What we store

If you do not sign in

Nothing is stored anywhere but your own browser. Saved companies, saved filings, your theme and your filters live in that browser's localStorage and are never sent to us. Clearing your browser data clears them. There is no account, no cookie that identifies you, and no analytics script on this site.

If you do sign in

Two things are stored, and they are the whole of it:

• Your email address. It is the only way to sign you back in, because there is no password to remember and no username to look you up by.
• The scrip codes you save. Six-digit BSE codes, and the date each was added. That is what makes your list follow you to another browser or another device.

Alongside those, a sign-in link is stored as a hash until it is used or expires, and a signed cookie keeps you signed in. Both are mechanics of signing in, not facts about you.

What is not stored

No name. No password. No profile, no photo, no phone number. No IP address log, no user agent, no analytics, no advertising or tracking pixels of any kind. We do not record which pages you read, which filings you open, or when you visit. The database has three tables, and its whole schema is fifty lines long; there is nowhere for anything else to go.

Why

So that a list of companies you care about survives a new laptop. That is the entire purpose, and nothing collected here is used for another one.

How long

• Your account and list: until you delete it. There is no expiry and no automatic purge, because a list you built two years ago is exactly the list you would be annoyed to lose.
• An address that never confirms: fifteen minutes. If someone types your address into the sign-in form and you never click the link, the row is deleted once the link expires. It does not sit there.
• Sign-in links: fifteen minutes, once. Used or expired, the hash is deleted on the next sign-in request anyone makes.
• The session cookie: 90 days, or until you sign out.

Who else sees it

Nobody. It is never sold, rented, shared or handed to a third party for any purpose. There is no advertising on this site and no arrangement under which there could be. Two providers necessarily touch it in passing: Cloudflare, which hosts the site and the database, and the email provider that delivers your sign-in link. Neither is given anything beyond what is needed to do that, and neither is given your saved list.

How to delete it

Sign in, go to your list, and use Delete my account. One confirmation, and it is done immediately: your email address, your saved list and every sign-in token for it are removed from the database in the same request. There is no soft delete, nothing is flagged and retained, and there is no backup we would restore you from. The build's own self-test asserts that the row count across all three tables is zero afterwards.

If you cannot sign in and want your address removed, write to [email protected] from it.

Changes

If what is stored ever changes, this page changes in the same commit as the schema. It is not a summary of the policy — it is the policy.