BuyOrBeSold.com is a personal publishing site. We collect the minimum required to operate it:
Email address — only when you voluntarily submit it to the newsletter sign-up form. Stored in Vercel KV and/or Resend for the sole purpose of delivering the daily brief.
Usage analytics (first-party) — we record which pages are opened, which links and buttons are clicked, how far down a page you scroll, and how long you stay. These events are stored in our own database and are never sent to an advertising network or data broker. Each browser is given a random id, held in that browser's own local storage. It is not derived from your IP address, your device, or anything else about you — it is a coin-flip value whose only job is to tell "the same browser came back" apart from "two different people". Clearing site data erases it permanently. If you are signed in, events are additionally linked to your account email.
Anonymous analytics (Vercel) — Vercel Analytics and Speed Insights collect aggregated page-view and performance data. No cookies, no personal identifiers, no cross-site tracking.
Referral cookie — if you arrive through someone's referral link (/r/…), we set one HTTP-only cookie for 90 days containing that referral code and nothing else. It exists so the person who referred you gets credited if you subscribe.
Session cookie (admin only) — if you sign in to the trading journal as the admin, we set one HTTP-only cookie containing a signed JWT. This cookie is strictly necessary for admin access and is not used for tracking.
IP address — temporarily, for rate limiting of sign-ups, sign-in attempts, and analytics submissions. IPs are never written to the analytics table, never persisted long-term, and never associated with any identity. We do store the two-letter country your request came from.
We do not use third-party advertising networks or data brokers.
Opting out of analytics
Two things switch usage analytics off, and both are honoured everywhere on the site:
Global Privacy Control. If your browser or extension sends a GPC signal, nothing is recorded. You don't have to do anything else.
The switch below. It stores an opt-out flag in this browser and clears the random visitor id at the same time.
Analytics opt-out
Checking your current setting…
The setting is stored in this browser only. Clearing site data resets it — and also erases the random visitor id, which is the only thing connecting one visit to the next.
Analytics events are automatically deleted after 400 days. Opting out stops collection going forward; to have events already recorded deleted, email the address under “Your rights” below.
How we use it
Your email address is used only to send you the daily brief and, optionally, account-related messages (magic-link sign-in). We do not sell, rent, or share your email with anyone.
How to unsubscribe
Every newsletter email includes a one-click unsubscribe link in the footer (and a Gmail-native unsubscribe button at the top). Clicking it instantly removes your email from our list, and no confirmation is required. You can also email mario@buyorbesold.com to be removed manually.
Neon — hosts the Postgres database where analytics events, comments, and trading data are stored. Their privacy policy is at neon.tech/privacy-policy.
Public market data sources (Yahoo Finance, CoinGecko, Finnhub, alternative.me) never receive any information about you — they're queried from our server, not from your browser.
Your rights
You can request a copy of the data we have about you, or delete it, by emailing mario@buyorbesold.com. We'll respond within 30 days.
Changes to this policy
We'll update the "Last updated" date at the top of this page and, for material changes, notify newsletter subscribers by email.
