Last updated: 17 July 2026
Provider information under § 5 German Digital Services Act (DDG):
Provider / Diensteanbieter:
Carsten Hasenstab
trading as Carsten Hasenstab IT Dienstleistungen
Sole proprietor (Einzelunternehmer); no commercial-register entry
c/o Impressumservice Dein-Impressum
Stettiner Straße 41
35410 Hungen, Germany
Direct contact:
Email: thetaloopsignals@gmail.com
Phone: +49 15679 664811
VAT identification number:
DE424472679
Responsible for journalistic-editorial content under § 18(2) MStV:
Carsten Hasenstab, address as above.
ThetaLoop publishes standardized quantitative research on US-equity options. The same research output is distributed to the relevant subscriber audience; it is not adapted to an individual's assets, portfolio, experience, objectives, loss capacity or tax situation. ThetaLoop does not accept trading authority, transmit or execute orders, manage portfolios, hold client assets, connect to brokerage accounts or conduct suitability assessments.
Research outputs may include model strikes, expiries, market-data references, risk metrics and a fixed monitoring framework. They remain impersonal research inputs, not individualized investment advice or an instruction to trade. Users make every investment decision independently and must verify data and suitability with their own broker or adviser. Options involve substantial risk, including assignment and loss of capital; past or simulated results do not predict future performance.
Broker and affiliate disclosure:
Broker names are examples of compatible execution venues and do not influence the research methodology. An optional Interactive Brokers referral link may generate compensation for the provider without additional cost to the visitor. The link is advertising/affiliate content, not a recommendation to open an account or trade.
The paid research subscription is offered in English and in USD. The contract is concluded on Whop's hosted online interface. Whop provides the hosted checkout, collects payments and administers the subscription. For supported transactions under the enabled Whop Collects and Remits tax service, Whop acts as merchant of record solely for applicable sales tax/VAT and calculates, collects and remits it. Carsten Hasenstab remains the supplier and provides the ThetaLoop research content and support. The total price, applicable tax, trial and renewal terms are displayed before the order is placed.
Please use the Whop interface for account management, cancellation of future renewals and any cancellation or electronic withdrawal controls made available for the Whop checkout. The 14-day free trial is a separate contractual benefit and does not replace or limit mandatory consumer rights. The notices and terms presented at checkout govern together with applicable mandatory law.
Consumer dispute resolution:
The provider is neither willing nor obliged to participate in dispute-resolution proceedings before a consumer arbitration board. The former EU Online Dispute Resolution platform was discontinued; no obsolete ODR link is provided.
Controller under the GDPR is Carsten Hasenstab, trading as Carsten Hasenstab IT Dienstleistungen, at the address and contact details stated above. No data protection officer has been appointed.
No ThetaLoop account, login, contact form or newsletter signup is operated on this website. ThetaLoop does not set marketing or analytics cookies and does not persist campaign tags or advertising click identifiers in browser storage. Accordingly, no consent banner for marketing or analytics storage is used.
Cloudflare may set strictly necessary security cookies if enabled protection features require them (for example bot or challenge cookies). They serve security and traffic integrity, not advertising. Functional browser storage is used only for site features:
These values remain on the device and are not assigned to a subscriber account. Watchlist and recent items remain until the user clears them or browser site data; comparison snapshots are used only when not older than 30 days, and dismissal markers are observed for seven or 30 days depending on the action. Users can clear the ThetaLoop values using the page control or browser settings. Legal basis for associated personal-data processing, if any: Art. 6(1)(f) GDPR; device access for requested functionality relies on § 25(2) TDDDG.
Validated utm_source, utm_medium, utm_campaign, gclid or msclkid values present in the current page URL may be copied into a subscription or Whop-checkout link only when the visitor chooses that link. They are not saved for a later visit. Whop and, where configured inside Whop, Google Analytics/Google Ads may then process the values on Whop's domain for purchase attribution. No Google or Microsoft advertising tag runs on thetaloop.app.
Cloudflare, Inc. and its affiliates deliver the site, protect it and process technical request data such as IP address, timestamp, URL (including query parameters), HTTP headers, user agent, security signals and response status. Purpose and legal basis: secure and reliable delivery, abuse prevention and aggregate measurement, Art. 6(1)(f) GDPR.
Cloudflare Web Analytics uses a cookieless beacon. According to Cloudflare, unsampled beacon data is retained for seven days and then aggregated; dashboard history is accessible for up to six months. ThetaLoop also writes minimized aggregate events to Workers Analytics Engine: event category, canonical page path, external referrer origin, validated campaign labels, country code and outbound /go/ slug. It does not write an IP address, email address or user-level journey ID to that dataset. Analytics Engine retains the data for three months. These events are not joined to Whop or Brevo subscriber data. Details: Cloudflare Privacy Policy and Cloudflare GDPR information.
