Privacy Policy

The short version

Analog Ledger is operated by The Valor Fund Inc. Signing in stores a minimal account record - your email, and your name if you sign in with Google or Microsoft - so we can recognize you as a subscriber across devices. Payment and billing details are collected and held entirely by Stripe, our payment processor - never by us. We do not sell your personal information, and we do not use it for third-party marketing. You can permanently delete your account and everything associated with it at any time from the Account page.

What we collect

Free visitors: nothing. Every page reads from a public, unauthenticated data source, and no account or cookie is created.

Signed-in users: your email address, always. If you sign in with Google or Microsoft, we also receive your name and profile picture from that provider - we don't request or receive anything else about your Google or Microsoft account. This is stored in our own database, used solely to identify you as a subscriber and keep you signed in between visits.

How you sign in

You can sign in with Google, Microsoft, or by email. Email sign-in sends a one-time link to your inbox through our email provider, Resend - there's no password to create or store. Whichever method you use, signing in with the same account on a new device automatically finds your existing subscription; there's no separate restore process.

What Stripe collects

When you subscribe, your card details and billing address are entered into a secure payment form embedded on our own page, powered by Stripe.js. That data is transmitted directly to Stripe and never passes through or touches our servers - the same PCI compliance standard as being redirected to a page hosted entirely on Stripe's domain. Stripe's handling of that information is governed by Stripe's own privacy policy. You can manage your payment method or cancel anytime through the billing portal linked from your Account page, which is hosted by Stripe.

How we protect your information

All traffic to the site is encrypted in transit (HTTPS). Sign-in sessions use httpOnly, secure cookies that can't be read by client-side scripts. Your card and billing details are never transmitted to or stored on our servers at all - see “What Stripe collects” above. Access to our database is restricted to the systems and personnel who need it to operate the service. No security measure is perfect, and we can't guarantee absolute security, but we don't collect more than the minimal account record described above, which limits what there is to protect.

Who we share information with

We share the minimum information necessary with the service providers that run the site: Stripe (payments and billing), Resend (email sign-in links and account notices), Neon (database hosting), and Vercel (application hosting). Each is only given the information it needs to perform its function and is not permitted to use it for its own purposes. We may also disclose information where required by law - for example, in response to a valid court order, subpoena, or regulatory request. Other than these cases, we do not disclose your personal information to third parties.

Cookies and analytics

This site sets no advertising or tracking cookies. The only cookie in use is a strictly-necessary, httpOnly session cookie set when you sign in - it references your session in our database, can't be read or modified by client-side scripts, and contains no personal information itself.

We use Vercel Web Analytics to see aggregate traffic patterns - which pages are visited and where visitors come from. It doesn't use cookies: visitors are identified by an anonymized hash that resets every day and can't be linked to your account or across sessions. We can't identify you individually from this data.

Accessing or correcting your information

You can review the personal information we hold about you - your email, name, and subscription status - at any time from the Account page. If anything is incorrect (for example, a name pulled from Google or Microsoft) and you can't correct it yourself there, contact us and we'll fix it or explain why we can't.

Deleting your data

The Account page has a “Delete account” option that immediately cancels any active subscription and permanently erases your account record - email, linked sign-in methods, and session data - from our database. This can't be undone. It doesn't delete your Stripe customer record (Stripe retains billing history independently, for their own legal and tax obligations), but you're no longer identifiable to us afterward.

How long we keep your information

We keep your account record for as long as you have an account with us, so that a returning sign-in recognizes your subscription. If you delete your account, that record is erased immediately, as described above. We don't keep a separate copy once it's deleted.

Data we publish

Analog Ledger's research archive is published to public GitHub repositories as part of how the site demonstrates its own integrity (see the Transparency page). That data is about market activity, not about visitors or subscribers - no personal information is ever included in it.

Governing law

The Valor Fund Inc. is an Alberta corporation, and we handle personal information in accordance with Alberta's Personal Information Protection Act (PIPA) and other applicable Canadian privacy law. This policy is governed by the laws of the Province of Alberta.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices or applicable law. We'll post the revised version on this page and update the effective date above. Continued use of the site after a change takes effect constitutes acceptance of the update.

Questions

For anything about this policy, contact us at info@analogledger.com.