1. Legal notice and identification
Article 10 of Spanish Law 34/2002 of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).
- Site ownerPol Gracia Serrahima, trading under the brand NeurLink
- Spanish tax ID (NIF)53294327S
- Contact email[email protected]
- Domainquant500.com
- ActivityPublication of quantitative analysis and educational content on financial markets
“Quant500” and “NeurLink” are the trade names under which this service is provided. Accessing the site implies acceptance of the terms set out on this page.
2. Terms of use
What you may do with this site, and what is expected of you.
Access to the site is free of charge. Certain features — saving your own portfolio, tracking progress in the Academy, or receiving the insider-buying alerts by email — require creating an account with a valid email address. Email alerts arrive switched off: they are only sent if you turn them on yourself.
Permitted use
- Reading, consulting and sharing published content, citing the source and linking to the original.
- Using the simulator and the rankings for your own research.
Prohibited use
- Bulk or automated data extraction (scraping, systematic harvesting of the APIs) without prior written authorization.
- Presenting the content as your own, or as an investment recommendation issued by an authorized third party.
- Attempting to access other people's accounts, disrupt the service, or circumvent rate limits.
- Reproducing the service, in whole or in part, for commercial purposes without authorization.
Availability
The service is provided “as is”. Uninterrupted availability and freedom from errors are not guaranteed. Data comes from external sources and automated calculations that may fail, lag or become stale. The owner may suspend, modify or withdraw any content or feature without prior notice.
You are responsible for the accuracy of the details you provide when registering, and for keeping your password safe.
3. Risk warning and absence of advice
The most important section on this page. Read it in full.
Quant500 does not provide investment services. It is not a broker or a fund: it does not hold client money, does not execute orders, and does not offer advice or personalized recommendations. Nothing published here constitutes an offer or solicitation to buy or sell financial instruments.
All scores, rankings, model portfolios and backtests are generated automatically from public data and are shown identically to every visitor, with no knowledge of your circumstances, time horizon, tax situation or risk tolerance. By definition, content that is the same for everyone cannot be a personalized recommendation for anyone.
Backtest results are hypothetical: they do not represent real trades. They exclude commissions, bid-ask spread, slippage and taxes, and are affected by the part of survivorship bias that remains: the universe is point-in-time, but prices are missing for some companies that left the index. Past performance does not guarantee future results.
Investing in equities carries risk, including the total loss of the capital invested. Any decision you make based on what you read here is yours and yours alone. If you need a recommendation tailored to your situation, consult an authorized financial adviser registered with the Spanish Comisión Nacional del Mercado de Valores (CNMV) or the equivalent regulator in your country.
The owner accepts no liability for direct or indirect losses arising from use of the published information, nor for errors, omissions or delays in the data.
Declaration of interests
The model portfolios, the rankings and their entries and exits are published identically for everyone. So that readers can judge their objectivity (Article 20 of Regulation (EU) 596/2014 and Delegated Regulation (EU) 2016/958):
- Who produces them. Pol Gracia Serrahima, owner of Quant500. They are generated by an algorithm following the rule published in the methodology: nobody picks, adds or adjusts any stock by hand.
- Author's positions, as of September 15, 2026. The author owns shares of Ciena (CIEN), Newmont (NEM), Vertiv (VRT) and Wells Fargo (WFC), which appear in model portfolios or in the ranking on this site. The author's other positions are in securities this site does not analyze.
- What that changes and what it does not. Those positions play no part in the algorithm: the portfolios come out the same whether or not the author holds those stocks, and would include them anyway. Readers of the portfolios should still know.
- When they change, this list is updated here, with its new date, from that same day.
- Income. Quant500 is not paid by the companies analyzed, by brokers, through affiliate links, or by advertising.
- Dates. Each portfolio states the day of its rebalance and each ranking the session it was computed from.
4. Data sources, method and limits
Where each figure comes from, and what it cannot promise.
Quant500 combines public market data with financial information extracted from the filings companies submit to the United States Securities and Exchange Commission (SEC), in particular forms 10-K, 10-Q and 4. The analysis universe is the S&P 500.
