Privacy Policy

1. Who we are

QLOOQ (“we”, “us”) builds small web apps published at qlooq.cfd and its subdomains, such as verlogs.qlooq.cfd and fundbasket.qlooq.cfd. QLOOQ is run by an independent developer (omkarpathak.com). You can reach us at admin@qlooq.cfd.

2. What this policy covers

This policy covers the qlooq.cfd website and every QLOOQ app (each, an “App”). The general rules below apply to all Apps. Each App also has its own section that lists exactly what it accesses. Before a new App launches, we add its section here.

The qlooq.cfd website itself has no sign-in and collects no personal information. Our MetaTrader 5 tools are covered in section 6.

3. Google user data

Apps use Google Sign-In (Google Identity Services) so you can sign in with your Google Account and save your work to your own Google Drive. When you sign in, Google shows you which permissions the App is asking for, and nothing is shared until you agree.

What we access

• Basic profile: your name, email address and profile picture, either through the openid, email and profile permissions or from the account details of a Google API the App already uses. Apps use these only to show who is signed in and to keep your data separate from other accounts on the same device.
• App-specific Google API data: listed in each App's section below. We always ask for the narrowest permission that works.

How we use it

• Only to provide the App's features you use — for example, reading and saving your own data in your Drive.
• Not for advertising, not to build profiles, not for analytics, and not to sell to anyone.
• Not to develop, improve or train generalised or non-personalised AI or machine-learning models.
• No person at QLOOQ reads your Google data, unless you ask us to for support and give us permission, if it's needed for security or to follow the law, or if the data is aggregated and anonymised for internal operations.

How it is stored

Apps talk to Google's APIs directly from your browser. Your content is stored in files in your own Google Drive, under your Google Account and covered by Google's privacy policy. QLOOQ doesn't run a server or database that receives or stores your content, profile or sign-in tokens. A copy kept on your own device is described in section 9.

4. VerLogs

VerLogs is a build log for tracking the versions and releases of your projects.

With that access, VerLogs:

• creates a folder called “VerLogs” in your Drive with one file, “VerLogs — Build Log.json”, and stores your baskets, projects, tabs, updates, statuses and notes in it;
• uploads the screenshots and files you attach to updates to your Drive, and reads them back to show them to you;
• deletes those attachments from your Drive when you delete them in the app;
• reads your name, email and profile picture from your Google Drive account details to show who is signed in, and to keep each account's log separate on a shared device.

VerLogs has no server of its own and no analytics. You can open, download or delete the “VerLogs” folder — the build log file and its attachments — in Google Drive at any time.

5. FundBasket

FundBasket is a tracker for Indian mutual funds: you group funds into baskets, record your purchases and redemptions, and see NAV history and returns.

You don't need a Google Account to use FundBasket. Without signing in, your baskets are kept only in your browser on this device (see section 9). Google sign-in is used only if you turn on Google Drive backup.

With that access, FundBasket:

• creates a folder called “FundBasket” in your Drive with one backup file, “FundBasket.js”, and stores your baskets, the funds in them, your recorded purchases and redemptions, and your settings in it;
• reads that file back to restore your baskets on another device or browser, and replaces it when your baskets change;
• reads your name, email and profile picture from your Google Drive account details to show who is signed in, and to keep each account's baskets separate on a shared device.

NAV data. To show prices and returns, FundBasket looks up mutual fund schemes and their published NAV history from mfapi.in, a free public API. Those requests contain only the scheme codes or search words being looked up — never your holdings, amounts, Google data or anything that identifies you. All returns, P&L and XIRR figures are calculated in your browser.

FundBasket has no server of its own and no analytics. You can open, download or delete the “FundBasket” folder in Google Drive at any time. FundBasket is an informational tool and does not give investment advice.

6. MetaTrader 5 tools

QLOOQ's developer also publishes free tools for the MetaTrader 5 trading platform on the MQL5 Market: Precise Trade Manager (an Expert Advisor), Chart Dashboard (published as “Bar Countdown With Symbol Info”) and Drawing Tool with Crosshair and Scale Enforcement (both indicators). They don't use Google sign-in or any Google data.

• Nothing is collected. The tools run entirely inside your MetaTrader 5 terminal. They make no web requests, load no DLLs and send nothing about your account, trades or settings to QLOOQ or anyone else.
• What they read. Only what they need from your own terminal: prices and symbol details, and — for Precise Trade Manager — your account balance, open positions, orders and trade history, to size trades and estimate commission.
• What they keep. Your settings, stored by MetaTrader 5 on your own computer. Removing a tool from the chart stops it; deleting its settings files in the terminal's data folder clears them.
• MQL5. Finding, downloading, installing and reviewing the tools happens on the MQL5 Market, run by MetaQuotes, under MQL5's own terms and privacy policy.

7. Limited Use disclosure

QLOOQ's use of information received from Google APIs, and its transfer of that information to any other app, will follow the Google API Services User Data Policy, including the Limited Use requirements.

8. Sharing

We do not sell, rent, trade or share your Google user data or personal information with anyone. Your data goes only between your browser and Google, which stores it in your account. The only exception is if the law requires us to share something, and since we don't hold your content, there is very little we could share.

9. Data on your device

To work quickly and offline, Apps keep some data in your browser's local storage (localStorage and IndexedDB) on your own device:

• a working copy of your App data and cached copies of your attachments, so the App opens instantly and works offline (in FundBasket, without Drive backup, this is the only copy of your baskets);
• in FundBasket, cached NAV history for the funds you track, refreshed every few hours;
• your Google access token, which expires after about an hour, plus your basic profile, so you stay signed in while you use the App;
• settings such as light/dark theme and sound on/off.

This data never leaves your device except to sync with your own Google Drive. Signing out in the App removes your sign-in and the cached copy of your data. Clearing your browser's site data for the App removes everything, including cached attachments.

We use no tracking or advertising cookies. Our web host may set a technical cookie to protect the site from automated abuse.

10. Other services we load

To display pages, your browser loads files from these providers. They may see your IP address and browser details, as any website does, but they never receive your Google data:

• Google: Google Identity Services (sign-in), the Google Drive API, Google Fonts, and a small connectivity check (gstatic.com) used to tell whether you're online;
• Flaticon (cdn-uicons.flaticon.com) for icons;
• LottieFiles (lottiefiles.com) for animations;
• mfapi.in (api.mfapi.in), used by FundBasket for mutual fund scheme names and NAV history, as described in section 5;
• Our web host, which serves the site files and, like most hosts, may keep standard server logs (such as IP address and pages requested) for security and operations.

11. Keeping and deleting data

• Data in your Drive stays until you delete it. Delete the App's files in Google Drive to remove it for good.
• Data on your device stays until you sign out, or clear your browser's site data for the App. If you use FundBasket without Drive backup, clearing site data deletes your baskets for good.
• Removing access: you can stop an App from using your Google Account at any time at myaccount.google.com/connections. Removing access doesn't delete files already in your Drive.
• QLOOQ keeps no copy of your content, so there is nothing for us to delete on our side. If you have questions, email us and we'll help.

12. Security

All connections use HTTPS. Sign-in is handled by Google and we never see your Google password. Access tokens are short-lived and stay on your device. Using the narrowest permissions means an App can only ever touch its own files.

13. Children

Apps are not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

14. Changes

If we change this policy, we'll update the date at the top of this page. If an App ever needs new Google permissions or uses your data in a new way, we'll update its section here first, and Google will ask for your consent again.

15. Contact

Questions or requests about privacy: admin@qlooq.cfd.