Privacy

Picks is a small project made by one person, Kevin Amado. It keeps only what it needs to save your marks and notes and to read your feedback. There are no ads, Picks sets no tracking cookies, and your data is never sold or shared with anyone for marketing.

Without signing in, nothing about you leaves your device. Your marks (the star, own or pass you set on a company) and the numbers you add in My picks (the price you'd buy at, and what you think a company is worth and by when), each with when you set it, are saved in this browser only, in its IndexedDB. A few view settings are saved in its local storage: your text size, which companies the list shows (such as only starred ones), whether it hides structural gaps, and how My picks sorts your holdings. Picks can't see any of this. Clearing this site's data in your browser erases it.

Signed in, this browser also keeps a copy of your marks so they work offline, plus two small technical entries: one tells other open tabs that your marks changed, and one (only for this tab) remembers when they last synced. Signing out syncs your marks one last time and then removes this device's copy. Your private notes are never saved on your device.

Signing in goes through kamadorueda.com's sign-in service (auth.kamadorueda.com), which Picks shares with Coro (coro.kamadorueda.com). You sign in with Google, or with a code sent to your email address. From Google it asks only for your email address. It stores your email address, Google's id for your Google account if you use Google, which ways you've signed in, a random id for your account, and when you signed up and last signed in. It doesn't store your name, your profile photo, or anything else from Google.

Each sign-in keeps a session for up to 30 days, with a matching session cookie on kamadorueda.com. Email codes, and the short-lived cookies used while you sign in, last 15 minutes at most. Coro's privacy policy describes the sign-in service in full; it applies to Picks the same way.

Signed in, your marks are also saved on Picks' server, so they follow you to your other devices: for each company you marked, whether you starred it, own it or passed on it, plus the buy price and the estimate you set in My picks, each with when you set it. Picks stores no cost, amounts or shares for what you own. It's one record, stored under your random account id (not your email), along with when it last changed. Marks you set before signing in are added to it when you sign in.

Signed in, you can write a private note on each company's page. Notes are saved only on Picks' server, under your random account id, with when each one last changed and a counter that tells two devices' edits apart. Nobody else can read them, and they never appear in the public pages or data files Picks publishes.

Messages sent from the Feedback page are emailed to me (through Cloudflare's email service, to a Gmail inbox) so I can read them. Picks' server doesn't keep a copy. As a guest, your email address is included only if you type it in, so I can reply. Signed in, your account's email address is attached to the message instead, so I can reply. The email stays in my inbox until I delete it; ask, and I will.

Only me. I have a private admin page, on its own site and open to my account alone. For each person who saved something in Picks, it shows their email address, when they signed up and last signed in, how they sign in, when their marks last synced, how many companies they starred, own or passed on, and how many notes they wrote and when the latest changed. It also shows, for each company, how many people marked it and how many wrote a note on it, without saying who. It never shows what anyone wrote in a note or which companies they marked. The same page shows the usage counts and plays back the screen recordings described under Analytics.

Picks counts how it is used, on its own server, and loads no third-party analytics script. When you open a page, open a company, set a mark, set a buy price or your own estimate, save a note, change a filter, press Share or open how the AI estimate was made, it records that this happened, the type of page (not the address or the company), the kind of mark or filter, a random number that exists only while the page is open, whether your device is a phone or a computer, and the name of your browser. That holds no account, IP address or cookie, and nothing is saved in your browser. Cloudflare keeps these counts for 90 days.

About one visit in ten is also recorded as a screen recording that I can play back: the layout of the page, where the pointer goes, and your clicks and scrolls. All text, everything you type, and all pictures and videos are hidden in it, so it does not show what you read or write, which companies you looked at, or what is in your notes. Recordings are deleted after 30 days. The privacy page is never recorded.

None of this is done when your browser sends Do Not Track or Global Privacy Control.

To find and fix errors, Picks' server and the sign-in service keep short technical records of the requests they answer, in Cloudflare's Workers logs and traces: the address asked for (without anything after a “?”), when, the answer, how long it took, and any error. For some requests (every one the sign-in service answers, about one in ten of Picks') Cloudflare also records the browser and operating system, the preferred language, the network and an approximate location (country, region and city), which it works out from your connection. These records hold no IP address, email address, cookie or account, and Cloudflare deletes them after 7 days. Pages themselves are served without them.

When Picks breaks in your browser, it sends an error report (the error message, the type of page, your browser and the app version) with no account, IP address or personal data, kept with these error logs for 7 days.

Picks, the sign-in service, and their databases run on Cloudflare (Workers, D1, KV, R2 and Analytics Engine). Like any web host, Cloudflare handles your IP address and your browser's requests to serve the site, under its own privacy policy; neither Picks nor the sign-in service saves your IP address. Feedback emails live in Gmail. Nothing else is sent anywhere.

Export: your marks show on every page and in My picks, and each note shows on its company's page. There's no download button yet: ask through the Feedback page and I'll send you a copy of everything stored for your account.

Delete: without signing in, clear this site's data in your browser. Signed in, open the account menu (your initial, at the top of every page) and choose “Delete my data”. It offers two choices, because the sign-in is shared with Coro:

• Only my Picks data deletes your notes and clears your marks, buy prices and estimates, on this device and on the server. You stay signed in, and Coro is not affected. What's left is your record holding only “cleared” entries and the time you deleted, so another device where you're still signed in can't bring the old marks back.
• My Picks data and my account deletes your notes and empties your record, then deletes your account: your email and Google id (if any), and your sessions on every device, which signs you out of Picks and Coro everywhere. What's left is an emptied record under your old random account id, which no longer belongs to anyone. It doesn't erase your Coro progress: to erase everything, delete only your Picks data here, then delete your account in Coro's Settings.

Deleting your account from Coro instead leaves your Picks data behind, no longer linked to you, so delete it here first. Neither deletes feedback you've emailed (ask me to).

Use the Feedback page, or reach me through kamadorueda.com. If this policy changes, this page changes with it, and so does the date at the top.