- The data belongs to third parties. Its accuracy is outside the owner's control. It may contain source errors, later restatements, or publication lags.
- The calculation is automated. A fault in one source can propagate into a score without anyone reviewing it by hand that same day.
- Dates matter. Every block on the site states when it was updated. A figure without a timestamp means nothing, which is why it is always published alongside the date it was computed.
- Rankings change. A company scoring well today may not tomorrow. A single day's snapshot is not an investment thesis.
If you spot a figure that does not add up, write to [email protected] stating the page and the value. Errors get fixed, not argued about.
5. Privacy policy
Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
5.1. Data controller
- ControllerPol Gracia Serrahima (NeurLink) — NIF 53294327S
- Data protection contact[email protected]
No data protection officer has been appointed, as none of the circumstances in Article 37 GDPR apply.
5.2. What is processed, why, and on what legal basis
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Visit log | IP address, browser user agent, page requested, date and time | Service security, abuse and bot detection, aggregate usage statistics | Legitimate interest (Art. 6(1)(f)): keeping the service running and protected | 12 months maximum |
| User account | Name, email address and password (stored hashed with bcrypt, never in clear text). Also whether you switched the insider-buy alerts on, the dates you signed up and confirmed your address, and the date of the last global sign-out |
Creating and maintaining your account, signing you in, knowing whether you want the alerts, and letting you sign out on every device at once | Performance of the service relationship (Art. 6(1)(b)) | While the account remains active |
| Confirmation and password-reset links | The link's fingerprint (never the link), the address it was sent to, the language, when it expires and when it was used; for the password-reset link, also the IP address it was requested from | Proving the mailbox is yours, letting you back in if you forget your password, and being able to see where abuse comes from if someone requests links for other people's addresses | Performance of the service relationship (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f)) for the abuse part | While the account remains active |
| Monthly portfolio by email (no account) | Email address, language, sign-up and confirmation dates and, if you unsubscribe, the unsubscribe date; and the date of the last portfolio sent to you | Sending you the 20-stock multi-factor portfolio on the day it rebalances, and nothing else | Your consent (Art. 6(1)(a)), given when you confirm from the email and withdrawn with the unsubscribe link in any email | While you stay subscribed. After unsubscribing, the address and the unsubscribe date are kept so we do not write to you again if someone else enters your email; if you want them fully erased, ask by email |
| Saved portfolios | Portfolio name and the list of holdings and weights you enter | Letting you retrieve your portfolio when you return | Performance of the service relationship (Art. 6(1)(b)) | Until you delete it or close your account |
| Academy progress | Completed modules, scores and accumulated experience points | Remembering where you left off in the course | Performance of the service relationship (Art. 6(1)(b)) | Until you close your account |
| Usage measurement | Google Analytics 4 identifiers and associated browsing data | Knowing which pages get read and which do not | Your consent (Art. 6(1)(a)), withdrawable at any time | Up to 14 months in Google Analytics |
| Email enquiries | Whatever you include in your message | Replying to you | Your consent in writing to us (Art. 6(1)(a)) | For the duration of the enquiry and up to 1 year after |
An IP address is personal data even when it does not come with your name attached. That is why the visit log appears in this table rather than in a footnote: it has existed since day one, and not declaring it would amount to hiding it.
5.3. Who else sees this data
Data is not sold, rented or shared with third parties for commercial purposes. The only recipients are the providers needed to keep the site running, acting as data processors:
- Contabo GmbH (Germany) — the server hosting the application and the database. The production machine is physically located in the United States.
- Cloudflare, Inc. (United States) — content delivery and protection against attacks. All traffic passes through their infrastructure before reaching the server.
- Google Ireland Limited (Ireland) — Google Analytics 4, and only if you have given consent. Google may process data in the United States.
- Sendinblue SAS ("Brevo") (France) — delivery of the site's emails: your address verification, the welcome message and, if you turn them on yourself from the insider alerts page, the insider buying alerts; and, if you ask for it, the monthly portfolio. It only receives your email address and, if you have an account, your name.
