The short version
You can read the entire site without an account and without giving anything up. An account holds your email address and the markets you save. Payments go through Stripe and card numbers never reach this service. Nothing about you is sold, and there is no advertising on this site.
What is collected, and when
Reading the site: nothing that identifies you. Page views are counted with Google Analytics, which sets its own cookies and records a coarse location and device type. Business figures sent to analytics are banded rather than exact, and no company name, email address or report input is ever included.
Creating an account: your email address, and the times you sign in. There is no password to store. Sign-in is handled by Supabase.
Saving markets: the markets and service lines you watch, and any private note you attach to them. Notes are visible only to you.
Buying a report: a Stripe session reference, what you bought, and when. Card details are entered on Stripe's checkout and are never seen or stored here.
Answering a community question: your answer, and a cookie that identifies the browser rather than the person — you do not need an account to answer. IP addresses are never stored as addresses; a salted, truncated hash is kept on an audit record to make abuse detectable.
What is deliberately not collected
The numbers you enter for your own market read — your ticket, crews, footprint and goal — are not stored on any server. They travel in the report's own web address, which is why the report is reproducible from the link alone. Close the tab and nothing about them remains here.
Card numbers, bank details and passwords are never collected, because the service has no mechanism to receive them.
Why each of these is held
To run the thing you asked for: to sign you in, to show you the markets you saved, to prove you bought a report so you can download it again, and to keep community answers honest. Analytics is used to understand which pages are read and where readers stop — not to profile anyone.
Who else sees it
Four processors, each doing one job: Supabase (accounts, saved markets, community answers), Stripe (payments), Vercel (hosting), Resend (transactional email), and Google Analytics (page measurement).
No one else. Your information is not sold, rented, traded or provided to advertisers or data brokers. It may be disclosed if the law requires it.
Email you receive
Sign-in links, when you ask for one. A one-time welcome message after you first save a market. The report you asked to have emailed. There is no newsletter and no marketing sequence; if that ever changes it will be something you opt into.
How long it is kept, and deleting it
Account data is kept while the account exists. Purchase records are kept as long as the entitlement they prove — a report you bought stays downloadable, which means the record of it stays too.
Ask, here, and your account and everything attached to it — saved markets, notes, community answers, email history — is deleted. That deletion is a single operation and it cascades; nothing is retained in a shadow copy.
Children
This is a business tool and is not directed at children. No information is knowingly collected from anyone under 13.
Changes
This policy will change as the service does. Material changes will be noted here with a new date rather than made quietly.