Privacy
Last updated 2026-10-16.
Portfolio Lab is a research tool. You can use every part of it — backtests, factor attribution, projections — without an account and without giving up any personal information. An account is optional and does exactly one thing: sync the portfolios you choose to save across your devices.
Without an account
Portfolios you save are stored in your browser (localStorage) and never sent to us. The ticker list you analyse is sent to the pricing API to run the calculation and is not logged or retained. Our hosts (Vercel, Render) keep short-lived standard request logs — IP address, timestamp, URL path — which they rotate automatically. The only analytics is Cloudflare Web Analytics: privacy-preserving, cookieless page-view counts with no cross-site tracking and no personal data collected. There are no advertising cookies, tracking pixels, or other third-party trackers.
With an account
Sign-in is a one-time email link (no password). If you create an account we store:
- Your email address — used only to sign you in and, if ever needed, to contact you about the service. Never sold, never used for marketing.
- The portfolios you save — the allocation text you entered (e.g. “VTI 60, BND 40”), the name you gave it, and its settings. We do not store account numbers, balances, brokerage links, or your real holdings — only the model allocation you typed in.
This data is held in a Supabase (PostgreSQL) database with row-level security, so your rows are readable only by your logged-in session. It is not shared with anyone and is not used for any purpose beyond showing you your own saved portfolios.
Deleting your data
On the Account page, “Delete account and all data” permanently removes your login record and every portfolio tied to it, immediately. Signing out on its own does not delete anything. Portfolios stored only in your browser are cleared when you clear site data for this domain.
Children
The site is not directed to children under 13 and we do not knowingly collect their data.
Changes & contact
If this policy changes materially, the “last updated” date above will change. Questions or a data request: reach the author via GitHub @alev-12. See also the terms of use.