Privacy Policy

Draft for legal review — updated October 16, 2026. These documents describe the implemented service. They do not establish IP clearance or approval for a public launch.

Your holdings are here for a ceremony, not a public profile. This page explains what the app actually does with them.

Who is responsible

Investing Sorting Hat is an independent entertainment project. For privacy questions, access requests, corrections, complaints, or deletion requests, contact hello@usefindmoney.com. The operator’s legal identity and applicable business address must be confirmed before a public production launch.

Information we access

If live connection is configured and you choose “Sign in to SnapTrade,” SnapTrade authenticates you. We do not ask for your brokerage password. Our server receives OAuth access and refresh tokens and reads available investment account information, holdings, security descriptions, quantities, prices, currencies and cash balances needed to analyze the accounts you select. Account display names are used for selection. The app requests the read scope and does not implement trades or money movement.

Live access may be unavailable while OAuth application approval and credentials are pending. The fictional sample ceremony requires no brokerage connection and is clearly labelled.

Why and how long

We use selected account data to calculate deterministic entertainment scores and commentary. Raw holdings are processed transiently and are not written to an application database. The active browser page contains your result and personalized observations until you close, reload, or delete it. Do not share a screenshot containing observations you want to keep private.

OAuth tokens and account-selection information are kept only in server memory. Tokens are encrypted there with a process-local key. Sessions expire after 30 minutes of inactivity or 60 minutes from creation, whichever comes first. Expired sessions are removed by periodic cleanup or on access. Server restarts remove all sessions. Deletion removes the session immediately and attempts to revoke the SnapTrade grant.

Cookies and optional analytics

A necessary HttpOnly session cookie supports login and prevents cross-site request attacks; it is Secure on HTTPS and uses SameSite=Lax. The cookie has a 30-minute browser lifetime. Optional analytics are off unless you accept. Your choice is stored in this browser’s local storage; accepting allows a random anonymous visitor identifier and a strict set of funnel events to our own aggregate analytics endpoint. We do not send holdings, balances, names, account identifiers or full URLs to that endpoint. Aggregate counts are process-local and reset on restart. Rejecting analytics does not affect sorting. Use “Privacy choices” in the footer to change your decision.

Sharing is your choice

Share graphics and voluntary comparison links include only a house and four house percentages, with generic entertainment copy. They exclude exact holdings, account values and identifying information. Comparison data is encoded in a URL fragment; anyone you give that link to can read it. Sharing through another service is subject to that service’s privacy practices. Copying or posting a link or image makes it available to your chosen audience and we cannot recall their copies.

Service providers and transfers

SnapTrade and your brokerage process connection data under their own terms and privacy policies. Cloudflare Workers (through ChatGPT Sites) serves the website, and an isolated Railway service handles the application API. These hosting providers necessarily handle web requests and may process IP addresses, request metadata and infrastructure logs under its own retention rules. Google Fonts serves the typefaces used by the site and may receive your IP address. Hosting location, processor details and any cross-border privacy assessment must be confirmed before public production launch. Information may be processed outside your province or country, subject to local laws. Our app does not intentionally log OAuth codes, tokens, holdings or balances. We do not sell portfolio information or use it for advertising.

Your choices and rights

Use Delete my data to remove this app’s active session, tokens, and browser-stored app choices. You can also remove this app in your SnapTrade Dashboard. If revocation cannot be confirmed, the deletion screen tells you to do so. This does not delete your SnapTrade or brokerage account, their records, copies you have shared, or independent provider logs.

Depending on where you live, including Canada and Quebec, you may have rights to access, correct, withdraw consent to, or request deletion of personal information, and to raise a complaint with the appropriate privacy authority. Contact hello@usefindmoney.com. We will verify requests proportionately and explain any legal limits. No optional analytics are needed to exercise these rights. The experience is intended for adults 18 and over.

Changes and security limits

We will update this page when practices change. No online service can promise absolute security. Please contact us if you suspect unauthorized access, and disconnect the application in SnapTrade.