Privacy

Picks is a small project made by one person, Kevin Amado. It keeps only what it needs to save your marks and notes, to send the daily email if you turn it on, and to read your feedback. There are no ads, Picks sets no tracking cookies, and your data is never sold or shared with anyone for marketing.

Without signing in, your marks and numbers stay on your device. Only the anonymous usage counts and error reports described below are sent, and one request to the sign-in service on every page load, which carries no marks or notes (see Signing in). Your marks (the star, own or pass you set on a company) and the numbers you add in My picks or on a company's page (the price you'd buy at, and what you think a company is worth and by when), each with when you set it, are saved in this browser only, in its IndexedDB. A few view settings are saved in its local storage: your text size, how My picks sorts your holdings, and your table settings, meaning how the list of all picks is sorted and which companies it shows (the analyst and category choices, the market cap range, top picks only, which companies it shows by mark such as only starred ones, whether it hides structural gaps, and a ready-made view such as picks that report in the next 14 days), with when you last changed them. What you type in the search box is not saved. The Previous and Next links on a company page use the same table settings to work out the order of the list, so they follow it in a new tab too; no list of companies is saved. Picks can't see any of this unless you sign in (see below). Clearing this site's data in your browser erases it.

Signed in, this browser also keeps a copy of your marks so they work offline, plus two small technical entries: one tells other open tabs that your marks changed, and one (only for this tab) remembers when they last synced. Signing out syncs your marks one last time and then removes this device's copy. Your private notes are never saved on your device.

A company page shows its latest news and filings. When that list comes near the screen, your browser asks Picks' server for the newest copy of that one company's list (the company's ticker is in the address). The request carries no account and no marks or notes. Picks' server keeps these lists in its database, and once a day it reads them from the public SEC EDGAR service. The SEC sees only Picks' server, never you.

Signing in goes through the shared sign-in service at auth.utilarium.app (the same service as auth.kamadorueda.com), which Picks shares with Kevin's other apps that use it: Email aliases, Chess, Citizenship Test, Coro, Coverage, CRM, Drive, Gallery, Help desk, Hooks, Inventory, Journal, Kanban, Media, Pages, Podcast Host, Registry, Secret link, Secure notes, Sign, Travel Map, Utilarium and Video. You sign in with Google, or with a code sent to your email address. From Google it asks only for your email address. It stores your email address, Google's id for your Google account if you use Google, which ways you've signed in, a random id for your account, and when you signed up and last signed in. It doesn't store your name, your profile photo, or anything else from Google.

If you choose Google, you leave this site and sign in on Google's site, under Google's privacy policy.

Each sign-in keeps a session for up to 30 days, with a matching session cookie on utilarium.app (and on kamadorueda.com when the sign-in goes through it). Email codes, and the short-lived cookies used while you sign in, last 15 minutes at most. Coro's privacy policy describes the sign-in service in full; it applies to Picks the same way.

Every page of Picks asks the sign-in service whether you are signed in, also when you never sign in. That request goes to auth.utilarium.app and carries your sign-in cookie if you have one. It carries no marks, numbers or notes. Without a cookie, the service learns only that someone opened Picks.

Signed in, your marks are also saved on Picks' server, so they follow you to your other devices: for each company you marked, whether you starred it, own it or passed on it, plus the buy price and the estimate you set in My picks or on a company's page, each with when you set it. Your table settings (how you sorted and filtered the list of all picks, as described under What stays in your browser, but not your search) are saved in the same record, with when you last changed them, so the list looks the same on your other devices. Picks stores no cost, amounts or shares for what you own. It's one record, stored under your random account id (not your email), along with when it last changed. Marks you set before signing in are added to it when you sign in.

Signed in, you can write a private note on each company's page. Notes are saved only on Picks' server, under your random account id, with when each one last changed and a counter that tells two devices' edits apart. Nobody else can read them, and they never appear in the public pages or data files Picks publishes.

Signed in, you can turn on a daily email in My picks. It is off until you turn it on, and it only goes to people who did. Turning it on saves your account's email address (the one you signed in with), the time you turned it on, the time of the last email and the day Picks last checked for you. Once a day Picks reads your synced marks and sends one email only if a company you starred or own has news since your last email or since you marked it: a new version of its research, never a price change. The email names those companies, says in a line what changed and links to their pages.

Each email you are sent also saves a random code, as a one-way hash, that makes its unsubscribe link work without signing in; the codes are deleted after 120 days. Every email has an unsubscribe link at the bottom and in its headers, so your mail app can offer an Unsubscribe button. Opening the link only shows a page with a button; the button stops the emails. Turning the switch off in My picks stops them too and deletes your address, your settings and these codes at once, and so does deleting your Picks data or your account. Picks' logs count the emails and never record an address, an account or a company.

Messages sent from the Feedback page are emailed to me (through Cloudflare's email service, to a Gmail inbox) so I can read them. Picks' server doesn't keep a copy. As a guest, your email address is included only if you type it in, so I can reply. Signed in, your account's email address is attached to the message instead, so I can reply. The email stays in my inbox until I delete it; ask, and I will.

The Report on this page button at the bottom of every page sends nothing until you press Send. A report holds your comment, the spot you tapped, a screenshot of the visible part of the page, the page address without the query, the screen size, the language, mobile or desktop, and the browser. Text you typed, your notes, your marks and your own numbers are hidden in the screenshot.

