Privacy Policy
DRAFT — PENDING LEGAL REVIEW · 12 September 2026 This document has been prepared by the founder and has not yet been reviewed by an attorney. It states our current practice and will be replaced by a reviewed version.
Version: DRAFT-2026-09-12
The short version
We hold an email address and a list of ticker symbols. That is very nearly all of it.
We do not know what you own. We do not know what your account is worth. We do not know what you bought or when. Not because we promise not to look — because we never collect it, and the systems are built so that they cannot.
We do not sell your information. We do not share it with advertisers. There are no ad networks, trackers or data brokers anywhere in this service.
Who we are
This service is operated by QuantPlus Analytics, LLC, an Ohio limited liability company, of Crestline, Ohio. We are the controller of the information described here.
What we collect
An account needs almost nothing, and we ask for almost nothing.
| What | Why we have it |
|---|---|
| Your email address | It is your username. It is how you sign in, and how we reach you about renewals and outages |
| The date we confirmed that address is yours | See Confirming your email address, below |
| A password, stored only as a cryptographic hash | So we can check it without knowing it |
| The ticker symbols you choose to follow | To show you your own list |
| A record of your agreement to our terms | See The record of your agreement, below |
| Support messages you send us | To answer them |
| Basic server and security logs | To keep the service running and to detect abuse |
That is the list. If something is not on it, we do not have it.
We do not ask for your name. Not at signup, not later. If you sign your emails to us we will obviously read them, but there is no name field in this service and nothing asks you for one.
Confirming your email address
Your email address is your username, so we confirm it before your account exists.
When you start signing up we send a short numeric code to the address you gave us, and you type it back. Until you do, no account has been created — there is nothing stored under that address and nobody has taken it.
Why a typed code rather than a link you click: a link has to carry a secret inside the web address, and web addresses get written into logs at every point they pass through. A code you type never appears in a URL. It is a small thing and it is the kind of small thing this service is built out of.
What happens to the code: it is stored only as a cryptographic hash, it expires within minutes, it works exactly once, and it is destroyed the moment it is used or expires. It is never written to a log.
All we keep afterwards is the date we confirmed the address. Not the code, not how many attempts it took, not which network you were on.
🛡 What we deliberately do not collect
This section is the important one, and it describes engineering rather than intention.
Where you upload a list of securities you follow, that upload accepts ticker symbols and nothing else. Any additional column is rejected at load — not ignored, rejected. It does not enter our systems at all. There is no quarantine, no archive, no log of the discarded values.
The difference matters. Ignoring data means we received it and chose not to look. Rejecting it means it never arrived.
We do not accept, and cannot store:
- How many shares you hold, of anything
- What you paid, or when
- What your account or portfolio is worth
- Who your broker is, or any account number
- Your income, net worth, or financial position
- Your date of birth, government identifiers, or tax identifiers
We also never see your card details. Payments are handled entirely by our payment processor — see Payment, below.
This is a deliberate limit on what this business is. A service that knows what you own and what it is worth is a different kind of service, subject to different law, and we have chosen not to be it.
Why we hold what we hold
Four reasons, and no others:
- To give you the service you paid for — your login, your list, your access.
- To keep it running and secure — logs, error reports, abuse detection.
- To meet legal and accounting obligations — records of what was agreed and what was paid.
- To contact you about your subscription — renewals, price changes, outages, and the end of your access if you cancel.
We do not profile you. We do not score you. We do not use what you follow to decide what to show you — every subscriber sees the same analysis, in the same order, at the same time.
Who else touches it
We use a small number of service providers, and each one only sees what it needs.
| Who | What they handle |
|---|---|
| Google Cloud | Hosting and the database — where the service actually runs |
| Cloudflare | Sits in front of the site for security and delivery, and counts page views |
| Paddle | Takes your payment as merchant of record |
| Our email provider | Sends account and renewal email, and receives what you write to us |
These are service providers, not customers. None of them is permitted to use your information for their own purposes, and none of them is paid in data.
We do not sell your personal information, and we do not share it for anyone's advertising.
Payment
Payments are processed by Paddle, which acts as the merchant of record for this service.
Paddle holds your card details and your billing address. We do not, and we do not copy them into our own systems. We receive confirmation that a subscription is active, and the email address attached to it. That is all we get and all we want.
Paddle handles the transaction and any applicable sales tax under its own terms and its own privacy policy, which govern that part of the relationship.
The military and first-responder rate
If you claim our military or first-responder rate, here is exactly what happens to what you send us.
We store a single fact: that the rate applies to your account, and the date we recorded it.
We do not store — and do not want — your discharge papers, your service dates, your rank, your branch, your unit, your badge number, your disability rating, or any document you send to establish eligibility. If you email us proof, we read it, we record that the rate applies, and the document is deleted from our mail.
