Privacy — information and review status

Public pages and demo

The landing page and demo do not request your research records or store demo input in browser storage. Search inside the synthetic product demo filters fictional instruments locally. The separate Analyze a stock navigation search sends your query to the shared listing catalog; selecting a listing checks your session and preserves the instrument through registration when necessary. Hosting infrastructure may process requests; this is not a claim that no operational data is processed.

Optional first-party product analytics

Analytics is off until you allow it in Privacy choices. WickArc records allowlisted page, research and subscription events with server timestamps and a pseudonymous visitor record. Successful authentication may link that consented visit to your account, enabling an aggregate signup and activation funnel. This is pseudonymous personal data, not anonymous data. No third-party analytics vendor receives it.

Analytics never includes search text, ticker, hypothesis text, holdings, portfolio values, account numbers, trade instructions, private features or card details. Attribution uses coarse source/referrer categories and operator-registered campaign labels, not full URLs. Paid conversion comes from reconciled subscriptions, not checkout redirects; test mode is separate.

The browser stores only an allow/decline preference for up to 90 days and, after consent, an HttpOnly analytics cookie separate from authentication. Server visitor records and events expire 90 days after initial consent, with hourly bounded cleanup by the worker. Change or withdraw consent using Privacy choices; successful withdrawal deletes the linked analytics records. A failed deletion is shown for retry. Do Not Track and Global Privacy Control keep collection off. Operational logs and required account/billing records are separate from this optional analytics.

Restricted founder reports show aggregates, not individual journeys. Attribution cohorts below five visitors are withheld. Opt-in coverage, outages, browser restrictions and withdrawals mean these are not total visitor counts or guaranteed conversion statistics.

Acquisition attribution and cohorts

With analytics consent, acquisition records may contain allowlisted referrer domains, a coarse landing-page category, an actively published research-page identifier and a keyed digest of a valid referral code. Full referrer URLs, arbitrary query parameters and private research identifiers are not retained. Referral rewards remain separate from optional analytics consent.

Founder analytics reports signup-week/month cohorts, observed time to activation and later research engagement. Small groups are withheld. A return visit is not a claim of research quality, investment results or continued subscription. No email tracking pixels or device fingerprints are introduced.

Account and research data

Registration requests display name, email, and password through the existing authentication workflow. Signed-in research is workspace-scoped. This page does not invent retention periods, processor lists, data-sale policies, deletion guarantees, or legal bases.

Complete privacy notice pending owner review

The operator must approve controller identity, contact details, processing purposes, retention, recipients, user rights, and applicable jurisdiction before this page can serve as a complete privacy notice. Do not treat a landing-page implementation as privacy or legal certification.