browser settings (your saved entries can then no longer be linked to you). To ask what we hold or to have it deleted, see the Contact page.

The mobile app

The MacroLens NP app uses the same account and the same data as the website, and the same rules above apply. In addition, the app keeps on your phone, and sends to our server, only what it needs: a random device ID and the phone's name, so we can show which phones are signed in and let you sign one out; your sign-in tokens (kept in the phone's secure storage); and, only if you switch notifications on, a notification token so we can send you the alerts you chose. Face ID or fingerprint unlock, if you turn it on, stays on the phone: we never receive your face or fingerprint. If you use the trading journal you can add chart photos from your phone's photo library; only the photos you pick are uploaded, and they are private to your account. Ideas and comments you post are visible to other members (never your email, mobile number or date of birth). You can report an idea or comment from the app. The app has no ads, no analytics or tracking tools, and does not read your contacts or location. You can delete your account and all of this from the app: see how to delete your account.

5. Security

The site is served over HTTPS, and access to its servers and data is restricted. No system is perfectly secure, so please don't store anything sensitive in the watchlist or tracker.

6. Law

We handle personal information in line with the laws of Nepal, including the Individual Privacy Act, 2075 (2018).

7. Changes

We'll update this page when what we collect changes, and change the date at the top.