登入用的 API 金鑰與要看的股票代號。不送你的持股、交易與帳戶資料，程式也沒有下單的功能。券商依你和它的契約與它的隱私權政策處理（它本來就知道這把金鑰屬於你的證券帳戶）。金鑰只存在你電腦的系統鑰匙圈，不進資料庫與備份。程式不能下單，不代表金鑰本身沒有其他權限：請用只開行情查詢的金鑰，不要用有交易或資金移轉權限的金鑰，權限範圍請自行確認。沒有設定金鑰就不會連線
用 Google 帳號登入（選用）：另外要求 openid、email、profile（名稱、個人資料相片與 email），只用來確認你是哪個 Google 帳號：在你的電腦上記下 Google 的使用者編號、名稱與 email（用來建立或對應這台電腦上的帳號），不會傳給開發者；個人資料相片不會被取用或保存。不會要雲端硬碟的權限，也不留存取權杖（雲端備份要另外連結）。可以在帳戶頁「取消連結」。
不經過開發者：程式直接和 Google 連線，沒有經過開發者的伺服器。
STOCKings 使用與傳輸從 Google API 取得的資訊，遵守
Google API 服務使用者資料政策，包括「有限使用」（Limited Use）的規定：不把 Google 使用者資料用於廣告、不出售、不轉給第三方、不由人員讀取（除非你明確要求協助、為了安全或法律要求），也不用來訓練 AI 模型。
4.資料保存與刪除
本機的資料：在程式裡刪除帳號，或用「設定 → 系統」的解除安裝刪除全部資料。刪除帳號或解除安裝都不會刪掉雲端硬碟上的備份，要的話請照下一點自己刪除。刪除帳號時程式會向 Google 撤銷該帳號的授權（當時沒有網路就撤銷不了）；解除安裝不會撤銷，請先在設定頁「中斷連結」，或到 Google 帳戶的「第三方應用程式和服務」移除。
雲端備份：在 Google 雲端硬碟刪除「STOCKings Backups」資料夾即可；要馬上永久刪除，再清空雲端硬碟的垃圾桶（輪替掉的舊備份也在那裡）。
Effective date: 2026-11-01 · Applies to the STOCKings desktop app (v0.10.0 and later)
In short: your trades, holdings and account data stay on your own computer, and the developer cannot see or receive them. Only features you turn on send the parts you choose to the third-party service you pick.
For example, a scheduled AI task sends the code, name, weight and return of your holdings only if you allow it. This page explains when the app connects to the internet and what it sends.
1.Data stored on your computer
Trades, dividends, accounts, cash, journal entries and settings you enter or import are stored in a database on your computer (encrypted by default). If you sign in with Google, the user ID, name and email address Google provides are also kept only in this database (see section 3).
The app has no feature that sends this data to the developer, and sends nothing to third parties except through the features listed in section 2 that you turn on yourself. It contains no ads or usage tracking.
The app runs a local server on your computer for its own window and accepts connections from this computer only (127.0.0.1); it is not reachable from your network or the internet. The window (an embedded browser) keeps interface preferences (theme, language, hidden amounts, etc.) and the sign-in email you chose to remember in its local browser storage on your computer — no tracking cookies, and none of it is sent anywhere. The app's log file (operating status and error messages, for troubleshooting) is written inside the data folder and is never sent automatically; if you attach it to a bug report, read it first.
2.When the app connects to the internet
Purpose
Where
What is sent
Public market data (prices, exchange rates, corporate actions, fundamentals)
Taiwan Stock Exchange, Taipei Exchange and Taiwan Futures Exchange OpenAPIs and websites, TDCC, the Central Bank of the R.O.C. and data.gov.tw, the European Central Bank, SEC EDGAR, Yahoo Finance, FinMind, ExchangeRate-API, Open Exchange Rates and Tiingo (Tiingo and Open Exchange Rates only once you have entered your own key; Settings → Data sources lists the ones in use)
Only query parameters such as ticker symbols and dates — never your holdings, costs or trades. These services see your IP address and handle it under their own policies
AI summaries (optional)
The provider you choose in Settings (Anthropic, OpenAI, Google Gemini or a compatible service of your own), with your own API key
Only public market data for that stock (price, indicators, fundamentals, institutional flows), never your holdings or trades. Nothing is sent unless you set it up
Scheduled AI tasks (optional)
As above: the provider you choose in Settings, with your own API key
Your instruction plus public closing data for the market, sectors and your watchlist. Holdings are sent only if you allow it for that task, and then only the code, name, weight and return, never amounts, quantities, cost or accounts. Nothing is sent unless you create a task
Live intraday quotes (optional)
The broker whose key you entered, with your own API key
Your API key (to sign in) and the ticker symbols you watch. Your holdings, trades and account data are not sent, and the app cannot place orders. The broker handles this under your agreement with it and its privacy policy (it already knows the key belongs to your brokerage account). The key is kept only in your computer's system keychain, not in the database or backups. The app being unable to place orders does not mean the key has no other permissions: use a quotes-only key, never one that can trade or move funds, and check its permissions yourself. Nothing is sent unless you enter a key
Cloud backup (optional)
Your own Google Drive
Backup files encrypted on your computer with your backup password. See section 3
Update check
GitHub (the public releases page)
An ordinary web request carrying only the current version number, no personal data; can be turned off in Settings
3.Google Drive backup and Google user data
Enabled only after you click “Connect Google” and consent; you can disconnect at any time. Each user connects their own Google account and sets their own backup password.