Data may also be disclosed to courts or public authorities where there is a legal obligation to do so.
5.4. International transfers
As stated above, some processing takes place outside the European Economic Area, in the United States. These transfers rely on the Standard Contractual Clauses approved by the European Commission and, for certified providers, on the EU-U.S. Data Privacy Framework. If that concerns you, it is written here precisely so that you can decide with the facts in front of you.
5.5. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent you have given, without affecting the lawfulness of processing carried out beforehand.
One of them you exercise on the site itself, without writing to anyone and without waiting. Once signed in, from your profile menu (the icon at the top right):
- Download my data — portability (Art. 20). You get a JSON file with everything the database holds about you: your account, your saved portfolios with their positions, your Academy progress and the dates of the emails we have sent you. The file itself lists what it cannot include, and why.
Erasure (Art. 17) and every other right are exercised by email. That route does not depend on the site being up: write to [email protected] from the address you registered with, stating which right you wish to exercise. By that route you will receive a reply within one month at the latest.
If you believe your data has not been handled correctly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid, or with the supervisory authority of your country of residence.
5.6. Automated decisions and security
No profiling is carried out and no automated decisions with legal effects on individuals are taken. The algorithms on this site score listed companies, not users.
Reasonable technical measures are in place: encryption in transit (HTTPS), passwords stored with the bcrypt key derivation function, sessions handled by a signed token expiring after 7 days —revocable before then: changing your password, or pressing “sign out on all devices” in your profile, invalidates that account’s earlier tokens instantly— and per-IP rate limits. No system is invulnerable; should a breach occur that poses a risk to your rights, you would be notified in accordance with Article 34 GDPR.
7. Intellectual property
Who owns what.
The code, design, texts, scoring methodology, charts and the Quant500 brand belong to Pol Gracia Serrahima unless expressly stated otherwise. All rights reserved.
You may quote extracts and specific figures for informational or educational purposes provided you credit the source and link to the original page. Systematic reproduction of rankings, tables or complete portfolios, or their incorporation into third-party products or services, is not permitted without prior written authorization.
The names, logos and trademarks of the companies analyzed belong to their respective owners and appear for identification purposes only. Their mention implies no relationship, sponsorship or endorsement.
8. Links and third-party services
What gets loaded from outside this domain.
Some pages embed charts from TradingView, served from that provider's own domains. When they load, your browser communicates directly with them and their own privacy policies apply, independently of Quant500.
The site also contains links to external websites (regulators, data sources, documentation). The owner does not control their content and accepts no responsibility for it. Following one of those links takes you outside the scope of this policy.
9. Minors
Who may register.
The service is not directed at children under 14 and no information is knowingly collected from them. To create an account you must be at least 14 years old, in line with Article 7 of the Spanish LOPDGDD. If you become aware that a minor has registered without the consent of their guardian, write to the contact address and the account will be deleted.
The content of this site concerns financial markets and the risk of capital loss. It is not children's educational material.
10. Governing law, changes and severability
The legal framework, and what happens when this document changes.
These terms are governed by Spanish law. For any dispute, the parties submit to the courts having jurisdiction under applicable law; where the user qualifies as a consumer, those of their place of residence.
The owner may amend this document to reflect legal changes or new features. The version in force is always the one published on this page, with its update date visible in the header. Changes affecting the use of cookies or the processing of personal data will additionally be announced through a notice on the site itself.
If any clause is declared void or unenforceable, the remainder stays in force.
11. Frequently asked questions
The same answers as above, without the legal language.
Is Quant500 telling me which stocks to buy?
No. What you see is the output of an algorithm that scores S&P 500 companies using public criteria, always the same ones. That list is identical for you and for every other visitor, and it is generated knowing nothing about you: not your age, not your wealth, not how long you can wait, not how much you can afford to lose. A list that is the same for everyone cannot be advice for anyone in particular. What you do with the information is your call.
Are you registered with the CNMV?