If this is ever handled by a third-party verification service, that service will hold its own records under its own privacy policy, and we will still receive only the single fact.
For the free tier we ask for nothing at all. If you were injured running toward something, or you are the family of somebody who did not come back, we take your word for it and there is nothing to store.
The record of your agreement
When you tick the boxes agreeing to our Terms of Service and this Privacy Policy, we record four things: which account agreed, which version of each document was in force, a cryptographic fingerprint of the exact text you were shown, and the date and time.
We keep those records permanently, because they are the evidence of what was agreed. They contain no information about you beyond the fact that you agreed and when.
Cookies
We use cookies that are necessary for the service to work — keeping you logged in, keeping your session secure, and remembering that you have agreed to our terms.
Our security and delivery provider also sets cookies necessary for that protection.
We do not use advertising cookies, cross-site tracking, or third-party marketing pixels.
How we count visitors
Our delivery provider counts page views for us, and we want you to know it is there.
Every page carries a small script from that provider which records that a page was viewed. It sets no cookie, it does not identify you, and it does not follow you to any other website. What we get back is a count — which pages were read, how often, roughly from where in the world. Not who read them.
We use it for one thing: to find out whether anybody is reading the glossary. That is the whole ambition.
🔴 We did not put that script in our own code, and for a time we did not know it was there. Our delivery network adds it at the edge, to every page, and we found it while measuring something else. We are telling you that rather than describing it as though we had chosen it deliberately, and if we decide to remove it, this section goes with it.
Email, and how to stop it
Some email is part of the service and cannot be switched off while you have an account — receipts, renewal notices, security notices, and anything we must tell you about your subscription.
Everything else is optional. Every message we send that is not one of the above carries a working unsubscribe link, our name, and a postal address. Unsubscribing takes effect promptly and never affects your subscription.
If an unsubscribe link ever fails, write to us and we will remove you by hand.
How long we keep things
| What | How long |
|---|---|
| Sign-up codes | Minutes. Destroyed on use or on expiry, whichever comes first |
| An unfinished sign-up | Discarded shortly after it is abandoned — no account, nothing kept |
| Your account and your list | While your account exists |
| After you close your account | Deleted within a reasonable period, except where we must keep something |
| Billing and tax records | As long as the law requires |
| Your agreement records | Permanently — they are the evidence of what was agreed |
| Security and server logs | A limited retention period, then discarded |
Security
We have adopted a written information security programme, based on a recognised industry framework, and we follow it. It was adopted on 3 September 2026 and it governs how this service is built, hosted, accessed and monitored.
We say this plainly rather than in the usual language. No system is perfectly secure, and anyone who tells you otherwise is selling something. What we can tell you is that the amount of your information at risk here is very small by design — an email address, a password we cannot read, and a list of ticker symbols. That is the strongest security measure in this document, and it is architectural rather than procedural.
If we ever suffer a breach affecting your information, we will tell you — what happened, what was involved, and what we are doing about it — as promptly as we are able and as the law requires.
Your choices, whoever you are
Some states give their residents specific privacy rights. We are not going to make you work out whether yours is one of them.
Whoever you are and wherever you live, you can:
- Ask us what we hold about you, and we will tell you.
- Correct anything that is wrong.
- Ask us to delete your information, and we will, except where we are required to keep something.
- Get a copy of what you gave us, in a form you can use elsewhere.
- Close your account at any time, in one click, from inside it.
Write to [email protected] and we will do it. We will not ask you why.
We will never charge you for any of this, and we will never treat you differently for asking.
This service is offered in the United States
Subscriptions are sold to customers with a United States billing address, including military addresses — APO, FPO and DPO — which means a service member may subscribe from anywhere in the world.
Our information is stored and processed in the United States.
We do not currently offer subscriptions to consumers outside the United States. If that changes, this policy will change with it and we will tell subscribers before it does.
Children
This service is not for anyone under 18, and it is not designed for or directed at children. We do not knowingly collect information from anyone under 18. If you believe a child has created an account, tell us and we will delete it.
Changes to this policy
We may change this policy. Every version carries a date, and we keep every version we have published.
Material changes are emailed to account holders before they take effect, and you will be asked to agree to the new version — the same way you agreed to this one, with a box you tick yourself.
If you want to know what you agreed to, ask us and we will send you that version.
Contact
Questions, requests, corrections, or anything in this document that does not make sense:
A person reads that mailbox. There is no ticketing system and no queue.
QuantPlus Analytics, LLC · Crestline, Ohio · [email protected] © 2026 QuantPlus Analytics, LLC
DRAFT — pending legal review · 12 September 2026 · version DRAFT-2026-09-12