Privacy

Nothing, unless you choose to sign in. There is no sign-up form, no newsletter, no comment field and no contact form. The company filter in the terminal is the one box you can type into, and what you type never leaves your browser — it filters a list that has already been downloaded.

The site sets no cookies. There is no analytics of any kind: no Google Analytics, no Vercel Analytics, no tag manager, no pixel, no session recording.

Signing in is optional and the terminal works without it. Equinor, DNB and Telenor are open to everyone; the rest of the companies need an account. If you never sign in, everything above is the whole story.

This is the only part of the site that stores anything about you, so it is worth being exact about what.

Signing in hands you to Google's usual consent screen. Google tells us your email address and nothing else — no contacts, no calendar, no Drive, no profile beyond that. There is no password to store, because Google does that part and we never see one.

Your email address is held in an accounts table so the site can recognise you on your next visit. Beside it, the companies you have saved: a ticker and the date you saved it, nothing more. Those two things together are the whole record.

The line that holds is between saving and looking. Saving is deliberate — you pressed a button and asked us to remember. Nothing about which companies you merely opened, in what order, when, or for how long is recorded anywhere. Unsaving deletes the row.

Your browser holds a session token in localStorage, under a key beginning sb- — that is what keeps you signed in between visits, and it is the one thing this site stores in your browser. Signing out removes it. You can see it, and delete it, in your browser's developer tools at any time.

That token is sent to this site's own API when it loads company data, so the server can tell whether you are entitled to the full read or the free three. It is checked and discarded; it is not logged.

Three, and each is here for a stated reason rather than by accident.

Vercel serves the site and keeps ordinary server request logs — your IP address, the page requested, a timestamp and your browser's user-agent string. That is standard for any web host and happens before this site's own code runs. Those logs are governed by Vercel's privacy policy, not this one.

Google Fonts serves the typefaces from fonts.googleapis.com and fonts.gstatic.com, which means Google receives your IP address and user-agent on every page load, signed in or not. Self-hosting the font files would remove it, and is the obvious fix if this matters to you.

Supabase hosts the sign-in and the accounts table described above. It is reached only if you sign in — a signed-out visitor's browser still loads its client library, but makes no request to it.

The site is open source. If something here looks wrong, the code is the record — raise an issue on the repository.