AlphaDrift

Privacy Policy

Last updated: 16 August 2026

This policy explains what personal information AlphaDrift collects, why, who else handles it, and how you can get at it. It covers www.alphadrift.app and everything under it.

The short version

AlphaDrift collects about as little as a site with sign-in can. If you never create an account, we hold no personal information about you beyond ordinary web analytics and server logs.

If you do create one, we hold your email address — and, if you signed in with Google, your name and profile picture. That is the whole of it. There are no payments, so there is no payment data.

We do not sell your information, we run no advertising or retargeting trackers, and we never ask for brokerage or bank credentials.

1Who we are

AlphaDrift is a personal project operated by an individual based in New South Wales, Australia. It is not operated by a registered company. For anything to do with privacy, email wtheorydeveloper@gmail.com.

2Information we collect

If you create an account

  • Email and password sign-up: your email address and a securely hashed password. We never see or store the password itself.
  • Google Sign-In: your email address, name and profile picture, provided by Google when you choose to sign in that way.
  • Account record: alongside your sign-in details we store a single row holding your account identifier and a flag indicating whether you are an administrator. Nothing else.

Whether or not you have an account

  • Analytics: aggregate usage data collected by Vercel Analytics — pages viewed, referrer, country, device and browser type. It is not tied to your account.
  • Server logs: our hosting provider records standard request logs, which include IP addresses, for security and diagnostics.

What we deliberately do not collect

  • No payment details. AlphaDrift is currently free and takes no money. If paid features are introduced, payment would be handled by a specialist payment provider — we would not hold your card number — and this policy will be updated before that happens.
  • No brokerage, bank or platform credentials. We will never ask for them, and you should not give them to us.
  • No holdings, trades or portfolio data from you. The personal portfolio dashboards under /private are restricted to the site’s operator and hold only the operator’s own data — see clause 8.
  • No sensitive information as defined by the Privacy Act.

3How we use it

We use what we collect to:

  • create your account and keep you signed in;
  • send transactional email — account confirmation and password resets;
  • understand in aggregate which pages are used, so the site can be improved;
  • detect and prevent abuse, and keep the service secure.

We do not use your information to profile you, to make automated decisions about you, or to build an advertising audience. The scores and signals AlphaDrift publishes are calculated from market data, never from anything about you.

Google user data. Information obtained through Google Sign-In (your email address, name and profile picture) is used solely to create and operate your account. It is not sold, not shared with third parties for marketing, and not used for any purpose unrelated to running the service. This use complies with the Google API Services User Data Policy, including its Limited Use requirements.

4Cookies, local storage and analytics

AlphaDrift sets no advertising cookies and runs no retargeting pixels. What it does set:

  • Authentication cookies — set by Supabase to keep you signed in. Clearing them signs you out.
  • Browser local storage — remembers your light or dark theme, whether privacy mode is on, which portfolio you last selected, and which one-off hints you have dismissed. This stays in your browser and is never sent to us.
  • Vercel Analytics — aggregate, privacy-oriented page analytics. It does not use cookies to track you across sites.

5Charts embedded from TradingView

Price charts, heatmaps and the ticker drawer on AlphaDrift are embedded from TradingView and load inside an iframe served by TradingView. When one of those charts loads, your browser contacts TradingView directly, which means TradingView can receive your IP address and set its own cookies under its own privacy policy. We have no access to, and no control over, what it collects.

If you would rather that did not happen, blocking third-party cookies or scripts from tradingview.com will disable the charts and leave the rest of the site working.

6Who else handles your information

We use the following providers. Each processes data under its own privacy policy and its own security arrangements.

  • Supabase — authentication, database hosting, and the confirmation and password-reset emails.
  • Vercel — website hosting and analytics.
  • Google — sign-in, if you choose that option.
  • TradingView — embedded charts, as described in clause 5.

We do not sell your personal information to anyone, and we do not disclose it for any benefit, service or advantage.

7Market data and AI processing

Most of what AlphaDrift does involves no personal information at all. Market and macroeconomic data comes from Yahoo Finance, the Federal Reserve Bank of St. Louis (FRED), Finnhub, Polymarket and public news feeds. Those requests are made by our servers on a schedule, not by your browser, and carry nothing about you.

The written analysis on the site — the News & Research pages, the movement explainers and the AI reports — is generated by passing market data, public news and podcast transcripts to Anthropic’s Claude API. No personal information about site visitors is sent to any AI model.

8The operator's own portfolio data

The dashboards under /private connect to Sharesight to display the operator’s personal portfolio. That connection is read-only and the pages are restricted to the operator’s account. No other user’s financial data is held, and creating an AlphaDrift account gives you no access to that data — nor does it let anyone else see anything about you.

9Where your information goes

All of the providers listed in clause 6 are based in, or store data in, the United States and other countries. By using AlphaDrift you accept that your information may be transferred to and processed overseas. We use providers that encrypt data in transit and at rest, but we cannot guarantee that overseas recipients are bound by privacy laws equivalent to Australia’s.

10How long we keep it

We keep your account information for as long as your account exists. If you ask us to delete your account, we will delete it and the associated personal information within 30 days. Aggregate analytics, which cannot be traced back to you, and server logs are retained on our providers’ standard schedules.

11Your rights

You can ask us at any time to:

  • tell you what personal information we hold about you;
  • correct anything that is wrong;
  • delete your account and the information attached to it.

Email wtheorydeveloper@gmail.com and we will action it. There is no charge. If you are unhappy with how we have handled a privacy matter, tell us first — and if we cannot resolve it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

If you are outside Australia you may have further rights under your local law, including under the GDPR. Contact us and we will do our best to honour them.

12Security

Traffic to the site is encrypted with HTTPS. Passwords are hashed and never stored in readable form. Access to the database is restricted by row-level security, so one account cannot read another’s data. No system is perfectly secure, but we take reasonable steps, and if a breach occurs that is likely to cause you serious harm we will tell you and the relevant regulator.

13Children

AlphaDrift is not intended for anyone under 18 and we do not knowingly collect information from children. If we learn that an account belongs to someone under 18, we will delete it.

14Where this sits under Australian privacy law

AlphaDrift is a small operation with no revenue, so it currently falls below the small-business threshold in the Privacy Act 1988 (Cth) and is not strictly bound by the Australian Privacy Principles. We have written this policy, and we handle information, as though it were — because the distinction should not matter to you, and because that threshold is expected to be removed.

15Changes to this policy

We may update this policy. If we change it materially we will update the date at the top of the page, and continuing to use the site afterwards means you accept the updated version. We will not make a retrospective change that reduces the protection of information already collected without telling you.

16Contact

Questions about privacy, or about anything in this policy, go to wtheorydeveloper@gmail.com.