Record AR-STD-020 · Privacy statement
One value is written
to your browser. That is all.
Most privacy policies describe a data operation and then explain how carefully it is run. This site has no data operation. There is no analytics, no cookie, no external request, no form that transmits and no account. What follows is a precise description of that, followed by an equally precise statement of what would change if the application is ever built.
01What this site collectsAR-STD-020·01
Nothing is collected,
and the claim is checkable.
This is a static site. It consists of hand-written HTML documents, one stylesheet and a small set of plain JavaScript files, served as files. There is no application server, no database, no session, no account system and no logging endpoint belonging to this project. Nothing you do here is observed by it.
That statement is unusual enough that it should not be taken on trust, so it is worth saying how to verify it. Open your browser's developer tools, select the network panel, and reload any page in this facility. The request list will contain documents and assets from this site's own origin and nothing else — no analytics beacon, no font host, no tag manager, no pixel, no third-party anything. Then disconnect from the network and continue using the site: every instrument keeps working, because every calculation happens in your browser.
The absence is deliberate and it is structural rather than a matter of restraint. There is nowhere for data to go, because nothing was built to receive it.
Absent, specifically
02The single stored valueAR-STD-020·02
One key,
documented in full.
Exactly one value is written to your browser's local storage. It is described here at a level of detail that would be excessive for a site with an actual data operation, on the principle that a privacy statement should be specific enough to be wrong if it were untrue.
| Property | Detail |
|---|---|
| Mechanism | localStorage — not a cookie. It is never transmitted with any request, and it is readable only by pages served from this site's own origin. |
| Key | alpharail-motion |
| Possible values | "on" or "off". No other value is ever written. |
| Purpose | To remember whether you have turned animation and scroll motion off, so the preference survives navigation between pages instead of having to be set again on each one. |
| When it is written | Only when you activate the motion toggle in the site footer or the facility menu. If you never use the toggle, nothing is ever written. |
| Default behaviour | If no value is present, the site reads your operating system's prefers-reduced-motion setting and honours it. Your system preference is respected without any storage at all. |
| Lifetime | Until you clear site data in your browser. There is no expiry, because there is no server to expire it. |
| Who can read it | Only your browser, and only for this origin. It is not sent anywhere, not synchronised, not shared, and not accessible to any third party. |
| How to remove it | Clear site data for this domain in your browser settings, or set the motion toggle back and clear storage. Removing it costs nothing but the preference. |
Why it is not a cookie
A cookie would be transmitted with every request to this site's origin, which would mean the preference travelled across the network for no reason. A local storage value stays in your browser and is read by the page itself. For a purely presentational preference on a site with no server logic, that is the correct mechanism and it is also the one with the smaller footprint.
03Network requests and hostingAR-STD-020·03
What leaves your browser.
Requests for this site's own documents, stylesheet, scripts and icon. Nothing else. In particular:
Fonts are inlined. The typefaces used throughout are embedded directly in the stylesheet as data URIs rather than fetched from a font service. This is the single largest contributor to the site's transfer size and it is accepted deliberately, because a font request to a third party discloses which page you are reading and from where, on every page load, to a party who has nothing to do with this site.
The favicon is inline. It is an SVG data URI in the document head rather than a separate file, which is a small thing but it is one fewer request.
Every computation is local. The preview engine, the figure library and the Monte Carlo simulator all run in your browser. No parameter you set, no configuration you build and no result you generate is transmitted, because there is nothing on the other end to transmit it to.
The one thing outside this site's control
These files are served by a web host, and web hosts generally keep access logs. A typical log entry records an IP address, a timestamp, the file requested, an HTTP status and a user-agent string. That happens at the infrastructure layer, before any code belonging to this project runs, and it is true of essentially every website you visit.
It is stated here because a privacy statement claiming that absolutely nothing is recorded anywhere would be overclaiming, and this document would rather be accurate than impressive. This project does not consult those logs for any analytical purpose, does not aggregate them, does not join them to anything, and derives no profile from them. But it does not control the host's ordinary operational logging and does not claim to.
What that means practically
If you want to remove even that, the ordinary tools apply — a VPN, a privacy-respecting browser configuration, or simply reading the site once and then working offline, which this site fully supports.
04Forms and what happens to what you typeAR-STD-020·04
The forms are demonstrations.
Two forms exist in this facility: the enquiry form on the contact record and the development register on the early-access record. Both behave identically with respect to your data.