Scope: only drive.file — access to files and folders the app itself created (“STOCKings Backups”). It cannot see or change any other file in your Drive.
Use: uploading, listing, downloading (to restore), and moving backups beyond the number you choose to keep into your Drive trash (recoverable there for 30 days, after which Google deletes them). Nothing else. Lowering the number to keep asks for your sign-in password again.
Encryption: backups are encrypted on your computer with your backup password before upload, so neither Google nor the developer can read the trades and holdings inside; Google still processes the file name, size, creation time, folder and other information it needs to provide the service. If you forget the backup password they cannot be restored, and the developer cannot decrypt them for you.
Tokens: the Google authorization token is stored in the (encrypted) database on your computer and never sent to the developer. Disconnecting revokes it with Google; you can also remove access under “Third-party apps & services” in your Google Account.
Folder tag: to find your backup folder again after reinstalling, the folder carries a hash derived from your email address (not the address itself, though not anonymous either: anyone who knows your address could match it).
Sign in with Google (optional): additionally requests openid, email and profile (name, profile picture and email), used only to tell which Google account you are: your Google user ID, name and email are stored on your computer (to create or match the account there) and never sent to the developer; the profile picture is not used or stored. It does not ask for Drive access and keeps no access token (cloud backup is connected separately). You can unlink it on the Account page.
No developer servers: the app talks to Google directly; nothing passes through the developer's servers.
STOCKings' use and transfer of information received from Google APIs adheres to the
Google API Services User Data Policy, including the Limited Use requirements:
Google user data is not used for advertising, not sold, not transferred to third parties, not read by humans (except with your explicit consent, for security, or as required by law), and not used to train AI models.
4.Retention and deletion
Local data: delete your account in the app, or use Uninstall under Settings → System to remove everything. Neither deleting your account nor uninstalling deletes your backups in Google Drive; delete them yourself as described below. Deleting your account also revokes that account's Google authorisation (this fails if you are offline at the time); uninstalling does not, so first use Disconnect on the Settings page or remove the app under "Third-party apps & services" in your Google Account.
Cloud backups: remove the “STOCKings Backups” folder from your Google Drive; to delete them permanently right away, also empty your Drive trash (rotated-out backups are kept there too).
Exported files (CSV, backups, PDF): once exported they are ordinary files and no longer protected by the app's database encryption — keep them safe and delete them when you no longer need them.
5.Children
STOCKings is an investment record-keeping tool. It is not designed for children and does not knowingly collect their personal data. Minors should use it with the consent of a parent or legal guardian.
6.Personal data the developer receives (notice under Article 8 of Taiwan's PDPA)
The data kept on your computer (section 1) is not available to, and not collected by, the developer. The developer handles personal data only when you write in or visit this website, as follows:
Collector
Yu-Hao Yeh (the developer of the Software)
Purpose
Replying to your emails and handling bug reports and feedback; if licences or paid services are offered later, performing the contract and customer service
Categories
The name, email address and message you send (including any files you attach); when you visit this website, connection data processed by the hosting service (IP address, browser type, time of visit), and the same kind of connection data Google receives when the page fonts load from Google Fonts
Retention
Emails are deleted 1 year after the matter is resolved, unless the law requires longer. Website connection data is kept by Cloudflare and Google under their own policies, product settings and the law; the developer cannot set or extend it (see the Cloudflare privacy policy and the Google privacy policy)
Location
Taiwan. Emails are stored in Google's Gmail and the website is hosted by Cloudflare; their servers may be outside Taiwan
Recipients
The developer; Google (Gmail email service) and Cloudflare (website hosting) process the related data as part of their services; when your browser loads the page fonts, Google Fonts receives the necessary connection data directly. These providers handle it under their own privacy policies. It is not sold or given to any other third party, except where the law requires
Use
Replying by email and tracking issues; never for advertising or marketing
Your rights
Under Article 3 of the PDPA you may ask to inquire into or review, obtain a copy of, supplement or correct, stop the collection, processing or use of, or delete your personal data. Email stocking.public@gmail.com saying which right you are exercising; requests to inquire, review or copy are answered within 15 days and other requests within 30 days, extendable once with the reason given
If you do not provide it
You can use the Software fully without writing in; the developer just cannot reply to you
7.Personal data incident notification
If personal data held by the developer (section 6) is stolen, leaked, altered or otherwise compromised, the developer will, after investigating, email the people affected explaining what happened, the possible impact, the measures taken and how to get in touch; where individual notice is not possible, a notice is posted on this website.
If a security problem is found that could expose data on your computer, the developer will announce it on this website and in the app's release notes, with its scope and the steps you can take, and release a fix as soon as possible.
8.Changes and contact
Changes are posted on this page with a new effective date, and significant changes are mentioned in the app's release notes. This policy has its own version (see the footer). After a material change the version changes and the app asks you to read and accept it again the next time you open the app and sign in to your account on this computer; if you decline you are only signed out, your data is not deleted, and you can uninstall the app. Questions: stocking.public@gmail.com.
STOCKings