Privacy Policy

What is collected

Only what the application needs to work. In full:

• Your Google account identifier — the sub claim Google returns when you sign in. This is a number that identifies your account to this application and nothing else. It is used instead of your email address because it does not change when your email does.
• Your email address and display name, as Google reports them. The email identifies your account to you; the name is shown to you in the header. Both are refreshed each time you sign in.
• Your trading activity — your cash balance, your positions, and a record of every simulated buy and sell with its price, quantity and time. All of it is made up; none of it corresponds to real holdings.
• Snapshots of your account value, taken when prices are refreshed, so the performance chart has something to draw.
• Your watchlist, and your leaderboard setting and chosen leaderboard name if you set one.
• A count of assistant questions, with timestamps, to enforce the rate limit. The questions themselves are not stored.

No password is collected, because there is none — signing in is handled by Google. No payment details are collected, because there is nothing to pay for. There is no analytics, no advertising and no tracking of any kind.

How it is used

To run the application for you: to show your portfolio, price it, keep your history, and rank you on the leaderboard if you have asked to appear there. That is the whole of it.

It is never sold

Your data is never sold, rented, traded or shared for advertising, and it is not used to build a profile of you.

Three third parties see data in the course of the app working, and only what they need:

• Google handles sign-in, and therefore knows you signed in here.
• Alpaca receives the ticker symbols being priced. It is not told who asked.
• Google Gemini receives your question and the portfolio figures relevant to it when you use Ask, in order to answer. If you would rather it did not, do not use Ask.

What other people can see

By default, nothing. Your holdings, trades, cash balance and account value are visible only to you.

The single exception is the leaderboard, which is off unless you turn it on. If you opt in, other signed-in users see the nickname you chose, your total account value and your percent return — and nothing else. They never see your real name, your email address, what you hold, what you have traded, or how much cash you have. You can leave at any time from your account page, and your entry disappears immediately.

Exporting your data

Your account page has a Download my data link that gives you a JSON file containing your profile, every holding with what you paid for it, and your complete trade history. It is a plain, readable file you can keep or load elsewhere — not a screenshot of a table.

Deleting your data

The same page has a Delete this account option. It asks you to type the word DELETE, because a button on its own is one mis-click away from losing everything.

Deleting removes your account row, your cash balance, every position, your entire trade history, your account value snapshots, your watchlist and your leaderboard entry. It happens in a single database transaction, so it either all goes or none of it does. It cannot be undone — there is no backup to restore from and no way for anyone to recover it for you.

Market price data is not deleted, because it was never yours: the price of a share is the same for everyone and is not linked to any account.

How long it is kept

Until you delete it, or until this application stops running. Being a personal project, it may be taken down at any time, and its data may go with it.

Cookies

One cookie, holding your signed-in session and the token that protects forms from cross-site submission. It is not used for tracking. Signing out clears it.