Privacy
This site keeps a standard web-server access log of each request. From it, aggregate usage is derived: approximate location (city and country, from the IP address), network operator (ASN), browser and operating-system family, referrer, and the pages and API endpoints used.
The IP address itself is not stored. At ingestion it is replaced with a salted one-way hash, so repeat visits can be counted without retaining the address. The site sets no cookies and loads no client-side trackers or third-party analytics.
Records are deleted automatically after 90 days. The access log they are derived from is rotated by the web server and kept no longer than 90 days.
The book shown is resettable market data from a demonstration matching engine, not a record of anyone's holdings.
Legal basis: legitimate interest in understanding use of a personal portfolio site. Questions are welcome via an issue on the repository.