Skip to content

PRIVACY.md

Latest commit

 

History

History
26 lines (15 loc) · 2.56 KB

PRIVACY.md

File metadata and controls

26 lines (15 loc) · 2.56 KB
Raw

Privacy Policy

The Finance Database, its Python package and its MCP server are free to use. There are no accounts, no API keys, no cookies, no advertising and no tracking, and nothing you send is sold or shared. This policy explains what little data is involved.

The database

The database contains publicly available information about listed securities and their issuers, such as names, classifications, exchanges, identifiers and company headquarters. It contains no information about the people who use it.

The Python package and the local MCP server

When you use the financedatabase package, or run the MCP server on your own computer, everything runs on your machine. The package downloads the database files from GitHub (raw.githubusercontent.com) and checks them for updates at most once a day; that request is subject to GitHub's privacy statement. Nothing is sent anywhere else and no usage statistics are collected.

The hosted MCP server

The hosted server at https://financedatabase.jeroenbouma.com/mcp answers the tool calls of your AI assistant.

  • What it receives: the name of the tool and its arguments, for example a country or sector filter or a ticker to search for. It does not receive your conversation or any other content from your assistant; what your assistant does with your conversation is covered by its provider's own privacy policy.
  • Logs: the server keeps standard technical logs of requests (time, path and response status) and, when a tool call fails, the error message, which can include the filter value that caused it. They are used only to keep the server running and to fix problems.
  • Usage statistics: the server counts how often each tool is called per day, how often calls fail and how long they take, and how many different users make calls. To tell users apart it combines your IP address and your client's user agent into a keyed hash (HMAC-SHA256 with a secret only the server holds) and keeps only that pseudonymous code, never the address or user agent themselves. Totals are published at /stats; they contain no arguments, IP addresses, codes or other information about who made a call.
  • Network: requests reach the server through Cloudflare, which processes them (including your IP address) as described in Cloudflare's privacy policy.

Contact

Questions about this policy can be sent to jer.bouma@gmail.com.

Last updated: October 11, 2026