Your research belongs to you.

What is encrypted

Your private candidates, watchlists, journals, balances, alerts, news notes and forecasts are encrypted in your browser using AES-256-GCM. A key is derived from your vault password using PBKDF2-SHA256 with 600,000 iterations and a random salt. The key is not extractable through the Web Crypto API and is held in memory while the vault is unlocked. Each save uses a fresh random encryption nonce.

The application sends encrypted vault contents to its server. It does not send or save your vault password or encryption key. There is no admin vault viewer, impersonation endpoint, or password recovery key.

What is not encrypted

ChatGPT handles sign-in and supplies an account identifier and email to the server. The application uses the identifier to associate the encrypted vault and membership with the correct account. Vault size, revision, update time, membership state and published articles are not encrypted. The owner’s email is used only to recognize the administrator. The admin dashboard does not list member identities.

Traffic counts without visitor profiles

Application analytics stores daily page-view totals by page using UTC dates. It does not store names, email addresses, IP addresses, referrers, device identifiers, session cookies, or individual navigation trails. Counts can include reloads and bots; they are not unique visitors. The hosting and sign-in providers may maintain their own operational and security logs under their policies.

Embedded market and news panels

The public dashboard embeds TradingView market and news widgets inside sandboxed frames. TradingView supplies this content directly and can receive connection information such as IP address under its own privacy policy. The application does not store that information, and the frames are isolated from your private dashboard. These embeds are for display and are not scraped or used as inputs to an automated prediction engine.

Your password and device matter

Use a strong, unique vault password and save it somewhere safe. There is no password reset that can recover encrypted records. An unlocked vault is readable on your device: anyone with access to that device, malicious browser extensions, or compromised site code could access it. Browser-side encryption protects stored contents; it does not make a malicious or compromised application harmless. This implementation has not received an independent security audit.

Existing records and backups

If you used the original version, creating your encrypted vault imports your existing records in your browser and removes their plaintext copies from the active database after encrypted saving succeeds. Historical provider backups may retain older plaintext versions until provider retention expires. New visitors only use encrypted storage. Downloaded encrypted backups still require the same password and account context.

Public content is separate

No private records are automatically published. The owner authors public research separately and chooses its access level. Published titles and previews may be visible before sign-in; restricted full articles are withheld by the server.

Payments

Payments are not active. The planned checkout is wallet-only, without a card-number form on this site. A future payment provider will process the information it needs to charge customers, and the site will need subscription status to grant paid access. Wallet payments do not eliminate all billing metadata.

About this service

The tools support research and recordkeeping. Shared market/news embeds are available; quote timing depends on the provider. No automated order execution is active. Forecasts are experimental and are not guarantees.