Privacy policy

Last updated 2026-10-01

This policy is short because the honest answer to "what do you do with my data?" is: almost nothing, because we almost never have it.

Your trade data

• CSV files you drop into the checker are parsed in your browser. They are not uploaded. There is no server-side processing of trade data anywhere in this product.
• Your ledger, and what you tell the app about it (the dates your files cover, accounts you haven't added), are stored in your browser's local databases (IndexedDB) on your device. "Clear my data" in the app deletes both entirely. Ledger backups and calendar files you download are yours; we never see them. A calendar file holds its card's ticker or contract, loss sale dates, account names, quantities and dollar amounts; if you add it to an online or shared calendar (such as Google, iCloud or Outlook), that service stores it, and anyone that calendar is shared with may be able to read it.
• If you turn on the preview of saved plans in the app, the plans and automatic-buy schedules you save, the names you give for who owns and exports each account, your review history and your review day are stored in the same local database, are never sent anywhere, are in the ledger backups you download, and are deleted by "Clear my data". A calendar file of your plans or of a schedule holds each plan's or schedule's ticker, number of shares, account name and dates.
• The app page loads no third-party scripts and never sends your trade data anywhere. You can verify this: open your browser's developer tools → Network tab, or use the app with Wi-Fi off.

What we do collect

• Email signup (optional): if you give us your email address — for the dated year-end wash-sale reminders (the checklist PDF comes with them) — the form sends at most three things to our email service (Kit): your address, the page you signed up from (sent automatically with the form), and, on the homepage and checker forms only, a tag identifying which form you used. No other form fields (Kit, like any web server, also sees the IP address and browser details that every request carries). The forms on article pages send just the first two. The list gets about four to six emails a year: the reminders, and a note the day Guardian Pro goes on sale. Unsubscribe in one click using the link in any email; that stops all mail. Kit keeps unsubscribed profiles on file, so unsubscribing does not by itself delete your record. To have your address deleted from our email provider entirely, email hello@washsaleguardian.com and we will delete it.
• Aggregate page analytics: we use cookieless, privacy-preserving page-view counts (Cloudflare Web Analytics) on the site's pages — never on the app page or the license page (/unlock), where the browser is told to block it. No cookies, no cross-site tracking, no advertising identifiers, no sale of data to anyone.

Guardian Pro purchases and license keys

Only if you buy Guardian Pro. The free checker involves none of this, and none of it involves your trades: they stay in your browser either way.

• Payment: you pay on Stripe's checkout page, and Guardian Pro is sold through Link (Sold through Link, LLC, a Stripe affiliate), the merchant of record for your purchase. Link receives what you enter there, including your name, email address, billing address and payment details, and handles it under Link's privacy policy. Your full card number goes to Stripe, never to us. Link shares your order with us, and Stripe's Dashboard shows it to us, including your name, email address and billing address; your payment method (for a card, its brand and last four digits); what you bought, when and for how much; and the payment's status.
• Your email address: Link emails you a receipt for the payment. Beyond that, we use your address only to reply if you contact us about your purchase; it is not added to our mailing list.
• Getting your key: the page Stripe returns you to (/unlock) sends the checkout reference in that link to our server, which asks Stripe about that payment and returns your license key. That page loads no third-party scripts.
• Keeping it valid: your license key is stored in your browser. When you're online, the app sends the key's license ID (the payment's ID at Stripe) to our server when you paste the key in, and after that when you open the app or /unlock once this browser hasn't checked it for 30 days. Our server asks Stripe whether the payment was refunded or reversed. If it was, or if we disabled the key because it was shared publicly (see the terms), the app removes the key. Nothing else is sent: never your trades, files or ledger.
• Our server keeps no record of the checkout references or license IDs it's sent. Cloudflare hosts it. Other logs do keep them, and we can see these. Stripe keeps its usual log of our server's requests to it: the checkout reference or payment ID asked about, the time and Stripe's answer, but not your IP address. When Cloudflare's security rules block a request, Cloudflare's security log records it with your IP address and the full address requested, including any checkout reference or license ID in it. And Cloudflare's traffic analytics keep a sample of the site's requests, blocked or not, for up to 7 days; a sampled request can show your IP address and the full address requested, including any checkout reference or license ID in it.

Questions

Email hello@washsaleguardian.com.