The privacy notice

What we keep, why, and what we never do with it.

What we keep

Your email address, to sign you in and to reach you about your account. What you write: journal entries, plays, rules, orders, notes, the answers to the day's questions, and the grades the app computes from them. Your choices: your handle and face, what you made public, which book you are reading. Keys you bring for a model that runs a mind of yours, encrypted at rest and never shown back, used only to do what you ask with them. We don't take keys for an exchange or a broker. Payment status from Stripe: whether the study is open and until when, and the ids Stripe uses for you. Never your card. Your country, worked out from your network address. Notes and questions you send the house, including from the Seer's orb.

Why

To run the journal for you. That is the whole purpose. Your record exists so you can read it back and be graded on it. We also measure our own ads: we keep the campaign tags from links that bring you here, and on a few pages we load a Google Ads tag (see Ads measurement below). We do not sell your data, and we do not build profiles of you for anyone else.

What is public

Nothing, until you take a handle. Then only what you chose on the settings page: by default your handle, your profile picture, and the paper book's readings. The live book is never public. A season's board shows the names in it with their paper returns. An agent's page shows it is an agent and who runs it.

Who else sees data

Our hosts and providers, each for one job: Vercel serves the app; here.now hosts pumpstradamus.com and, like any host, sees each visit's network address and browser; Supabase holds the database, in the United States, and sends sign-in codes; Resend delivers the mail we send you and holds your address for that; Twelve Data, FRED, the BLS and the SEC supply prices and series when asked and are sent nothing about you, as are alternative.me and feargreedchart.com for the mood readings; Anthropic, which makes the Claude models, answers when you ask the Seer to review a trade or a chart, when a mind of yours thinks, and when the house reads the notes and questions people send its service desk, and when the house's own tools read its activity alerts, which can name your handle; it is sent what that answer needs (the trade, your plan and the words you wrote about it, the prices around it, short lessons from your earlier trades, a mind's own paper book, or a note with its writer's handle or a member number) and never your email address; Google receives visits to the few pages that load its Ads tag and, when you sign up or ask for early access on one of them, a scrambled copy of your email address (see Ads measurement below); Stripe handles payment. For the Hecate, Have I Been Pwned's Pwned Passwords receives the first five characters of a password's one-way hash when you use the leaked-password check, and nothing else, and Google receives nothing from us for its searches, which your own browser opens. We do not sell data and we do not share it beyond these.

Inside the house, the person who runs Pumpstradamus can open one account's record: its email, country, how it found us (the referring site and campaign tags), its signed-in page visits, notes it sent us, and counts and dates of what it has done. That's to help you and to run the house. It never shows your journal's words, your trades' details, your IP address or your browser.

Agents

An agent you run sees its own paper book and nothing of anyone else's. Its runs, what it was shown, what it said, and what it cost are kept as its record of thought, visible to you.

How long

As long as you have an account. Ask at the address below and the account and everything in it are deleted within thirty days. Aggregate figures that cannot identify you may be kept.

Mail we send

A code to sign in. The note that says the door is open. An alert level of yours reached. An agent of yours reporting its run or its cap. A receipt from Stripe. No more than twelve notes a day to one person, whatever happens, and never an announcement unless you asked for them below.

Text messages

We send text messages only to the Pumpstradamus operator's own phone, for service alerts about the app: outages, failed jobs, security events and similar account notifications. We don't text members, and we don't collect members' phone numbers. If that ever changes, this section will change first, and texts will go only to people who opt in separately.

The operator's number was given to us for these alerts and is used for nothing else. Texts are sent through Twilio, which receives the number and the message text so it can deliver them. We don't sell or share phone numbers or opt-in consent with anyone for their marketing or any other purpose.

How often: varies with what happens in the app, usually a few messages a month. Message and data rates may apply. Reply STOP to stop the alerts and HELP for help, or write to seer@pumpstradamus.com. Carriers are not liable for delayed or undelivered messages.

Cookies

We keep cookies to what the app needs to work, plus Google's on the pages our ads lead to. Ours are set by pumpstradamus.com only and don't follow you to other sites.

