What this site keeps about you

If you just visit

No account and no tracking. The site uses no analytics and keeps no record of who viewed what. Its server logs record which pages were requested, but not by whom: no IP addresses and no identities.

Two conveniences stay on your own device. If you pick a dashboard style, a cookie remembers your choice. The CIO page remembers the last ticker you opened in your browser's local storage, which is never sent to the server.

Your browser does fetch some fonts and chart code from third parties: fonts from Google Fonts, and charting libraries from jsDelivr. Like any website you load, those services receive your IP address when your browser requests the files.

If you have an account

• Username and role. Accounts are invitation-only and use a username rather than an email address. Nothing on this site needs to contact you.
• Password. Stored only as a one-way scrypt hash. Nobody, including the site owner, can read it.
• Dates. When the account was created and when you last signed in.
• AI usage. How many AI analyses you ran each day, to enforce the daily allowance. A count only, not which tickers or memos. Deleted after 31 days.
• One cookie to keep you signed in, for up to 30 days. It's strictly necessary for signing in, so it isn't used for anything else.

Not stored: your email address, real name, IP address, or what you look at. Repeated failed sign-ins are counted in memory to slow down password guessing, and that count is gone when the app restarts.

Where it's kept

On this site's server in Microsoft Azure (UK West). Account data stays on that server: it isn't part of the site's source code, or the GitHub repository the site is deployed from.

Your choices

From your account page you can download everything stored about you, and delete your account. Deleting removes the account and its usage history at once. For anything else, contact the site owner.