Privacy
Version 2.0 — September 2026. Given under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Legislative Decree 196/2003 as amended.
The short version
We do not track you. There is no analytics, no advertising, no profiling and no third-party script that follows you across sites. Browsing this site leaves no personal data with us. If you open an account we keep your email address, and nothing else you have not given us. Payments are handled entirely by Stripe on their own servers: card numbers never reach us.
1. Controller
NETLAND SNC, Via Vandalino 36, 10141 Torino, Italy — VAT 08796440017 — info@masterofyield.eu. No Data Protection Officer is appointed, which is not required for processing of this nature and scale; the address above handles every privacy request.
2. What we process, why, and on what legal basis
- Browsing the public pages — no personal data reaches us. Your theme, your table view, your tax profile and your broker commission are stored in your own browser and never sent to us as data: they travel with the request only to calculate the page you asked for, and we do not keep them.
- Account: email address, sign-in times, subscription status. To let you sign in and to give you what you subscribed to. Legal basis: performance of a contract, Art. 6(1)(b).
- Saved portfolios. The funds and amounts you chose, so you find them again. Legal basis: contract.
- Billing records (name or company, country, VAT status, invoices). Legal basis: contract and the legal obligation to keep accounting records, Art. 6(1)(c). Card details never reach our servers: the payment happens on Stripe's pages and systems.
- Technical logs (IP address, time, page requested, errors) kept by the hosting provider to keep the service working and to block attacks. They are not used to identify or profile anyone. Legal basis: our legitimate interest in a secure service, Art. 6(1)(f).
- Emails you send us, to answer you. Legal basis: legitimate interest, or contract if you are a customer.
- Optional messages (for example a notice when the strategies rebalance). Legal basis: your consent, Art. 6(1)(a), withdrawable with one click.
We process no special categories of data, we take no automated decisions with legal or similarly significant effects, and we never sell or rent personal data.
3. Who else processes it
Only the suppliers that make the service work, each bound by a data processing agreement under Art. 28:
- Hosting — the provider of our servers, within the European Economic Area.
- Stripe Payments Europe, Ltd. (Dublin, Ireland) for payments and subscriptions. Stripe acts as an independent controller for its own anti-fraud and legal duties; its notice is at stripe.com/privacy.
- Email delivery for the sign-in links and service messages.
Where a supplier processes data outside the EEA, the transfer relies on an adequacy decision — for the United States, the EU–US Data Privacy Framework — or on Standard Contractual Clauses with additional safeguards. Ask us and we will send you the safeguards in force.
4. How long we keep it
- Account and saved portfolios: while the account exists, deleted within 30 days of closure.
- Invoices and accounting records: 10 years, as Italian law requires.
- Technical logs: up to 12 months.
- Emails: up to 24 months after the exchange ends.
5. Your rights
You can ask for access, correction, erasure, restriction, portability in a machine-readable format, and object to processing based on legitimate interest. Where processing rests on consent you can withdraw it at any time, without affecting what was lawful before. Write to the address above: we answer within one month, free of charge, extendable by two months only for genuinely complex requests.
You may also complain to the Garante per la protezione dei dati personali (www.garanteprivacy.it) or to the authority of the country where you live.
6. Security
There are no passwords to steal: access uses single-use links sent to your mailbox. Traffic is encrypted in transit, backups are encrypted, and access to production data is limited to whoever runs the service. If a breach is likely to put your rights at risk we notify the authority within 72 hours and inform you without undue delay.
7. Children
The service is for adults. We do not knowingly create accounts for people under 18 and we delete any we find.
8. Changes
Material changes are announced on the site and, for account holders, by email. The version and date at the top always tell you which text is in force.