Whop. When a visitor uses Whop, Whop processes account, contact, contract, payment, billing, fraud-prevention, support and technical data under its own notices. ThetaLoop receives membership information from Whop for service delivery, including membership/user identifiers, email address, product, status and relevant event or term dates. Purposes and legal bases: pre-contractual steps and contract performance (Art. 6(1)(b) GDPR), legal obligations (Art. 6(1)(c)) and security/claims (Art. 6(1)(f)). Source under Art. 14 GDPR: the Whop membership created from information supplied at checkout. See Whop Privacy Policy.
Cloudflare KV and Render reconciliation. Signed Whop webhook event identifiers and processing status are retained for seven days to prevent duplicate delivery. A pseudonymous membership-event watermark (membership ID, event type and timestamp; no email address) is retained for 400 days to reject stale events. The Render-hosted backend performs a daily reconciliation in which relevant Whop membership emails and Brevo contacts are processed transiently. ThetaLoop does not operate a separate subscriber master-data table.
Brevo. An eligible Whop membership email is mirrored to Brevo for the daily research email. Brevo processes the email address, premium-list membership, delivery status, bounces and unsubscribes and, depending on provider-side configuration, opening and click events. An email unsubscribe stops only the Brevo report; it does not cancel or alter the Whop membership. Removal from the premium list does not necessarily delete the Brevo contact or historical suppression/delivery records. Such records are retained until they are no longer needed, a valid deletion request applies, or legal/security obligations require continued retention. See Brevo Privacy Policy.
Render and Sentry. Render Services, Inc. hosts the automation and PostgreSQL operational data. Email delivery logs contain delivery date, status, provider campaign/message identifiers and error information but no intended subscriber profile. Sentry may receive sampled technical diagnostics, stack traces and error context when configured. These services are used for availability, fault diagnosis and security under Art. 6(1)(f) GDPR and, where required for delivery, Art. 6(1)(b). Provider retention depends on the contracted plan and security configuration.
Telegram. If a person uses the Telegram channel or bot, Telegram processes account, profile, device, connection, message and interaction data under its own policy. The bot receives Telegram update data needed to answer commands and may use the supplied first name in the response. ThetaLoop does not maintain a subscriber command-history database. Premium-channel access and account linking are administered through Telegram/Whop. See Telegram Privacy Policy.
Email support. Support uses thetaloopsignals@gmail.com, hosted by Google. If a person sends email, Google and ThetaLoop process sender/recipient data, headers, message content, attachments and timestamps to answer and document the request. Messages are retained until the request and any applicable legal or claims-related period are complete. See Google Privacy Policy.
Other services and deliberate outbound links. Google Sheets hosts the public research record; Google Vertex AI/Gemini may process market/research prompts without subscriber data; cdnjs/Cloudflare serves the ECharts library on the analytics page. X, WhatsApp, Telegram and Reddit receive data only when a visitor deliberately opens a share dialog. Interactive Brokers receives the referral identifier and ordinary connection data when its affiliate link is selected. Each third party processes visits under its own privacy notice.
Specific local retention periods are stated above. Contract, transaction and accounting records are retained for statutory periods. Support and claims data are kept until the purpose and applicable limitation/retention periods end. Provider-side account, payment, messaging, suppression, security and backup retention is governed by the relevant provider and law.
Several providers may process data in the United States or other countries outside the EEA. Depending on provider and processing relationship, safeguards include an adequacy decision or EU-U.S. Data Privacy Framework participation and/or EU Standard Contractual Clauses. No protection can eliminate all third-country access risk. Transport encryption and access controls are used for the provider connections.
Subject to the statutory conditions, data subjects have rights of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection to processing based on legitimate interests (Art. 21), withdrawal of consent for the future (Art. 7(3)) and complaint (Art. 77). Requests can be sent to thetaloopsignals@gmail.com.
Competent supervisory authority for the provider's establishment:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
Phone: +49 981 180093-0
www.lda.bayern.de
No subscriber decision producing legal or similarly significant effects is made solely by automated processing.
The free ThetaLoop scores, rankings, research outputs, text, graphics and tools are provided for personal research and education. Automated scraping, systematic extraction, commercial reuse, redistribution, republication or incorporation into a competing or derivative product requires prior written permission. Ordinary linking and personal use remain permitted.
Market and options data may be delayed, incomplete or erroneous and can change after publication. No real-time exchange feed is redistributed. Availability, accuracy, fitness for a particular purpose and uninterrupted operation are not guaranteed. Mandatory liability remains unaffected; otherwise users act on the research at their own risk.
Research notice: ThetaLoop is a quantitative research service, not a broker, asset manager or personalized advisory service. Nothing on this site is an offer, individualized recommendation or solicitation to buy or sell a security.