Privacy Policy

Effective: July 28, 2026 (version 1)

These documents are undergoing legal review and may be updated; material changes will be noted here with a new effective date.

This Privacy Policy describes what information Weekly Monitor (“the Service,” operated by Andrew Botvinik) handles and — mostly — what it deliberately does not. The Service was built local-first: it has no accounts, no user database, and no advertising, so the honest summary is short.

The short version

Your portfolio never leaves your browser. Holdings, cost basis, decisions, theses, and settings are stored in your browser's local storage on your device. There are no accounts and no server-side copies.
We run no analytics, no advertising, and set no cookies.
What our server sees: the ticker symbols your browser asks it to grade, and your IP address (used transiently for rate limiting and present in standard hosting logs) — neither is linked to an identity or used for profiling.

1. Data stored on your device only

When you add holdings, record decisions, write theses, or change settings, that data is written to your browser's local storage. It is not transmitted to or stored on our servers. Backups are created on your device: either as a code you copy or a file your browser downloads, optionally encrypted with a passphrase using AES-256-GCM. The passphrase never leaves your device; we have no ability to read or recover an encrypted backup.

2. Data that reaches our server

Ticker symbols. To grade your holdings, your browser sends their ticker symbols to our server. The Service processes them in memory, cached briefly (minutes) without any user identifier; like any web request, the request URLs (which contain the symbols) can appear in the hosting provider's standard logs (see §4). The Service itself keeps no record tying symbols to you.
IP address. Like every web server, ours sees your IP. We use it in memory for per-IP rate limiting (counters reset within minutes) and it appears in our hosting provider's standard request logs (see §4). We do not use it for tracking or profiling.
Nothing else. No names, emails, account credentials, or payment details exist anywhere in the Service.

3. Cookies, analytics, tracking

The Service sets no cookies and runs no third-party analytics, advertising, or tracking scripts. Fonts are self-hosted, so pages load no third-party resources at all — your browser talks only to the Service's own host. A service worker caches the app's own files on your device so it loads fast and works as an installed app; that cache contains application code, not your data, and lives on your device.

4. Third parties we rely on

Hosting: the Service runs on Render (render.com), fronted by Cloudflare. Both see standard request metadata (IP, user agent, URLs — note the URL of a grading request includes the ticker symbol being graded, so symbols can appear in standard hosting logs alongside your IP like any web request) as any host does, subject to their own privacy policies.
Market data providers (Yahoo Finance, CBOE, Finnhub, FRED, StockTwits, Stooq, and — when enabled — Financial Modeling Prep): our server fetches market data from them server-side. Your browser never contacts them, and they never see your IP or your holdings. Providers see only our server requesting public symbols — requests that mix all users' and the Service's own scheduled crawls.
Anthropic (AI commentary): scheduled market commentary is generated server-side from public web sources. No user data is included in those requests.

5. Data retention

We retain no personal data. Server-side caches are in-memory, unlinked to any identity, and expire within minutes to hours (and entirely on every restart). An append-only history of the engine's own signals (grades, signals, prices per covered stock) is committed daily for accountability, each entry timestamped at commit time — it contains only the engine's output on public stocks, never anything about users.

6. Your rights

Because the Service holds no personal data about you, requests for access, correction, or deletion generally have nothing to operate on — your data is on your device, under your control, and deleting it is as simple as clearing the app's local storage (Settings, or your browser's site-data controls). If you believe we hold personal data about you, or have any privacy question, contact us: support@weekly-monitor.com

7. Children

The Service is not directed at children and is intended for users 18 and older.

8. Changes to this policy

We may update this policy; the current version, with its effective date, will always be posted at this address. Material changes will be noted on the page.

9. Contact

Privacy questions or requests: support@weekly-monitor.com