What we store, where, and for how long.
On sign-in we store, at most:
Your account state. If you keep a portfolio, a learning record or settings on the server, that JSON is stored under your account. With pass-phrase sign-in the phrase never leaves your device. Your browser locks your state with a key made from it, and the server keeps only that locked copy, which it cannot read. No password is ever stored, because none is ever set.
Sign-in codes. A six-digit code is hashed before it is stored. It works for ten minutes and only once. It is deleted after it is used.
Sending the code. The code is emailed through Resend, an email service. It receives your address and the code, nothing else.
Network addresses. To stop abuse, sign-in attempts are counted per network (IP) address for one hour. The address is stored with its count and deleted within a day.
Where. All of it lives in a database on Cloudflare, which also serves the site and sees each request, as any host does.
How long. Codes expire and are deleted after use. Account rows and your state stay while the account exists. There is no schedule that deletes them.
What stays only on your device. Your learning record and your settings stay in this browser until you sign in. They do not leave the device on their own.
What is never collected. No password. No browsing history. We do not track what you read to build an audience profile.
Reports of wrong figures. When you send one, we keep the company code, the figure and the source you wrote, and the time, for 180 days. We do not store your network address. To stop floods of reports, it is turned into a one-way code made with a secret key, and only that code is counted.
Ads and sale. There are no ads. We do not sell or rent your data to anyone.
Deleting an account. Sign-in is not open yet, so there are no accounts. Before it opens, this section will say how to delete one.
This is not investment advice.