Privacy policy

The short version

You can read everything on spotthemoney.com without an account. If you choose to create a free account to follow members, insiders, stocks or companies, it holds your email address and your watchlists, and you can delete it at any time. The site never asks for a payment. We do not sell personal information. We count visits with two tools: Cloudflare Web Analytics, which uses no cookies, and Google Analytics, which uses cookies for visitors outside the European Economic Area, the UK and Switzerland. Two other things on the site come from other companies and follow those companies' own privacy rules: the share-price charts on stock pages, and advertising when it is shown.

What we collect

What you give us. Nothing, unless you create an account or write to us. An account holds what is described below. If you email us we keep your message and address so we can answer and follow up.

What is collected automatically. Like every website, the servers that deliver these pages receive your IP address, the page you asked for, the time, and your browser and device type. Our host, Cloudflare, processes that information to deliver the site and to block abuse. We also use Cloudflare Web Analytics to count page views, referring sites, countries, browser types and page speed. It sets no cookies, stores nothing on your device and does not follow you from site to site; what we see is totals, not people.

Google Analytics. We also use Google Analytics 4 to see which pages are read, how people arrive and how far they scroll. It records the pages you view, the site that sent you, your approximate location (city or region, worked out from your IP address, which Google Analytics does not store), your device and browser, and a random identifier so that repeat visits are counted once. We have switched off Google signals and the use of this data for advertising, and Google Analytics on this site does not record which links you share, which files you download, or which filters you set on the trade map. Google processes this data for us as described in How Google uses information from sites that use its services; you can block it in any browser with Google's opt-out add-on.

Cookies and consent. If you visit from the European Economic Area, the United Kingdom or Switzerland, Google Analytics is set to store nothing on your device: it sends anonymous, cookie-free counts only, and nothing on the site asks you to accept cookies. Everywhere else it sets two first-party cookies, _ga and _ga_<ID>, which hold the random identifier and last for up to 13 months. If your browser sends a Global Privacy Control signal, we treat it as a refusal and set no analytics cookies wherever you are. Charts embedded on other websites carry no analytics at all.

What is stored in your browser. The Google Analytics cookies above, where they apply, and one setting: if you switch between the light and dark theme, your choice is saved in your browser's local storage so the site remembers it. It never leaves your device. If you sign in, the account cookies described under Accounts and watchlists are added. No other cookie is set by the site itself.

How we use it

To deliver the site, keep it secure, see which pages are read and where they are slow, run your watchlists if you have an account, and answer people who write to us. We do not build profiles of visitors, we do not use visit data for advertising, and we do not combine it with any other data about you.

Charts and advertising from other companies

TradingView. The share price and price chart on stock pages, and the small price charts beside stocks and companies on watchlists (your own and lists shared by link), are widgets served by TradingView. They load only when that part of the page comes into view. When they load, your browser connects to TradingView directly, so TradingView receives your IP address, your browser details and the ticker the chart shows, and may set its own cookies. We do not send TradingView your account, your email address or your lists. Its handling of that data is described in TradingView's privacy policy.

Advertising. The site is free and may show advertising through Google AdSense. When ads are shown, Google and its advertising partners use cookies and similar identifiers to serve and measure ads, including ads based on your earlier visits to this and other websites. Where the law requires your consent for that, you will be asked before those cookies are set. You can turn off personalised advertising from Google in Google's Ads Settings, and from many other advertising companies at aboutads.info or the NAI opt-out page. How Google uses information from sites that show its ads is explained in Google's own notice. Advertisers have no say over what the site publishes, and nobody can pay to appear in, or be removed from, the records shown here.

Share buttons. The Share menu on pages, charts and trades is made of ordinary links, with no tracking code from any social network. Nothing is sent to X, WhatsApp, Reddit, LinkedIn, Facebook, TikTok or your email program unless you choose one, and from then on that service's own privacy policy applies. We do not record what you share or with whom.

Downloads. The CSV files on the downloads page are ordinary files. Downloading one needs no account and no email address, and we keep no record of who downloaded what; a download shows up only in the same totals of requests our host keeps for every page.

Links to sources. Rows link to the original filing on a government website. Those sites have their own privacy practices.

