Privacy

What we collect

• Account: your email address and a salted, one-way hash of your password (we never store the password itself).
• Your data: the watchlists, portfolios, saved screens, blended benchmarks and alerts you create.
• Recently viewed: the funds you open, kept on your account so the dashboard can show them back to you. This is a record of what you looked at, not only what you saved.
• Session: a signed, HTTP-only session cookie to keep you logged in. No third-party advertising or tracking cookies.

What we don’t collect

No brokerage credentials, no linked accounts, no financial account numbers, no real holdings or balances — portfolios here are hypothetical models. We do not sell or share your data with advertisers.

How it’s used

Solely to run the service: authenticate you, save your watchlists/portfolios, and (if configured) send password-reset and verification emails. Fund and market data is fetched from a third-party data provider and is not personal to you.

Security

Passwords are hashed with a modern algorithm; sessions and reset tokens are cryptographically bound to your current password hash, so changing your password invalidates old sessions and outstanding reset links. Cookies are HTTP-only and secure in production. Data is stored on an encrypted volume.

Your control

From Account settings you can change your password or permanently delete your account and all its data. Deletion is immediate and irreversible.

Email

We only email you for account actions you initiate (password reset, email verification). No marketing email.