Privacy Policy

Information we collect

• Email address — when you join the waitlist, create an account, or subscribe to blog updates.
• Blog subscription — if you ask for an email when a new post goes up, we store that address, when you subscribed, and whether you confirmed it. We use it for nothing else: no digests, no product mail, and we do not sell or share the list. If you subscribe without an account we send one confirmation request and nothing further unless you click it. Every email carries a one-click unsubscribe link, and unsubscribing stops the mail immediately.
• Account information — if you sign in with Google (OAuth), we receive basic profile information such as your email and account identifier.
• Payment information — subscription payments are processed by our payment provider (Stripe). We do not store full card numbers.
• Usage and analytics — standard analytics (e.g., Vercel Analytics and, if enabled, Google Analytics) about how the site is used.
• Advertising data — on our free educational pages only (Learn, Stock Analysis, Methodology, FAQ, About), Google AdSense and its partners may set or read cookies and similar identifiers, and may collect your IP address, device and browser information, and pages viewed, in order to select and measure ads. This can include personalized (interest-based) advertising. No advertising is served on the screener, dashboard, portfolio modeler, trade log, calculator, or demo scan, and no data you enter into those tools — positions, tax rates, or scan inputs — is ever shared with an advertising provider. None of this applies to visitors in the EEA, the UK, or Switzerland, who are served no advertising at all (see below).
• Free-scan counting (no account) — the first few live scans work without an account, and we have to limit them. To do that we store a one-way cryptographic hash of your IP address together with a count of scans for that day. We do not store the IP address itself, the hash cannot be turned back into it, and it is not used to build a profile, target advertising, or identify you — only to tell whether today’s free scans have already been used. Counts older than a few days are deleted. Signing in replaces this entirely: your scans are then counted against your account.
• On-device settings — some preferences (such as your tax rates and your risk acknowledgment) are stored in your browser’s local storage and are not sent to our servers except as needed to run a scan.

How we use information

To operate and improve the Service, provide the features you request, process subscriptions, communicate with you, and maintain security and compliance records. We do not sell your personal information for money.

Personalised advertising on the educational pages does, however, meet the definition of “sharing” for cross-context behavioural advertising under the CCPA/CPRA (other state laws call it “targeted advertising”), because an advertising partner can use identifiers from your visit to profile you across other websites. You can turn that off for this browser at any time: Do Not Sell or Share My Personal Information.

Third-party services

We rely on third-party processors including authentication, payment (Stripe), hosting/analytics (Vercel), Google Analytics, and Google AdSense for advertising on our educational pages. Their handling of data is governed by their own privacy policies.

Advertising and your ad choices

Advertising on the educational pages is served by Google, a third-party vendor that uses cookies to serve ads based on your prior visits to this and other websites. You can control this:

• Opt this browser out of the sale or sharing of personal information — the control on our own site. Ads still appear, but they are requested as non-personalised and Google’s advertising storage, ad identifiers, and ad-personalisation signals are denied before any Google tag loads.
• Opt out of personalized Google advertising at Google My Ad Center, or review how Google uses data from sites that use its services.
• Opt out of interest-based advertising from participating vendors at YourAdChoices or the NAI opt-out.
• Send an opt-out preference signal. If your browser or extension sends Global Privacy Control, we treat it as an opt-out on every page automatically, and it takes precedence over any choice made on our own control.
• Block or delete cookies in your browser settings. Note that clearing cookies also clears the opt-out recorded for this browser.

Open item for counsel. The CCPA/CPRA opt-out link, the preference-signal handling, and the regional restriction described below are implemented. What still needs review is whether this policy’s notices are complete — the categories of personal information shared, retention periods, the specific link wording each state requires, and, for European visitors, the elements a GDPR or UK GDPR notice must contain (controller identity, legal bases, transfer mechanism, and how to make a request).

Visitors in the EEA, the UK, and Switzerland

We do not serve advertising to these regions at all. Google requires that ads shown there be gated by a consent management platform it has certified. We have not configured one, and a consent banner of our own making would not be an acceptable substitute — so rather than ask for a permission that would not count, we withhold the ads.

In practice, for a visitor we resolve to one of those countries:

• No ad unit is rendered and the Google advertising script is never requested, so no advertising cookie or identifier is set.
• Advertising storage, ad identifiers, ad personalisation and analytics storage are denied for those countries through Google Consent Mode, which means Google Analytics runs there without setting cookies.
• Region is determined from the country your request resolves to at our hosting provider’s edge. If it cannot be determined, we treat you as covered rather than assume you are not.

What still happens is only what running the Service requires: your account email, subscription billing through Stripe, and the essential cookies that keep you signed in. If we later enable a Google-certified platform in order to serve ads in these regions, its consent prompt — Google’s own, not ours — will appear before any advertising cookie is set.

Your opt-out rights

You may opt out of the sale or sharing of your personal information for advertising at Do Not Sell or Share My Personal Information. No account, sign-in, or explanation is required, and the opt-out is offered to every visitor rather than only to residents of states whose laws require it.

Because the setting is stored in a cookie, it applies to the browser and device where you set it. We honour Global Privacy Control automatically wherever it is sent. We do not discriminate against anyone for exercising these rights: the price, features, and output of the Service are identical whether or not you opt out. For access, correction, or deletion requests tied to your account — including requests made by an authorised agent — email nexobyte25@gmail.com.

Data retention and your choices

We retain information as needed to provide the Service and meet legal and recordkeeping obligations. You may request access to or deletion of your account data, and you can clear browser-stored settings at any time. Depending on your jurisdiction you may have additional rights.

Contact

Privacy questions or requests: nexobyte25@gmail.com. See also our Terms and Disclosures.