Privacy

What we collect

• Email address: to sign you in (one-time sign-in links) and, if you subscribe, to send the newsletters and digests you chose. Every newsletter has an unsubscribe link.
• Account: optional display name, your watchlist, alert settings, the alerts we've sent you, and sign-in times.
• Community (members only): your @username, display name, optional bio and avatar image, the date you joined, your posts, replies and likes, who you follow, block or mute, reports you file, and the time you confirmed you're 18 or older and accepted the community rules. Your profile and posts are visible to other signed-in members. Your email address is never shown.
• Push notifications: if you turn them on, the browser's push subscription (an endpoint address and encryption keys) and a short device description.
• Feedback: if you send feedback, the message, the page you sent it from, your browser type, and a one-way hash of your IP address.
• Cookies: a session cookie to keep you signed in, and preference cookies (light or dark mode, last filter). No advertising or cross-site tracking cookies.
• Browser storage: visitors who aren't signed in can keep a watchlist in their own browser. It isn't sent to us unless you sign in and import it. The numbers you type into the Planning tools are computed in your browser and not stored by us; the portfolio analyzer sends only tickers and weights for that one request.
• Server logs: standard request logs (IP address, page, time) for security, abuse prevention and debugging.

How we use it

To sign you in, show your watchlist, send the alerts and emails you choose, run the community (including moderation and spam and abuse prevention), and keep the site working. We don't sell or rent personal data, we don't show ads, and we don't use your data for advertising.

Services that process data for us

• Render hosts the site and its database.
• Cloudflare sits in front of the site for security and delivery, so it handles your requests (including your IP address).
• Resend sends our emails (sign-in links, alerts and newsletters).
• Push notifications pass through your browser vendor's push service (Apple, Google or Mozilla).

Market data comes from third parties (Yahoo Finance, SEC EDGAR and others); we don't send them your personal data.

Age

The community is for people 18 and older. The site isn't directed at children.

Your choices and deleting your data

Change alerts or turn off emails in Settings. You can delete your account there at any time. That removes your email, watchlist, alerts, devices, community profile, avatar, posts, likes and follows from the live database. Backups roll off within 30 days. A newsletter subscription is kept separately: use the unsubscribe link in any newsletter to stop it. You can also email desk@coteau.app to ask for a copy of your data, a correction, or deletion.

Changes

If we change what we collect, we'll update this page and the date at the top.

Contact

desk@coteau.app