Privacy

tradmap measures how the site is used so we can improve it — with first-party, cookieless analytics that store no personal data: no cross-site tracking, no selling data, no third-party analytics provider. Browsing the site sets no cookies; the only cookies we use are the strictly necessary ones that keep you signed in if you create an account (see Cookies).

What we collect

When you view a page we record the page path, a coarse referrer source (e.g. “search”, the referring site’s host, or a campaign tag), your device class (mobile / tablet / desktop), and a timestamp. For product features we record content-free usage events — which screener filters or chart tools were used — as fixed labels, never the values you type or search for. We also count product outcomes the same way: which kind of CSV was downloaded, whether a screen or alert was saved, and, when a page isn’t found, only the site section it was requested in (never the full address).

To tell real readers apart from automated bot traffic we also derive two coarse labels from your IP address at request time: your country and whether the network is a datacenter or a regular internet provider. The lookup happens locally against an offline database and the IP address itself is discarded immediately — it is never stored. (IP geolocation by DB-IP, used under CC BY 4.0.)

What we do not collect

• No analytics or advertising cookies — measuring usage and browsing the site anonymously store nothing on your device. (Accounts use strictly necessary session cookies — see Cookies.)
• No raw IP address is ever stored. To count visits we truncate your IP, combine it with your browser’s user-agent and a rotating server secret, and store only a one-way hash. The hash rotates on a rolling window (roughly every 90 days), so you can’t be tracked over the long term and it can’t be reversed to identify you.
• No names, emails, or other personal identifiers, no precise location, no cross-site or cross-device tracking, no advertising profiles.
• No free text — nothing you type is ever stored, with one narrow exception: if your search input exactly matches a public stock ticker symbol (like NVDA), we record that ticker was searched — anonymously, with no link to you. Anything else you type is discarded and only counted as "a search happened". Filter settings are recorded as fixed category labels, never your typed values.

Cookies

Browsing tradmap anonymously sets no cookies. If you create an account and log in, we set two strictly necessary cookies so the site can keep you signed in:

• tm_session — your session token. It is HttpOnly (not readable by page scripts), sent only to tradmap, marked Secure over HTTPS, and expires after 30 days.
• tm_auth — a small flag telling the page you are signed in so it can show your account menu. It holds no personal data and grants no access on its own.

These are essential to the account feature and are not used for analytics, advertising, or tracking — so they need no consent banner, though you agree to them when you create an account. Logging out deletes them, and if you never create an account neither cookie is ever set.

Accounts

To create an account we ask for an email address and a password. We don’t accept addresses at throwaway-inbox services (we check against a public list of disposable email domains). One mailbox holds one account: spellings that reach the same inbox — dots, a +tag, or a provider’s alias domain such as googlemail.com — count as the same address.

To slow down automated signups, an account may be flagged at signup when several accounts are created from the same network within an hour, or when the form is sent unusually fast. We store only the reason (“burst” or “fast-form”) with the account — the network address is held in memory for at most an hour and never stored. A flagged account can save screens once it has confirmed its email address.

Email

We email you only if you have an account, only in the cases below, and never for marketing:

• Confirming your address — when you sign up, we email a link that proves the address is yours. It works once and expires after 48 hours; we store only a one-way hash of it, and you can ask for a new link on your account page (a few times a day at most). Until you confirm, we send that address no alerts and no security notices, because it might belong to someone else. If your daily alerts were on before we started asking for confirmation, we email you the confirmation link instead of the alert — at most once every 90 days — and your alerts stay paused until you confirm. Signups from disposable-address services (inboxes that vanish after a few minutes) are refused.
• Password reset — only when you ask for one on the reset page. The email holds a link that works once and expires after 60 minutes; we store only a one-way hash of it, never the link itself. Setting a new password through it signs your account out everywhere else. The reset page answers the same way whether or not an account exists for the address you enter.
• Daily screen alerts — only for a saved screen you have turned the daily email on for, only to a confirmed address, and only on days its list of stocks changed. Every alert email has an unsubscribe link that turns off that screen’s email (mail apps that support one-click unsubscribe can do it for you); you can also switch any alert on or off on your account page. If the receiving mail server refuses your address on three alert emails in a row, we turn your alerts off. The saved screen stays saved either way, and deleting your account stops all alerts.
• Security notices — short messages to your confirmed address when something important happens to your account: your password was changed or reset, someone asked to change your account’s email (and later, that it was changed), or your account was deleted. If someone signed in to a different account tries to move it to your address, we send you a heads-up and change nothing. Notices hold no links that act on your account.
• Changing your email — when you ask to change your address on your account page (this needs your current password), we email a link to the new address. Your address changes only when that link is opened and confirmed with your password. It works once and expires after 24 hours, and confirming it signs your account out on every other device. Setting a new password cancels a pending change. Disposable addresses are refused here too.

Our emails carry no tracking pixels and no click-tracking redirects: every link goes straight to tradmap. Ordinary links in alert emails carry only a campaign tag saying which kind of email they came from, so our cookieless analytics can count those visits without tying them to you. The unsubscribe link is the exception: it carries your account id and that screen’s id, plus a signature, so it works without signing in. It is used only to switch that one alert off.

To stay within our sending limits we keep a send log: for each email, the account it was for, its kind (for example “password reset” or “screen alert”), the time, whether it was sent, and, if it failed, a short error reason with any email address removed. The log never stores your email address or the message. (The notice that your account was deleted is logged with no account at all.) Entries are deleted after 90 days, and they lose the link to you if you delete your account.

Email is sent through our Google Workspace mailbox, so Google processes your address and the message as our service provider in order to deliver it.

How long we keep it

Detailed measurement events (page-speed samples, error signals, which page modules were visible, clicks on labeled controls, and the anonymous search counters) are deleted after about 90 days; only aggregate statistics survive. Basic anonymous page-visit counts and the product-outcome counts above (downloads, saved screens and alerts, not-found pages) are kept longer for long-term trends. Account data lives until you delete your account, with one exception: if we emailed you a confirmation link when you signed up and the address is never confirmed, the account is deleted 30 days after signup (your account page shows the date). The email log is deleted after 90 days (see Email).

Deleting your account

You can delete your account yourself on your account page; it asks for your password first. Deleting removes your account, your saved screens and their alerts, every sign-in, and any open reset or confirmation links. Send-log entries stay until their 90 days are up but lose their link to you. Our analytics never held your account id — only the date you signed up, as an anonymous cohort — so there is nothing there to remove. If your address was confirmed, we send one last notice that the account was deleted.

Your controls

We honor the Do Not Track and Global Privacy Control browser signals — if either is set, we record nothing. The analytics data lives in a separate system from the product, isolated from any account data.

Last updated 2026-10-12. Informational only — not financial advice.