Privacy policy
Effective 7 September 2026
1. Information we collect
Registration asks for a username and a password only. We store your username, a BCrypt hash of your password (never the plaintext), and the optional profile defaults you choose on the Profile page (the settlement delay and the income-tax band). No email, real name or payment details are collected.
Anything you create while signed in — portfolios, trades and your watchlist — is stored under your account. All of it lives in gzipped JSON objects in the site's private S3 object storage, read only by the site's own services.
2. Cookies and tracking technologies
The site sets no advertising, analytics or third-party tracking cookies, embeds no
third-party trackers and does not use Google Analytics. The only cookies are essential ones:
a CSRF-protection cookie, and, once you sign in, a session cookie
(giltiq_session) whose value is a signed HMAC token covering your session
identity — not a browsing profile.
3. How we use your information
We use the data to run the site: to sign you in, to save and show your portfolios, trades and watchlist back to you, and to keep the public market pages working. We do not send marketing communications, and we do not profile you for advertising.
4. How we share your information
We do not sell, rent or share your data with advertisers or any other third party. We share nothing with service providers beyond the site's own storage and hosting, and we disclose information only where the law requires it.
5. Affiliate links
Any partner links the site shows are marked rel="sponsored nofollow", and the
footer carries a commission disclosure only when a partner is actually configured. No partner
is configured today.
6. Security and data retention
Account data is protected with a BCrypt password hash, a signed HMAC session cookie and private S3 object storage that no third-party service reads. Your account data is retained only for as long as your account exists; the public market pages are generated from public market data and hold no personal information.
7. Your choices and deletion
You can have your data corrected or deleted at any time. To request a copy, a correction or the full deletion of your account and its data, open an issue on the project repository (github.com/jacksosa/ninja-2.0) and the site owner will action your request.
8. Children's privacy
GiltIQ is not directed at children under 13, and the site does not knowingly collect information from children — registration stores only the fields described above, whatever the registrant's age.
9. Changes to this policy
If this policy changes, the updated version is published on this page. Continued use of the site after a change means you accept the updated policy.