What we collect

Usage

• Which page you opened (the page's name, such as /trades/[id], never the specific trade or any query text).
• That you signed in, created a view, opened or closed a trade, ran an AI parse, committed an import, saved a journal entry or downloaded an export. Only the kind of action is recorded, not its content.
• A random session id made by your browser (it resets after 30 minutes of inactivity and is not stored in a cookie) so one visit's events can be grouped.
• The time of each event, recorded by the server.

Errors

• When something fails: the kind of error, the first line of its message, the code location (a stack trace of file and function names), the page or API route, your browser and window size, and the app version.
• Email addresses, tokens, passwords and similar secrets are removed from messages before they are stored, and SQL text and values are cut off.

What is never recorded

• The contents of your requests: trade details, prices, quantities, notes, thesis or journal text.
• Your sign-in token or cookies.
• Your IP address. It is used in memory to limit abuse of the reporting endpoints and is not stored.
• Keystrokes, screen recordings or anything about other websites you visit.

One related note: text you submit to the AI parse feature is sent to Anthropic to be turned into a structured view.

Price data and the weekly email

• To draw a trade's replay chart and to build the weekly performance report, the app asks market-data providers (Alpaca and Tradier) for prices. What is sent is the ticker or option contract, the bar size and a date range: never your quantities, the prices you paid, your notes or who you are.
• The weekly and monthly reports are also sent by email, but only if you turn that on. They go to the address you signed in with and to any extra addresses you add under Performance or on an account (an account's own report goes to the addresses you give that account), through an email delivery service, and list trade names, symbols and profit-and-loss figures, so they stay in those inboxes and with that service. Extra addresses are not verified: add only people who agreed to receive them, and each message to them says it came from your account. It is off by default, and you can pause or remove an address, or turn the emails off, at any time.
• Everything in the report beyond your real trades is a hypothetical what-if computed from market prices. The report is stored with your account so you can read earlier weeks.

Who can see it, and for how long

• Admins and support staff can see usage and error data, and can read your portfolio, performance and activity. They cannot change your trades or sign in as you, and every look at your data is written to an audit log that is never edited or deleted.
• Individual usage events are deleted after 90 days and individual error reports after 180 days (the current defaults). Daily per-user counts, grouped error summaries and the audit log are kept longer.