Privacy Policy
What we collect, how we use it, and exactly which third parties receive what. This inventory is built from the actual codebase and is kept in lockstep with our Apple App Store privacy label.
1Data we collect
| Data | Why | Apple category |
|---|---|---|
| Email address | Account, sign-in, billing, transactional email | Linked |
| Name | Traders Den profile (member-chosen display name) | Linked |
| Phone number (optional) | Lead form only, if voluntarily submitted | Linked |
| Password (hashed) | Account security (scrypt salt:hash, never plaintext) | Linked |
| Subscription status & Stripe IDs | Managing your subscription / access | Linked |
| Traders Den content | Messages, posts, DMs, avatars, bios, reactions | Linked |
| Watchlists | Tickers you save in the Den | Linked |
| Session cookie | Signed httpOnly cookie: email + expiry + preferences | Linked |
The final “Linked / Not Linked / Used to Track” determination for the App Store is confirmed in our data inventory (docs/apple-privacy-inventory.md).
2What we do NOT collect or do
- No advertising, ad IDs, or ad networks.
- No third-party analytics, product-analytics, or behavioral tracking SDKs.
- No crash-reporting SDK.
- No precise or coarse location, health, or biometric data.
- No cross-app or cross-site tracking on the site experience itself.
One exception, stated plainly: our ad landing page at /bootcamp uses the Meta and TikTok advertising pixels so we can measure whether our own ads work. Those pixels only run on that page, they receive standard pixel events (page view and button clicks), and they never receive your account details, messages, or subscription data. Everywhere else on the site is pixel-free.
3Third parties who receive data
| Third party | What they receive |
|---|---|
| Brevo (email delivery) | Your email address + message content (welcome, sign-in, password links) |
| Stripe (payments) | Your email + subscription metadata (once billing is enabled) |
| Anthropic / Claude (AI commentary) | Market data, headlines, tickers — NOT your account info |
| Upstash (database) | All stored records, as our hosted data store |
| Market & news providers (Massive, FRED, earnings & economic-calendar APIs) | Server-side data requests only — no user personal data is sent |
| Parqet CDN / TradingView (logos & charts) | Ticker symbols only — no user personal data |
4How we use AI
Some on-site commentary is AI-generated and always labeled as such. See How We Use AI for what is generated, what feeds it, and its limits.
5Retention, security & children
Retention: we keep account records while your account exists and for up to 24 months after it closes (billing records longer where tax and payment rules require). Traders Den content stays until you delete it or your account is removed. Lead-form submissions are kept until you unsubscribe or ask us to delete them.
Security: passwords are stored only as salted hashes, session cookies are signed and httpOnly, payment card details never touch our servers (Stripe hosts checkout), and access to production data is limited to the operator. No system is perfect; if we learn of a breach affecting your data we will notify you as the law requires.
Children: the site is for adults 18 and up. We do not knowingly collect data from anyone under 18; if you believe a minor has an account, email us and we will delete it.
6Your rights (CCPA / GDPR)
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. Wherever you live, we honor these requests at privacy@stockbabie.com:
- Tell you what personal data we hold about you (access / portability).
- Correct it if it is wrong.
- Delete it, along with your account, except records we must keep for billing or legal reasons.
- Unsubscribe you from marketing email (every marketing email also has an unsubscribe link).
We verify requests by confirming control of the account email, we respond within 45 days, and we never discriminate against you for exercising these rights. California residents: the rights above cover your CCPA/CPRA access, deletion, and correction rights, and since we do not sell or share data there is nothing to opt out of.
7Contact
Privacy questions: privacy@stockbabie.com.