Privacy & data

What we store

Your email and a bcrypt-hashed password (never the password itself); the watchlists, portfolios, holdings, scenarios, notes, alerts, trade-log entries and plan answers you create; and page-view counts under a random visitor id (no advertising identifiers). While you are signed in, a page view may also be linked to your account so we can understand feature usage — it is never shared or sold. Password-reset emails are delivered through Resend and contain only the reset link. Payment card data is never touched — billing, when it activates, is handled entirely by the payment provider.

What we don't do

No selling of data, no advertising trackers, no sharing of holdings or activity with anyone. Admin actions on accounts (tier changes, promo codes) are recorded in an audit trail. Delete requests: email support and the account with all its data is removed.

Analytics

Page views are counted first-party with a random-id cookie (linked to your account while signed in, as above). When Google Analytics is enabled, Google's tag also collects page-view and device data under Google's own policies; we send it no email addresses, holdings or plan content, and admin browsing is excluded. Market data shown in the app comes from licensed providers and is analysis, not financial advice.