Who we share information with

We do not sell or rent personal information. Information reaches other parties only in these cases: the companies that run the site for us (Cloudflare for hosting and visit counts; Google, for Google Analytics; WorkOS, which runs sign-in for accounts; Supabase, which stores the public records the pages are built from and, for account holders, their account and watchlists; GitHub, which holds the site's code and runs the daily updates); when the law requires it or to protect the site and its users from fraud or abuse; and, if the site were ever sold or merged, as part of that transfer under terms no less protective than these.

People named in public records

The trades, filings and other records on this site were filed with U.S. government bodies by or about the people and organisations named in them, and are public by law. We publish them as filed and link each one to its source. We do not add home addresses, contact details or other private information about anyone named. If a record here does not match its source, tell us and we will fix it: see Corrections. We do not remove accurate public records on request.

Your choices and rights

Depending on where you live, you may have the right to ask what personal information we hold about you, to have it corrected or deleted, and to object to how it is used. In practice the personal information we hold is account details for people who create an account, and email correspondence. You can delete your account yourself from your watchlist page. To make a request, write to contact@spotthemoney.com; we answer within 30 days and will not treat you differently for asking. You can clear the analytics cookies and the saved theme setting at any time by clearing this site's data in your browser, and block Google Analytics everywhere with Google's opt-out add-on.

Global Privacy Control and Do Not Track. We honour Global Privacy Control: when your browser sends it, Google Analytics sets no cookies and sends only cookie-free counts. This site does not track you across other websites. Advertising and chart providers respond to these signals under their own policies.

Accounts and watchlists

An account is optional and free. It exists so you can follow members of Congress, corporate insiders, stocks and companies, and see their newly disclosed trades on your watchlist page.

Signing in. Sign-in is run for us by WorkOS. You sign in with a one-time code sent to your email address, or with your Google, Microsoft or GitHub account. WorkOS keeps your email address, your name and profile picture if the account you sign in with shares them, and a record of sign-ins (time, IP address and browser) to keep accounts secure. We never see a password.

What your account holds on our side. Your email address, an account number issued by WorkOS, your lists and the pages on them, whether you have shared a list, and when you last opened your watchlist page (so we can mark what is new). That is all. We do not record which pages you read while signed in.

Cookies for signed-in visitors. Only when you sign in, the site sets three first-party cookies that it needs to work: stm_session, your encrypted sign-in session, which page scripts cannot read (30 days); stm_signed_in, which only says that you are signed in, so pages know to ask for your watchlist (30 days); and stm_oauth_state, which protects the sign-in itself and lasts ten minutes. If you press Follow before signing in, the page you were on remembers it in your browser's session storage until you come back, then forgets it.

Shared lists. A list is private until you turn on sharing. A shared list can be seen by anyone with its link: its name, the pages on it and their recent disclosed trades, never your email address or account number. Turning sharing off makes the link stop working.

Deleting your account. "Delete my account" on your watchlist page removes your account, your lists and your WorkOS sign-in at once. Copies can remain in our database provider's backups for up to seven days before they are overwritten.

Email alerts. Not yet offered: new trades appear on your watchlist page only. If email alerts are added, this policy will be updated first; they will be something you switch on, never a pre-ticked box, and every email will carry a working unsubscribe link.

How long we keep it, and how it is protected

Cloudflare visit counts are kept as totals. Google Analytics keeps visit-level data for 14 months, after which only totals remain. Account details are kept until you delete your account. Email correspondence is kept for as long as it is needed to deal with the matter and for our records, and is deleted on request unless the law requires us to keep it. The site is served only over an encrypted connection. No system is perfectly secure, and we cannot promise that information will never be accessed without permission.

Children

The site is meant for adults and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has sent us personal information, write to us and we will delete it.

Visitors outside the United States

The site is operated from the United States and the companies that run it for us process data there and in other countries. If you visit from elsewhere, your information will be handled in the United States, where privacy law may differ from the law where you live.

Changes

When this policy changes, the date at the top changes with it. A change that affects how personal information is used will be described on this page before it takes effect.

Contact

spotthemoney.com is operated by a Wyoming limited liability company. Questions and requests about privacy: contact@spotthemoney.com. See also the Terms of use and About.