If you tick the box, the report also holds a recording of your last 30 seconds of actions on the page. Typed text, notes, marks and your own numbers are hidden in the recording. The box is off unless you tick it.

A report has no IP address and no account. I store it with Cloudflare (D1 and R2) and delete it after 90 days, or sooner if you ask me.

Only me. I have a private admin page, on its own site and open to my account alone. For each person who saved something in Picks, it shows their email address, when they signed up and last signed in, how they sign in, when their marks last synced, how many companies they starred, own or passed on, and how many notes they wrote and when the latest changed. It also shows, for each company, how many people marked it and how many wrote a note on it, without saying who. It never shows what anyone wrote in a note or which companies they marked. The same page shows the usage counts described under Analytics.

Picks counts how it is used, on its own server. Cloudflare, the host, also measures visits with Cloudflare Web Analytics. It sets no cookies. When you open a page, open a company, set a mark, set a buy price or your own estimate, save a note (each of these four also counts once per page load as a job done), change a filter, press Share or open how the AI estimate was made, it records that this happened, the type of page (not the address or the company), the kind of mark or filter, a random number that exists only while the page is open, whether your device is a phone or a computer, and the name of your browser. That holds no account, IP address or cookie, and nothing is saved in your browser. Cloudflare keeps these counts for 90 days.

Once per visit, Picks also records which website sent you here. It keeps only the name of that website, such as t.co or www.reddit.com, or "(direct)" when you came with no link. It never keeps the page, the path, the search words or anything else in the link, and it keeps nothing when the link comes from Picks or utilarium.app itself.

Picks does not record your screen. Earlier it recorded some visits as screen recordings with all text hidden. It stopped on October 23, 2026, and the recordings it had made are deleted after 30 days.

None of this is done when your browser sends Do Not Track or Global Privacy Control.

The sign-in service also counts sign-ins by method (Google or email code), with no email or account in the count.

To find and fix errors, Picks' server and the sign-in service keep short technical records of the requests they answer, in Cloudflare's Workers logs and traces: the address asked for (without anything after a “?”), when, the answer, how long it took, and any error. For about one in ten requests, to Picks' server and to the sign-in service alike, Cloudflare also records the browser and operating system, the preferred language, the network and an approximate location (country, region and city), which it works out from your connection. These records hold no IP address, email address, cookie or account, and Cloudflare deletes them after 7 days. Pages themselves are served without them.

When Picks breaks in your browser, it sends an error report (the error message, the type of page, your browser and the app version) with no account, IP address or personal data, kept with these error logs for 7 days.

Your browser may also report a page that tries to load something its rules do not allow (a Content Security Policy report). The report goes to Picks' server. It has the rule that was broken, the website the page tried to load from (never the full address) and the path of your page (without anything after a “?”). It has no account, IP address or cookie, and it is kept with these error logs for 7 days.

Picks, the sign-in service, and their databases run on Cloudflare (Workers, D1, KV, R2 and Analytics Engine). Like any web host, Cloudflare handles your IP address and your browser's requests to serve the site, under its own privacy policy; neither Picks nor the sign-in service saves your IP address. Feedback emails live in Gmail. The daily email, if you turn it on, is sent through Cloudflare's email service to your inbox. The only exception is Google sign-in, described above. Nothing else is sent anywhere.

Export: your marks show on every page and in My picks, and each note shows on its company's page. On My picks and Compare, the “Download CSV” button saves a file of the companies you starred or own. Your browser makes the file on your device and nothing is sent. It has the facts those pages already show for each company, and your mark. It has no notes and none of the numbers you typed. For a copy of everything stored for your account, ask through the Feedback page and I'll send it to you.

Delete: without signing in, clear this site's data in your browser. Signed in, open the account menu (your initial, at the top of every page) and choose “Delete my data”. It offers two choices, because the sign-in is shared with Kevin's other apps (Email aliases, Chess, Citizenship Test, Coro, Coverage, CRM, Drive, Gallery, Help desk, Hooks, Inventory, Journal, Kanban, Media, Pages, Podcast Host, Registry, Secret link, Secure notes, Sign, Travel Map, Utilarium and Video):

• Only my Picks data deletes your notes, turns off your daily email and clears your marks, buy prices, estimates and table settings, on this device and on the server. You stay signed in, and the other apps are not affected. What's left is your record holding only “cleared” entries and the time you deleted, so another device where you're still signed in can't bring the old marks back.
• My Picks data and my account deletes your notes, turns off your daily email and empties your record, then deletes your account: your email and Google id (if any), and your sessions on every device, which signs you out of Picks and the other apps everywhere. What's left is an emptied record under your old random account id, which no longer belongs to anyone. What the other apps keep for that account (Coro's progress, for example) isn't erased right away: deleting the account sends me a request automatically, and I delete it within 30 days of the request.

Every app that uses this sign-in has a “Delete my account” button, so you don't need to delete in each one first: deleting your account from another app, such as Coro, also sends me a request to delete what Picks keeps for it. Neither deletes feedback you've emailed (ask me to).

Cloudflare D1 keeps point-in-time backups of the database for up to 30 days, so deleted data can stay in a backup for that time. Nobody reads these backups except me, and only to restore.

Use the Feedback page, or reach me through kamadorueda.com. If this policy changes, this page changes with it, and so does the date at the top.