This page lists every piece of information delaxcom.org gathers, why, and who else sees it. If something here doesn't match what the site actually does, that's a bug, and we'd like to hear about it.
DELAX GEO-RISK (delaxcom.org) is run by DelaxCom LLC, an Iowa company. "We" on this page means DelaxCom LLC.
DelaxCom LLC| What | Where it goes and why |
|---|---|
| Visit statistics | Google Analytics records the pages you open, roughly where you are (country or city), your device and browser type, and the page that sent you. We use this to see which pages help people and which don't. Details and how to turn it off. |
| Anonymous traffic counts | Vercel, which hosts the site, provides Web Analytics and Speed Insights. Both count page views and load times without cookies and without identifying you. |
| Your account | Only if you sign in. With Google or Microsoft: your email address, your name as that service shares it, and an account ID. With an email and password: the first and last name and email you enter, and your password, stored only as a secure hash. Plus the books and watchlist you save. Stored in our database, hosted by Supabase. Details below. |
| Waitlist and demo requests | Only what you type in. Details below. |
| Your holdings and settings | Without an account, saved in your own browser's storage, not on our servers. Details below. |
| Server logs | Like every website, our host, Vercel, briefly records each request: your IP address, the page asked for, the time and your browser type. We use these logs only to keep the site working and to spot abuse. |
We don't take payments, and we don't ask for your home address.
The dashboard and the Investor Workspace load Google Analytics 4. It stores two first-party cookies (_ga and _ga_KEK0Q8HN11) that let it tell a returning visitor from a new one. They last up to two years. Google processes this data for us under its own policies. Google Analytics 4 does not log or store IP addresses.
We have turned off all of Google's advertising features. Advertising cookies, ad personalisation and sharing data with Google for ads are disabled everywhere, for everyone.
When analytics is off, Google sets no cookies on your device. Google may still receive a signal that a page was viewed, with no identifier attached, which it uses only for overall totals. Your choice is saved in your browser, so clearing your browser's site data resets it.
You can also block Google Analytics on every website with Google's opt-out browser add-on.
Our pages load fonts from Google Fonts and chart code from the jsDelivr network. Like any web request, these send your IP address to those services so they can deliver the file. We don't send them anything else.
Signing in is optional. You can sign in with Google and, where the sign-in box offers them, with a Microsoft account or with an email address and a password.
Whichever way you sign in, a Pro trial or subscription applies only once the email address on the account has been confirmed. When you save a book, we store its name and, for each holding, the ticker, number of shares, cost and sector. Your watchlist is stored the same way. A saved book stores holdings only, never a score: every figure is recalculated when you open it. Our database and sign-in are hosted by Supabase.
Please don't put account numbers, passwords or other sensitive details into a book name or a note.
To delete your account, email contact@delaxcom.com from the address you signed in with. Deleting your account deletes its saved books and watchlist. Signing out on a shared device removes the account's books from that device.
If you join the waitlist, we receive your email address together with the feature that prompted you, the scenario you were viewing, your browser type and the page that referred you. It arrives as an email to contact@delaxcom.com, sent through our email provider, Resend. A copy of the address is also saved in your own browser, in case the network fails.
If you request a demo, we also receive your name, what you're interested in and any note you write, delivered the same way.
We use these for one thing: replying to you, or telling you when Pro opens. We won't add you to any other mailing list without asking. To have them deleted, email contact@delaxcom.com and we'll delete it within 30 days.
If you set up email alerts, we store, under your account: whether alerts are on or paused, the line you chose for each saved book ("tell me if it falls below −X%") and which crisis it watches, the kinds of alert you chose, which crises you follow, how big an odds move must be, whether you want them as they happen or as a weekly summary, and a record of what the model said and where each book stood when you saved them, so that we only write when something changes. Each alert we build is kept in a list you can read in the alerts panel, with what triggered it and its full text; opening one marks it read. A daily check (after our morning data update) compares the model and your books with what they were last time, so you only hear about a change.
Alerts go to the email address on your account. Each one says why you got it and lets you stop them. You can turn alerts off or delete your settings at any time; deleting your account deletes them too. Alert emails are sent by our email provider, Resend, from alerts@delaxcom.com; each carries a link that stops them in one click. Alerts are part of DELAX Pro: when Pro ends, the emails stop and your settings are kept until you delete them or your account.
Pro is a subscription. You subscribe on Stripe's own payment page, and we never receive your card number. So that the payment reaches your account, the link to that page carries your account ID (a random code, not your email). When the payment goes through, our server asks Stripe for your Stripe customer and subscription IDs and the date the paid period ends, and Pro switches on automatically for the email address of the account you signed in with (not the address typed on Stripe's page). Stripe also tells us when the subscription renews, is cancelled, fails to renew or is refunded. You manage or cancel the subscription with Stripe.
