Privacy

Without an account

You can read the site without an account. We set no cookie for you and run no advertising, no analytics and no tracking scripts. The pages load script libraries (htmx and the chart library) from jsDelivr, a content delivery network at cdn.jsdelivr.net, which therefore receives your address like any web server; these scripts are not used for tracking. The web server keeps ordinary access logs (address, time, page) for a short time to keep the service running.

With an account

• Your e-mail address, to send the sign-in link and the alerts you turn on.
• Your watchlist and your alert settings.
• A session cookie named sid, set when you sign in and removed when you sign out, and otherwise kept for up to 30 days. It only keeps you signed in. The server stores a fingerprint of it, not the cookie itself.
• Sign-in links: a fingerprint of each link, together with the address it was sent to. These records are deleted about a day later, when a link is next requested.
• Rate limiting: to limit abuse of the sign-in form, the server keeps the client address of sign-in requests in memory for up to an hour. It is never written to disk.

There is no password. We do not sell or share this data. It is sent to our mail provider only as far as needed to deliver a message to you.

Market pages

Quotes on the market pages are fetched from Yahoo Finance by your own browser through an optional extension. That request goes from you to Yahoo; this server does not see it.

Removing your data

Use "Delete the account" on the account page: your address, watchlist and settings are removed at once. Every alert mail has an unsubscribe link.

Who is responsible

The operator of this installation is responsible for this data.