Privacy

What we store

• Your email address and a bcrypt hash of your password (never the password itself).
• Hashed one-time recovery codes.
• Your notes, watchlist, saved views and manually entered prices.
• A session cookie (strictly necessary, HTTP-only, secure) that keeps you signed in for up to 30 days.
• Feedback you send, with an email only if you provide one.

Service providers and product measurement

When configured, Google handles optional Google sign-in, our transactional email provider delivers sign-in links and trial reminders, and Stripe handles checkout and billing. We store provider identifiers and subscription status, not full card numbers. Necessary first-party events record the first useful research interaction, trial activation, subscription conversion and renewal. We do not use advertising trackers or sell your personal data.

Request logs

Application logs record request method, path, status and timing, not passwords, sign-in tokens, request bodies or research notes. Hosting and proxy logs must also be configured to omit sensitive query strings.

Your controls

Read and export saved research even after premium access ends. Manage billing and self-service cancellation from Membership. Paid access continues through the purchased period. Cancel any recurring subscription before account deletion; financial records retained by the payment provider may be subject to legal retention requirements. Passwordless users can request an email sign-in link and set an account password before using password-confirmed account controls.

Sharing

Notes are private. If you enable a read-only link, anyone holding it can see that note's content and snapshot, but not your email. Turning sharing off invalidates the link.

Retention & backups

Data is kept until you delete it. Daily backups of the user database are kept on the server for 7 days; deleted accounts disappear from backups as they age out.