Privacy
Privacy Policy
Last updated: September 2026
The Short Version
We collect minimal data to keep the site running and improve your experience. We don't sell your information, we don't share it with advertisers, and we give you control over analytics cookies. That's the gist.
What We Collect
Information you give us
If you sign up for our email digest, we collect your email address. That's stored securely with our email provider (Resend) and used only to send you the content you signed up for. You can unsubscribe at any time from any email we send.
Dashboard authentication
Members sign in through Discord. We store your Discord identifier, display name and an access token in an encrypted, HttpOnly cookie to verify membership periodically. The login cookie lasts up to seven days, unless you log out sooner. An owner-only password login is also available.
Watchlists and portfolios
Tickers, holdings, quantities, recorded costs and preferences you save are stored in our hosted database and associated with your Discord identifier. They remain until you remove them or request deletion. Market-data providers receive ticker and contract identifiers when we retrieve quotes, not your recorded holding quantities or costs.
Analytics (only with your consent)
If you accept optional analytics, we use three analytics services to understand how people use our homepage and privacy page. We do not load these analytics services on the member dashboard or unsubscribe page:
Vercel Web Analytics - measures page views and aggregate visitor information without analytics cookies. We enable it only after you accept optional analytics and remove query parameters and page fragments from the page URLs we send.
Google Analytics 4 - tracks page views and basic usage patterns. IP addresses are anonymised. We use this to understand which pages are popular and how visitors navigate the site.
Microsoft Clarity - provides session replays and heatmaps of public pages to help us identify layout and usability issues.
If you decline optional analytics, none of these services will load. No tracking scripts, no optional analytics collection. Essential login, saved data and server logging still operate so the site can function.
Cookies and Local Storage
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
| pf_cookie_consent | Remembers your cookie preference | Functional local storage | Persistent |
| pf-cerebro-session | Dashboard login session | Functional | Up to 7 days |
| _ga / _ga_* | Google Analytics tracking | Analytics | 2 years |
| _clck / _clsk | Microsoft Clarity session tracking | Analytics | 1 year |
The functional cookies work regardless of your consent choice - they're necessary for the site to function. Analytics cookies only load if you click “Accept” on the cookie banner.
Third-Party Services
We use the following third-party services:
Discord - verifies your account and membership role for access to Cerebro.
Resend - email delivery for the daily digest. They process your email address on our behalf and don't use it for their own purposes.
Whop - handles membership and payments. When you purchase a subscription, Whop manages the transaction. Their own privacy policy applies to data collected on their platform.
GitHub - stores setup data for the Cerebro Dashboard. This is server-side only and doesn't involve any of your personal data.
Vercel - hosts the website. Standard server logs (IP address, browser type, pages visited) are retained temporarily for security and performance monitoring.
Your Choices
Cookie consent - You can accept or decline optional analytics on your first visit and change that choice here at any time. Declining after accepting reloads the page to stop previously loaded analytics.
Email unsubscribe - Every email includes an unsubscribe link. One click and you're removed.
Data deletion - If you want us to delete any data we have about you, email us at mattpurdy89@gmail.com and we'll take care of it.
Data Security
We use HTTPS encryption across the entire site, secure HTTP-only cookies for session management, and restrict API access with scoped tokens. We don't store member passwords; Discord handles member authentication. Login sessions use encrypted cookies.
Changes to This Policy
If we make meaningful changes, we'll update the date at the top of this page. For major changes, we may also notify email subscribers.
Questions?
If you have any questions about this policy or how we handle your data, reach out at mattpurdy89@gmail.com.