UPDATED OCTOBER 1, 2026

Your data in Market Compass.

This policy explains how Indicator Hub handles information when you use a free Market Compass account. We use your email to provide account access. Optional product updates require a separate choice; creating an account alone does not enroll you in marketing.

What is stored

Until you delete it, a verified free account stores your email address, account identifier and creation and verification dates in Upstash. Resend processes your email address and sign-in message to deliver your code. Netlify hosts the service; these providers may process information outside Canada under their own service terms.

Codes, sessions and security

Sign-in challenges expire after ten minutes or five wrong attempts. The database stores a code digest, not the readable code. An essential HttpOnly cookie keeps you signed in for up to thirty days. Hashed email and connection identifiers temporarily limit repeated requests. Email request counters expire after ten minutes; connection request counters after one hour. Resend normally retains email delivery data for thirty days. Netlify and Upstash also process operational logs and backups under their own retention and security policies; deleting an account does not instantly erase all provider logs or backups.

Signing in with Google

Google sign-in is optional; email codes remain available. If you choose Continue with Google, Google confirms your identity and sends us your verified Google email address and a stable Google account identifier. We store a hashed form of that identifier linked to your account, so Google sign-in keeps working if your Google email later changes. Google may also share your name and profile picture; we do not store them. We never receive your Google password, and we do not keep Google access or refresh tokens. Each sign-in attempt uses an essential HttpOnly cookie and a matching server record that expire after ten minutes or once used. Hashed connection identifiers limit repeated Google sign-in attempts for ten minutes. When first connecting, a Google account connects only to the account with the same verified email address. Using Google does not subscribe you to product updates. Deleting your account removes its Google connection. Google handles your sign-in under its own privacy policy.

Product measurement

To learn whether Market Compass is useful, we count a few research steps: joining, opening a company report, checking its evidence, saving a research question and returning on a later day. For each member, Upstash keeps the dates of those steps and the short link you arrived through, if any (for example a video link). It does not store which companies you research, your notes, your email or your connection address. Reports we read are totals by join date and link. When you follow a link such as indicatorhub.ca/go/costco, a first-party cookie remembers that link for thirty days so a later sign-up can be counted against it; clicks on those links are also counted without identifying you. Records expire after about thirteen months, and deleting your account deletes your step dates. None of this is shared with advertising services.

Optional product updates

Promotional email subscriptions are currently disabled. Free signup provides account access and sign-in emails only. If we offer product-update subscriptions later, they will require a separate choice; existing members will not be enrolled automatically.

Your briefing on this browser

The free briefing beta saves a copy of the public market observations you viewed and your visit time in this browser, under an account-specific identifier. It does not store your email or sign-in token there. The next visit uses that copy to explain changes. Copies more than ninety days old are discarded when read. This history does not sync between devices. Use Reset saved history in your briefing or clear this site’s browser data to remove it. Account deletion also removes its saved briefing from the browser used to delete it; clear site data on your other devices separately. Calendar downloads remain in your own calendar until you remove them.

We store your email preference and a record of when and where you gave or withdrew consent, together with the consent wording version and sender mailing address shown when you opted in. We use these records to manage your choice. Each product-update email includes an unsubscribe link. You can also turn updates off in your account, without closing it. Sign-in codes and important account emails are separate from marketing preferences.

When you contact us

The contact form sends your name, email and message to the Indicator Hub operator through Resend. Your email lets us reply. Do not include passwords, sign-in codes, card details or other sensitive information. Messages may remain in our inbox while we handle your request and keep relevant support records. You can ask us to access, correct or delete your information using the same form. Some records may need to be retained for security or legal reasons. Hashed connection counters limit contact-form abuse and expire after one hour; a service-wide daily counter expires after one day.

Outside data sources

Our server requests public economic data from BLS, the U.S. Treasury and the New York Fed. Your email is not sent to these data sources. Following a source link opens an external site with its own policies.

Your choices and deletion

Trading focus and watchlist choices are saved in this browser under your account’s local identifier. They do not sync between devices unless you are a Compass Pro member who turns on sync in Account settings. If you do, your watchlist and saved research cases are stored on our servers with your account until you delete the cloud copy or your account, and you can download them at any time. Pro members can also turn on a daily filings email. If you do, we store that choice and the date of the last check, our server reads public SEC filings for the stocks you saved, and Resend delivers an email that may quote words from your own notes to your address. Turning it off stops the emails. Portfolio imports are never uploaded. Interactive market charts and the economic calendar contact TradingView only after you choose to load a panel. TradingView receives normal connection information and the symbols shown in that panel under its own privacy policy. Your email and sign-in credentials are not sent in widget settings. Close a panel to stop its embedded display.

Use Membership & settings to delete your account. This removes the account email record, any Google sign-in connection, any synced research copy, email preferences and associated consent records, and invalidates access on all devices and pending codes. Expired session records and short security counters are removed automatically. Provider delivery logs and backups follow the providers’ retention settings. Clear site data in Chrome to remove sector interests and local review notes. Manually entered odds are held only while their view is open.

Privacy questions

Indicator Hub is responsible for the information described here. Use our contact form for privacy questions or requests. We may need to verify that you control an account before providing or changing its information.

No automatic enrollment or billing

Signup is for account access and operational emails. Marketing requires your separate opt-in. No card is collected and no Stripe customer or paid subscription is created. Market Compass is for people aged sixteen and older.