No, and it is not required: Quant500 does not provide investment services. It does not manage other people's portfolios, does not execute orders, does not hold money and does not issue personalized recommendations — those are the activities that need authorization. This is an analysis and education site. The day advice tailored to individuals were offered here, that authorization would be mandatory, and until it existed nothing of the sort would be offered.
The backtests show very high returns. Are they real?
They are simulations, not trades anyone made with real money. They reconstruct what would have happened applying the strategy over historical data, without deducting commissions, bid-ask spread, slippage or taxes, and over the point-in-time index universe, which no longer introduces membership bias although prices are still missing for some companies that left. In practice a real result would be lower. Past performance does not guarantee future results: the phrase is worn out from repetition and it is still true.
Do you make money if I follow what you publish?
No. Today Quant500 shows no advertising, charges no subscription, sells no financial products and has no commission arrangements with any broker, asset manager or issuer. Nobody pays to score better, not least because the scores are computed by an algorithm from filings submitted to the SEC. If advertising or a paid service is ever introduced, it will be announced on this page before it goes live. What you should know: the author owns shares in some of the stocks that appear in the portfolios, declared and dated in section 3; if they rise, the author gains like any other shareholder.
What data do you actually keep about me?
If you only browse: your IP address, the browser you use, the page you request and the time, in a log used for security and statistics and kept for a maximum of twelve months. If you register: your name, your email and your hashed password, plus any portfolios you save, your Academy progress, whether you switched the insider-buy alerts on, and the fingerprint of any confirmation or password-reset link sent to you (for the password one, also the IP it was requested from). And if you accept measurement, your Google Analytics identifiers. Nothing else. The full table, with the legal basis for each purpose, is in section 5.
Do you sell or share my data?
No. It is not sold, rented or shared for commercial or advertising purposes. The only third parties touching this data are the providers the site cannot exist without: the server, the network protecting it and, if you have accepted it, Google Analytics. All of them are named in section 5.3, including the fact that the server sits in the United States.
How do I delete my account and everything you hold?
On the site itself: sign in, open your profile menu (the icon at the top right) and hit Delete my account. Before anything is deleted you will see, with the figures in front of you, what is about to go, and you will be asked for your current password to confirm. The account, the saved portfolios and the Academy progress are deleted on the spot, with no waiting and no reason to justify; you also get an email stating what was deleted. It cannot be undone and no copy is kept, so if you want to take your data with you, use Download my data in that same menu first.
If you would rather not do it yourself, or you cannot get into your account, writing to [email protected] from the address you registered with still works: by that route the maximum time to receive a reply is one month.
Why ask permission for Analytics and not for the rest?
Because not all storage is the same. The kind that remembers your language or keeps your session open is indispensable for the service you asked for, and the law does not require prior consent for that. Google Analytics is not indispensable: it exists to show which pages get read. Since it is optional, you get asked, and until you say yes the Google script is not even downloaded. You can change your mind whenever you like in section 6.
Where do the company numbers come from?
From the documents companies file with the US SEC — annual and quarterly reports, and the form 4 filings covering insider transactions — plus public market data. The whole process is automated, so an error at the source can end up in a score. Every block on the site carries the date it was computed, precisely so you can check whether you are looking at something current.
Can I republish your rankings on my site or on social media?
Quoting specific figures or an extract, yes, as long as you state that they come from Quant500 and link to the original page. Copying whole tables or portfolios systematically, or building them into a product of your own, no: that needs written permission. If you want to use the material for something more ambitious, get in touch and we can talk.
I found a figure that looks wrong. Who do I tell?
Write to [email protected], saying which page you saw it on and which value looks incorrect. Reports like that are welcome: on a site that computes by itself, an attentive reader finds things no automated check is looking at.
12. Contact
One channel, and it gets read.
For any question about legal matters, privacy, intellectual property, or a specific figure on the site:
- Email[email protected]
- ResponsiblePol Gracia Serrahima — NeurLink
- Response timeOne month at most for GDPR rights requests
This document is in force from August 12, 2026. It supersedes any earlier version published at this address.