Privacy policy

Audience measurement

We measure visits to the home, sign-in and sign-up pages with Umami, an open-source analytics tool that we host ourselves. The only purpose is aggregate visit statistics — how many people visit these pages and how many go on to create an account. It is not used for advertising, profiling or to follow you across sites.

No cookies. The measurement script sets no cookie and writes nothing to your browser's storage.
No personal data. We never send your email, name or account identifier. Other pages of the application, and any address parameters such as password-reset links or verification codes, are filtered out before anything is sent.
No IP address stored. Your IP address is used only at the moment of the visit, to compute an anonymous visit identifier (a hash whose secret changes every month) and to derive the country, region and city. The address itself is not kept.
What is recorded: the page visited, the referring site, browser, operating system, device type, screen size, language, country/region/city, and six events: sign-up started, sign-up completed, sign-up failed (with a generic reason only), sign-in completed, guest session started and guest converted to an account (both with no identifier).
Retention: 25 months, after which the data is deleted automatically.
Hosting: on our own infrastructure on Google Cloud, region europe-west1 (Belgium). The data is not shared with Umami or any third party.
Opting out: if your browser sends the “Do Not Track” signal, nothing is measured. Blocking the script, for example with a content blocker, also prevents any measurement. You can also contact contact@tanitfolio.com.

Guest mode

You can use TanitFolio without an account. We then create a guest profile that holds what you enter: portfolios, watchlist, transactions, analyses and backtests.

Your consent first. The guest profile is created only after you accept this policy on the guest-mode screen; we record when you accepted and which version of the policy.
What your browser stores. A random session token, kept in your browser's local storage (not a cookie). Your display preferences (theme, columns) are stored the same way and stay in your browser after the guest session ends; you can clear them in your browser settings.
How long. The session stays valid for 7 days after your last activity, renewed while you use it, and never more than 30 days after it was created. The banner at the top of the app shows the date.
What we keep. The content you enter; the date your guest profile was created and last used; your browser's user agent; and a keyed hash of your IP address, used only to enforce the guest usage limits (it cannot be turned back into your address without our secret key). No email, no name.
Deletion. Guest data is deleted automatically within 7 days after the session expires. Copies may remain in our database backups for about 7 more days. If you create an account from guest mode, your data is kept in your account instead.
Use. Guest data is used only to provide the service to you. It is not shared or sold, and the audience measurement above only counts guest sessions started and converted, with no identifier.