VolModel
Create free account

Privacy Policy

The short version. We hold your email address, a record of which days you used the site, and, if you pay, the identifiers Stripe gives us for your subscription. Separately, Microsoft Clarity records how visitors use the pages, for us to watch; Microsoft holds those recordings, not us. There is no advertising. The list below is the whole list of what we hold, taken from the database itself.

  • Your email address. It is your identity here and the only way to sign in, because sign-in is a one-time link sent to it. It is also how we would tell you about a change to these terms or to a price. We also record when you created the account.
  • Which days you used the site. One row per account per day. It is a date, not a time, so it can answer “did people keep using it” without becoming a record of the hours you work. It is what tells us whether the product is worth continuing.
  • Your subscription. If you pay, we store the customer and subscription identifiers Stripe gives us, the plan, and its status. We never see, receive or store card details; they go from your browser straight to Stripe.
  • Your API keys, hashed. A key is shown to you once and stored only as a SHA-256 hash plus its first few characters. We cannot recover a key; we can only revoke it.
  • Your watchlist, if you make one: a list of ticker symbols against your account.
  • Sign-in safeguards. When someone asks for a sign-in link we count requests per email address per hour, so the form cannot be used to flood an inbox; when a link is used we record that, with the email and the time, so it cannot work twice. These hold the address even if it has no account.
  • Support lookups. If we look up your account to answer a request, the lookup is logged with your email address and the date.

No password (there is none to steal). No name, address, phone number or date of birth; we never ask for them. No card or bank details. No brokerage connection, no positions, and no record of anything you trade. There is no server-side session store: being signed in is a signed cookie in your browser, which is why “sign out everywhere” works by invalidating every cookie at once rather than by deleting rows about you.

Three cookies of our own, all Secure and SameSite=Lax. Only the first says anything about who you are.

  • Your session (__Host-evw_session), set when you sign in and kept for 30 days or until you sign out. It holds a signed session token and nothing else, and it is HttpOnly, so no script on a page can read it.
  • Your plan (__Host-evw_tier): the single word free or paid, set when you sign in and kept up to date as your plan changes, so that pages which are the same for every visitor can show you the right buttons. A script on the page reads it, which is why it holds nothing that identifies you. It grants nothing either: what you can see is checked against your account on every request. It is cleared when you sign out.
  • Your board view (__Host-evw_board_view): simple or table, set when you switch the board between its two views so it opens the way you left it, signed in or not. It is kept for 365 days and holds nothing else.

Microsoft Clarity (see below) sets its own: _clck and _clsk on this site, which tell it that two page views came from the same browser (kept for up to a year and a day respectively), and cookies on Microsoft’s own domains, clarity.ms and bing.com.

  • Cloudflare: hosting and the database. Everything above is stored there.
  • Stripe: payments. They receive your email and your card details; we receive identifiers and a status back.
  • Resend: sends the sign-in emails, and therefore handles your address.
  • Cloudflare Turnstile: a bot check on the sign-in form, so that nobody can use our sign-in form to send floods of email.
  • Sentry: error reports, so we find out when a page breaks. Reports are scrubbed before they are sent: email addresses are stripped by pattern and credentials are redacted by key name.
  • Microsoft Clarity: records how visitors use every page (clicks, scrolling, mouse movement and the layout of the page) so we can see where the site confuses people. It sees no text, including your email address: every piece of text on the page and everything typed into a form is hidden from it before anything is sent. Microsoft keeps the recordings under its own retention rules.

We do not sell your data, and we do not share it with anyone beyond the processors above, except where the law requires it.

These processors store and handle your information mainly in the United States and the European Union, so if you live anywhere else it leaves your country. We use them only on terms that require them to protect it.

  • Account data, for as long as the account exists.
  • Usage dates, for as long as the account exists. They are how we measure whether people keep using the product.
  • Billing records for as long as tax and accounting law requires them to be kept, which is longer than the account may last.
  • Sign-in links expire after 15 minutes. The sign-in safeguards above are deleted once they expire, at the next sign-in by anyone.
  • Support lookups, as part of our admin audit log.

Email us and you can get a copy of what we hold about you, have it corrected, or have your account and its data deleted. Deletion removes the data rather than hiding it. What survives is the billing record we are required to keep, and the log of any support lookup. We will not make you jump through hoops for any of this.

We deal with these requests the same way wherever you live. If you think we have got something wrong and we have not put it right, you can complain to the privacy or consumer protection regulator where you live, for example a data protection authority in the EU or the UK.

Questions about this policy go to support@volmodel.com.