Privacy

Market Hub keeps the least it needs to show you your private dashboard and to let you comment. The public pages (markets, quotes, news, opinion, media) need no account and keep nothing about you.

The Media page shows Market Hub's videos with pictures kept on this site. Only when you press play is the video loaded from YouTube, at its address without cookies (youtube-nocookie.com); from then on YouTube, which is Google, sees your IP address and what you watch, as it would on its own site.

Those videos are uploaded to Market Hub's own YouTube channel with a tool of ours that uses YouTube API Services. Only the channel's owner uses it, signed in with the channel's own Google account. It does not ask you to sign in, and it does not read, collect or keep anything about you, about viewers or about anybody else's channel. What it sends to YouTube is our own videos, with their titles, descriptions, thumbnails and captions. The owner can take the tool's access away at any time on Google's security settings page, and the sign-in it keeps on the owner's computer is deleted with it. What you watch on YouTube is under the YouTube Terms of Serviceand the Google Privacy Policy.

To know how many people visit, every page loads a small script from Cloudflare Web Analytics. It tells Cloudflare which page was opened and the page that led to it, the kind of browser and device, the country, and how fast the page loaded. It sets no cookie and keeps nothing in your browser, and it is told nothing about your account: not who you are, and nothing of your stocks. Cloudflare sees your IP address when the script is loaded, as any server does. The analysis tools on their subdomains, and the Earnings Radar at earningsradar.app, count visits the same way.

The price charts on Today and on a quote's page, and the map on Markets, are widgets of TradingView: frames it fills with its own data. To show them, TradingView sees your IP address, the address of the page the widget is on and the symbol it shows. It says its widgets set no cookies. A widget is told nothing about your account.

What we keep

• From your Google account, when you sign in with it: your account id, name, email address and profile picture.
• If you make an account with an email and a password instead: the email address and the name you give, and a scrambled form of the password (a salted scrypt hash) from which it cannot be read back. We never keep the password as you typed it. We do not check that the address is yours, and we cannot send you a new password if you forget it. When you make the account, Cloudflare Turnstile checks that a person is asking: Cloudflare sees your IP address and details of your browser for that check, and we keep nothing of it.
• What you add: the tickers you hold with their number of shares and average cost, and the tickers you follow.
• If you choose to share your portfolio, and only then: the name you pick to be shown under, the tickers you hold with each one's share of the portfolio in percent, and the returns of those holdings. Signed-in members see that on the Community page. It never includes your name, email or picture, how many shares you hold, what you paid or what it is worth. It is off until you turn it on, and turning it off removes it at once.
• If you enter the monthly competition, and only then: the name you pick to play under, and the stocks you choose for the month with the share you give each one. Until the month starts nobody sees them; from then on signed-in members see that name, those stocks and weights and what the mix has returned, and the final standings of a month are kept. It never includes your name, email or picture, and it has nothing to do with the positions you hold.
• The comments you write under opinion articles. They are public, and they are shown with your first name: not with your surname, your email address or your picture. The comments you write in the competition's discussion are seen by signed-in members only, with the name you play under (your first name, if you have none).
• If you send an article to Opinion, and only then: its title, summary, text and sources and the name you sign it with, kept together with your account id, your name, your email address and whether you sign in with Google or with a password, so the editor knows whose it is and can answer you. Nobody else sees it. If it is published, the article shows the name you signed it with and nothing else of you.
• A session cookie, signed by us, that keeps you signed in for up to 30 days. No advertising or tracking cookies.
• In the Market Hub app for phones, which is this same private area with this same account: nothing more with us. On your phone the app keeps your sign-in and nothing else: a token signed by us, good for up to 30 days, with your name and email address, in the phone's own keychain. Signing out removes it. Nothing of your stocks is kept on the phone, and the app carries no advertising or analytics kit. It asks you for no permission on your phone: not your location, your contacts, your photos, your camera or your microphone. Signing in with Google there goes through your phone's browser, and making an account shows the same Cloudflare check as here.
• In your browser only, not with us: on the Watchlist page, which stocks you chose to see (the ones you looked up there among them), how many at a time and how the charts are drawn. And on the page where you write for Opinion, the article you are writing, until you send it. Clearing the site's data in your browser removes it.
• Nothing about you in the analysis tools. Fundamentals Lab, the Earnings Radar and the Playground, on their own subdomains, read the same session cookie only to check that you are signed in; they do not store your name, email or stocks. A board you make in the Playground, and what you wrote to make it, live in the page that shows them and nowhere else: reloading or closing the page clears them.

What we do with it

Show it back to you, and to other members only what you chose to share. To value your positions, the server asks the market data provider for the prices of your tickers; it does not send your name, email, share counts or costs.

The sentences that read your portfolio back to you are written by a language model run by Anthropic. To write them, the server sends it what your portfolio is made of and how it has moved: the tickers, each one's share in percent, and their returns. It does not send your name, email or account, how many shares you hold, what you paid or what it is worth, and we keep nothing of what the model writes. Nothing is sold, and we do not connect to any broker.

On the Watchlist page, the server asks the market data provider for the prices of the stocks you look at and for what analysts estimate of each. The sentences under a stock's figures are written by the same language model: for them the server sends that one ticker with its market figures, which are the same for everybody, and nothing else. Not who asks, and not the rest of your list or anything you hold.

In the Playground, what you write in the chat is sent to the same language model, together with the board as it stands (the views on it and their tickers) and the last few messages of that conversation, so that it can change the board. It does not send your name, email or account, and nothing of your portfolio or your lists. We keep neither what you write nor what the model answers, and neither goes to our logs. To draw a view, the server asks the market data provider for the prices of its tickers.

Where it lives

In a Google Cloud Firestore database in the European Union (Belgium region), accessible only to the service. The articles sent in for review are kept apart, in a Google Cloud Storage bucket in the same region that only the service and the editor reach.

Your control

On Account and data you can see and download everything kept about you, and delete your account: that removes it from the database at once, takes your portfolio off the Community page, removes your entries to the competition and empties every comment you wrote. In a month of the competition that has already ended, your line stays where it finished, with no name on it. You can also delete any comment of yours where it stands, and take back an entry until its month starts. An article you sent in can be taken back onthe page you sent it from, and deleting your account removes the copies kept for review. An article of yours that was already published stays published until you ask us to take it down.