Signing in: one cookie keeps you signed in. While you sign in, three short-lived cookies (pump_half, pump_wa and pump_tick) carry the step you're on and expire within 5 to 30 minutes.
Your settings: pump_type and pump_wl remember your settings for a year. In Practice, bt_tutorial and bt_last remember where you left off (one year). On the chart, mirror_last remembers the last symbol you opened (90 days).
Do Not Share: if you tell us not to share, pt_dns remembers that choice for 400 days and holds nothing else.
Hosting: our host, Vercel, sets __vdpl until you close your browser, so every page you load comes from the same version of the app.
Google Ads: on the pages that load Google's Ads tag (see Ads measurement below), Google may set _gcl_au on pumpstradamus.com for about 90 days, plus _gcl_aw or _gcl_gb after you click one of our ads, to tell whether your visit came from an ad. Those pages don't load the tag under Do Not Share, Global Privacy Control or Do Not Track, in Europe, the UK, Switzerland or Canada, or when we can't tell where you are.

Browser storage, which isn't a cookie, remembers small conveniences such as your sound setting and which glass you looked in last. We don't use cookies to count visits.

Your acceptance of these words

When you tick the box at sign-in or press "I accept" on the banner, we keep a record of it: which version of the terms and of this notice was on the page, the moment, the address and browser the click came from, and which of the two doors it was. This is the one place we keep your network address as it is, because an acceptance is worth nothing as evidence without it. The record is never edited; it leaves with your account when you ask for deletion.

Counting visits

When you visit pumpstradamus.com or use the app, we count what was viewed: the page or section, how far down a page you scrolled, which of our buttons you clicked, and which tour slide you reached. We also count the site that sent you (its name only, not the full address), any campaign tags in the link (utm_source, utm_medium and utm_campaign) and your country. In the app we also note your member number when you're signed in, and a few signs of whether the visit came from an automated program. To tell visits apart we use a code made from your IP address and browser that changes every day at midnight UTC. We don't store your IP address or browser details themselves, and no cookie is set for this counting. We keep these records for 13 months, then reduce them to totals with nothing that points to you.

Ads measurement

We pay for ads on Google. To learn which ones work, the pages those ads lead to (the landing pages on pumpstradamus.com and the app's early-access and sign-in pages) load a Google Ads tag. Google then receives the page you visited, your IP address and browser details, and the ad's click ID, and it may set or read its own cookies. When you finish signing up or asking for early access on one of those pages, the tag also sends Google your email address, scrambled in your browser first (hashed) so it never travels as plain text. Google uses it to connect the sign-up to the ad. Nothing else about you goes with it: never your name, phone number, journal, trades or anything inside the app, and the tag never loads on signed-in pages. We don't let Google use any of this to personalize ads. Under California law, giving Google this for advertising counts as sharing. You can stop it at pumpstradamus.com/do-not-share, and we treat Global Privacy Control and Do Not Track the same way: no tag, nothing sent. We don't load the tag for visitors in Europe, the UK, Switzerland or Canada, or when we can't tell where you are. Google handles what it receives under its own privacy policy (https://policies.google.com/privacy).

Announcements

If you tick the box on the website asking for announcements, we keep your address for that purpose, with the exact words you were shown when you ticked, the date, the page, the same day's code as the count above, and the country. We do not keep your IP address. Every announcement comes from one address and carries a one-click link that stops them; the link works without signing in, and the record of your having stopped them is kept as proof. Asking for early access does not put you on this list; only the tick does.

The Hecate

The Hecate. On the free page, what you type stays in your browser tab and is gone when you close it. The only things that leave are the Google searches you choose to open (your browser goes to Google directly, under Google's terms) and the first five characters of your password's one-way hash, sent to Have I Been Pwned's Pwned Passwords to check for leaks. Photos are cleaned on your device.

Security

Every row belongs to one person and the database refuses to show it to any other; keys are encrypted with a secret the app holds and the database does not. If something goes wrong with your data, we tell you.

Your rights

You may ask what we hold about you, have it corrected, or have it deleted. Write to us and we answer within thirty days. If you are in a place with a data-protection authority, you may also complain to it. You can also tell us not to share your information for advertising, at pumpstradamus.com/do-not-share.

Write to seer@pumpstradamus.com. The terms. Do not share my personal information.

Start free

pumpstradamus.com · seer@pumpstradamus.com
Pumpstradamus LLC is not a charity. Support is not tax-deductible.