We also store when your paid subscription started, so we can count your paid days. If you cancel, we never delete your saved books. A free account keeps one book in use: the one you created last. Your other books are kept for you and unlock when you resubscribe. If you had 90 or more paid days, you can still open them, read-only. You can delete any of them at any time.
A free trial works differently: when you press "Request a free trial", we receive the request and approve it by hand. There is one trial per email address.
For each Pro member we store a Pro record. It holds your email address, whether Pro is waiting, on or ended, how you got it (subscription, trial or given by us), the date it ends or renews, when you asked, who or what switched it on and when, your Stripe customer and subscription IDs, and any short note you or we add. You can read your own record by signing in. Only our administrators can see everyone's. The record does not hold anything about your holdings.
To have your Pro record deleted, email contact@delaxcom.com from the address you signed in with. Stripe keeps its own payment records under its own privacy policy and the law.
Ask DELAX answers questions about the crises we model. Your browser sends the question, the crisis and scenario you're viewing, and your working book's holdings to our server, which works out the figures and has the AI write the answer from them. We don't store your questions or the answers: the conversation stays in your browser tab and is gone when you close it. Whether the bubble is shown or tucked away is remembered on your device only.
Each AI explanation costs us money, so we count how many each visitor asks for in a day. If you're signed in, the count is kept under your account ID, and your browser sends a sign-in token with the request so our server can check your account and whether you have Pro. The AI provider never receives that token. If you're not signed in, the count is kept under a scrambled code made from your internet address and the date. We can't turn it back into the address, and it changes every day.
We keep only that code or account ID, the date and the count, and delete them after about a week.
Unless you sign in and save to your account, the Investor Workspace keeps your holdings (tickers, number of shares, cost), any sectors you assign, your saved books and your watchlist in your browser's local storage. The exposure score, the scenario figures and the exports are always calculated on your device. Your theme and text-size settings are stored the same way. To erase all of it, clear this site's data in your browser settings, or delete a book or watchlist item in the Workspace.
Apart from saving to your account, only a few actions send anything about your holdings to our server, and then only a ticker symbol, never your quantities or costs. What happens next is described under Who processes it for us.
We use a small number of processors (called service providers under California's privacy law, the CCPA). Each one processes personal data only on DelaxCom LLC's instructions, and only for the purposes described on this page.
| Processor | What it does for us |
|---|---|
| Vercel | Hosts the application, delivers it through its edge network and keeps the request logs. Also provides the cookie-free Web Analytics and Speed Insights. |
| Supabase | Hosts our database and sign-in, and stores email-account passwords as secure hashes. |
| Resend | Delivers waitlist and demo-request emails to us, and sends the sign-in emails for email accounts (the confirm-your-address and reset-your-password links). |
| Stripe | Takes Pro subscription payments on its own page and tells us when a payment, renewal, cancellation or refund happens. We receive those records, never your card details. |
| Runs Google Analytics for us. When you sign in with Google, your Google account itself is handled by Google under its own privacy policy. | |
| Microsoft | Only if you sign in with a Microsoft account: your Microsoft account itself is handled by Microsoft under its own privacy policy, and it tells us your email address, name and an account ID. |
| A market-data provider | Receives only a ticker symbol, so we can look up which industry the company is in. |
| An AI language-model provider | Writes the AI explanations. For a holding, it receives only the ticker, its public price figures and the scenario you're viewing. For the dashboard's AI features, it receives public headlines and market figures. If you type a question into the What-If box, the globe search or Ask DELAX, it also receives your question. For Ask DELAX it also receives what our model computes for your working book: the tickers and their modelled moves, never how many shares you hold or what you paid. Please don't type personal details into it. |
The requests to the market-data and AI providers do not identify you.
Our pages also load fonts from Google Fonts and chart code from jsDelivr, as described above; they receive your IP address only to deliver the file.
We do not sell, rent or trade personal information, and we don't share it for advertising. We would disclose information only if the law required us to.
Your account data, logs and related personal data may be processed in the United States. Transfers from the EEA, the UK and Switzerland rely on each processor's standard contractual clauses, or on the EU-US Data Privacy Framework where the processor is certified under it.
Wherever you live, you can ask us to tell you what we hold about you, correct it, or delete it. Email contact@delaxcom.com and we'll reply within 30 days. In practice, we hold only what is listed above: your account and saved books if you signed in, and a waitlist or demo request if you sent one. Analytics data sits with Google, and choosing "No thanks" stops any more from being collected.
If you are in the EU or the UK, our legal basis for analytics is your consent, for your account it is providing the service you signed up for, and for the waitlist and demo requests it is your request that we reply. You may also complain to your local data protection authority.
This site is for adults interested in markets. It is not aimed at children under 13, and we don't knowingly collect information from them. If you believe a child has given us an email address, tell us and we'll delete it.
If we change what we collect, we'll update this page and the date at the top before the change takes effect. If a change affects accounts or waitlist emails, we'll email the people affected first.