When you submit, a script running in your browser checks that the required fields are present, that the email field has a plausible structure, and that the message meets its minimum length. It marks any failing field as invalid, writes an error message into the text slot beneath it, and moves focus to the first problem. If everything passes, it displays a confirmation with a locally generated reference number and clears the form.
At no point is a network request made. There is no endpoint, no email relay, no form service, no webhook and no storage. The reference number is generated from your own clock and is recorded nowhere — it is a demonstration of the intended intake behaviour, not a receipt. When you navigate away or reload, everything you typed is gone.
Both forms state this at the point of use, in a panel adjacent to the fields, rather than only here. You should still avoid entering anything sensitive, on the general principle that a form which does nothing is a strange place to put information you care about.
Do not send trade data
Trading records are commercially and personally sensitive. Do not paste them into the enquiry form — it transmits nothing, so they would be lost, and an unsolicited dataset arriving without an agreed handling basis would be a liability rather than a contribution. If you want to propose a data collaboration, describe the dataset instead and agree the handling basis before anything is sent.
Contact record →Browser autofill
The name, email and organisation fields carry standard autocomplete hints so your browser can offer to fill them. That interaction is entirely between you and your browser; this site neither triggers nor observes it, and it happens whether or not the form does anything afterwards.
05The application phaseAR-STD-020·05
What would change
if the application ships.
Accounts and uploaded trade data cannot be delivered by a static site, so if the planned application is built, some of the statements above stop being true. The intended handling principles are published now, in advance, so that the eventual policy can be measured against something that was written before there was any commercial pressure on it.
These are intentions, not commitments
The application does not exist. Nothing in this section binds a future service, and a policy written for a system that has not been built cannot anticipate every decision that building it will force. It is published as a statement of intent against which any eventual policy can be compared — and a divergence between the two would itself be information worth having.
06Trading data as sensitive dataAR-STD-020·06
A trade history is not
ordinary user data.
Most legal frameworks classify special categories of personal data — health, biometrics, political opinion — and trading records are not among them. That is a description of the law rather than of the risk, and the two diverge here.
A complete trade history discloses, in aggregate, your account size and its trajectory, your income from the activity, your risk appetite, the hours you work, the instruments and brokers you use, your methodology in reconstructible detail, and the periods during which you were losing. Taken together that is a financial and behavioural profile of unusual precision, and it is precisely the kind of dataset whose commercial value creates pressure to use it for something other than what the person uploading it intended.
The intended position is therefore stricter than the law requires: uploaded trading data is treated as confidential to the account that uploaded it, used only to produce that account's analysis, and never aggregated into anything published or shared. A published statistic derived from users' trade records — however anonymised — would be a breach of that principle even where it would be lawful, and the intent is not to produce one.
Retention intentions
None of the above applies today, because there is nothing to retain.
07Your rightsAR-STD-020·07
Rights that currently
have nothing to attach to.
Data-protection regimes in many jurisdictions grant rights of access, rectification, erasure, restriction, portability and objection. They are listed here honestly: today there is no personal data held by this project, so a request under any of them would be answered with the statement that nothing is held.
01
Today
No personal data is collected, so there is nothing to access, correct, erase, restrict, port or object to. The only value under your control is the motion preference in your own browser, which you can remove yourself in seconds and which this project cannot see.
02
In the application phase
The intent is that export and deletion are self-service functions in the interface rather than requests requiring correspondence — a right you have to ask permission to exercise is a weaker right than one you can simply use.
03
Complaints
Where a data-protection authority has jurisdiction over a future service, you would be entitled to complain to it. That authority depends on where the service is established, which is not determined, so naming one now would be a guess.
Children
This site is not directed at children and its content is not appropriate for them. It collects no data from anyone, so it collects none from children either. Leveraged trading products are restricted to adults in every jurisdiction this project is aware of, and any future account system would require the account holder to be of legal age in their jurisdiction. If you believe a child has supplied information to any future service, contact the Foundry and it will be deleted.
Changes to this statement
Material changes will be recorded in the build log on the facility status board, dated, describing what changed. A privacy statement that is quietly rewritten is worse than one that was never published, so revisions are logged in the same place as every other material change to this site. The document header carries the month it was last revised.
Questions about this statement.
If any claim on this page is wrong — a request you can observe that this document does not disclose, a stored value that is not listed, a third-party asset that slipped in — that is a defect of the most serious kind and reporting it would be a genuine service. Use the contact record and select report a problem.
No cookies · no analytics · no external requests · one local preference key