Privacy Policy

The short version

Reading the market research on this site needs no account and sends nothing about you anywhere beyond a first-party visit counter (below). Creating an account stores what you type - your email, what you choose to track, and anything you write down - in a database kept solely for that purpose, never sold, never used for advertising, and never shared with a third party except where this policy says otherwise.

What is collected

• Account data. Email address, display name, and a password hash (never the password itself) - see the "Passwords" section below.
• What you save. My Collection, Watchlist, notes, and saved Browse views, if you use those features. This is stored to make the feature work and is never read for any other purpose.
• Contact messages. Name, email address, subject and message body, if you use the contact form - kept so a reply can be sent, and as a record of correspondence.
• Payment information. Handled entirely by PayPal for the Lifetime Supporter purchase. This site never receives or stores your card or PayPal account details - only that a payment completed, its amount, and PayPal's own reference for it.
• First-party analytics. A visit and which tabs are viewed, counted against an anonymous cookie (pmi_visitor) - never a name, an email, or anything identifying beyond that one cookie. There is no third-party analytics or advertising tracker on this site, and an administrator's own use of the site while signed in is excluded from these counts. See "Cookies" below.

Cookies

Two first-party cookies, both set by this server and read by nothing else:

• pmi_session - only present if you are signed in; identifies your session so the site knows who you are. Deleted when you sign out.
• pmi_visitor - an anonymous identifier used only to count visits and page views in aggregate, described above.

Neither cookie is used for advertising, and there is no consent banner because neither one is a tracking cookie in the sense that requires one under most regimes - but you are free to block them; the research pages work identically either way, and only signing in stops working without the session cookie.

Passwords

Stored as a memory-hard hash (Argon2id, or scrypt where Argon2 is unavailable) - never as plain text, and never in a form that can be reversed back into your actual password, including by the operator.

Where data is kept

On a single server the operator controls. Account data is backed up nightly and kept for 30 days; the market research data is regenerated from public sources daily and is not personal data.

Your rights

You can ask to see, correct, or delete your account and everything attached to it at any time through the contact page. Deleting an account removes your collection, watchlist, notes and saved views immediately; a completed purchase's basic transaction record may be kept as required for accounting purposes.

Children

This service is not directed at children and does not knowingly collect data from anyone under the age required by their local law to consent to this kind of service on their own.

Changes to this policy

This policy may be updated as the product changes. The date at the top of this page is the last time it was.

Contact

Questions about this policy, or a request under "Your rights" above, can be sent through the contact page.