Privacy Policy

Overlap Monitor is operated by Anthony Jordan, an individual operating as a sole proprietor. This policy explains what happens to your information. The short version is at the top because it is the part that matters.

The short version

• An anonymous analysis is never saved. When you paste or upload holdings without an account, they are sent to our server, computed on, and returned. They are not written to a database, not attached to you, and not retained afterwards.
• Share links carry percentages, never amounts. A share link encodes your allocation — VOO 47.6% — and never your balances, so sharing one cannot disclose what your portfolio is worth. The link itself is the whole payload; we store no copy of it.
• We do not sell your data. Not to anyone, in any form, ever. We have no advertising, no data-broker relationships, and no affiliate arrangements with fund issuers or brokers.
• Your card details never reach us. Stripe handles payment; we see a customer reference and a subscription status.

What we collect

If you never sign in

The holdings you paste, upload or type are processed to produce your analysis and then discarded. There is one exception, and it is small but we would rather name it than let you discover it: when you enter a ticker we do not have fund data for, that ticker symbol on its own is recorded so we know which funds people want us to add. No amount, no other ticker from your portfolio, and nothing identifying you is recorded with it, and it cannot be traced back to a person.

Our hosting provider keeps standard server logs (IP address, timestamp, page requested) for a short period for security and reliability. Because a share link puts the allocation in the web address, opening one means that allocation appears in those logs. That is inherent to a link that works without an account; if you would rather it did not, do not open share links.

If you create an account

Sign-in is handled by Clerk, which holds your email address and authentication details under its own privacy policy. We store your Clerk user id, your email address, and — only if you choose to save a portfolio — the portfolio name and the holdings in it (ticker, and either a dollar amount or a share count), any alert thresholds you set, and the periodic snapshots that make the trend chart work.

If you subscribe

Payment is processed by Stripe under its privacy policy. We never receive your card number. We store a Stripe customer reference, a subscription reference, which plan you are on, the subscription status, and when the current period ends — the minimum needed to know whether your subscription is active.

If you join the waitlist

We store your email address and which feature you asked about, so we can tell you when it ships.

Analytics

We use PostHog to count how the site is used — how many people run an analysis, how many share the result. Events carry a random identifier stored in your browser, the page path, and coarse counts (how many holdings, the concentration score). They never carry your tickers, your amounts, your allocation, or your name.

Web addresses are stripped of their query strings before being recorded, specifically so that a shared allocation cannot reach our analytics provider. This is enforced in code and covered by an automated test.

Cookies

We use no advertising or tracking cookies, and we do not sell or share personal information for cross-context behavioural advertising. If you sign in, Clerk sets a session cookie so you stay signed in — that is strictly necessary for accounts to work. Analytics uses a random identifier in your browser’s local storage rather than a cookie; clearing site data removes it.

Why we use it

• To produce the analysis you asked for.
• To run the features of a paid plan: recomputing your saved portfolios, checking them against limits you set, and emailing you when one is crossed.
• To take payment and manage your subscription.
• To keep the Service secure and working, and to understand how it is used in aggregate.
• To decide which funds to add next.

We do not use your holdings to profile you, to market anything to you, or for any purpose other than producing the output you asked for.

Who we share it with

Only the service providers that make the product run — Vercel (hosting), Supabase (database), Clerk (sign-in), Stripe (payments), Resend (email), PostHog (analytics) — each handling only what its job requires. We may disclose information if legally required, and if the Service is ever sold or transferred your information could transfer with it, subject to this policy.

We do not sell personal information, and we never have.

How long we keep it

• Anonymous analyses: not retained.
• Saved portfolios, snapshots and alert settings: until you delete them or your account.
• Billing records: as long as tax and accounting rules require, typically seven years, even after an account is closed.
• Waitlist emails: until you unsubscribe or ask us to remove you.
• Server logs: a short period, then discarded.

Your choices

You can delete any saved portfolio from your account page at any time, and that deletion is immediate and permanent. Email ajdevelopment123@gmail.com to ask for a copy of what we hold about you, to correct it, or to delete your account and everything in it. We will do it, whether or not a privacy law happens to require us to, and we will not ask you why.

Every alert email carries a one-click unsubscribe link. Unsubscribing stops the emails and leaves your saved portfolios intact.

Depending on where you live you may have specific statutory rights — to know, to delete, to correct, to opt out of sale or sharing (we do neither), and not to be discriminated against for exercising them. Use the same address; we do not distinguish between a legal request and an ordinary one.

Security

Traffic is encrypted in transit. Access to the database is restricted, and the tables holding account data have row-level security so one user’s rows are not readable as another. Payment credentials never touch our systems. No system is perfectly secure, and we do not claim otherwise — which is part of why the anonymous path stores nothing at all.

Children

The Service is not for anyone under 18 and we do not knowingly collect information from children. If you believe a child has provided us information, tell us and we will delete it.

Changes

If this policy changes materially we will post the new version with a new effective date, and tell account holders. We will not apply a materially different use to information we already hold without asking you first.

Contact

Anthony Jordan
ajdevelopment123@gmail.com

How the numbers themselves are produced is documented on the methodology page, and the limits of the data are set out in the terms.