This Privacy & Cookie Policy explains what personal information Diadem Edge collects, why, who receives it, how long it is kept, and the choices you have. Diadem Edge is a brand name, not a company. The service is operated by the individual developer who runs Diadem Edge, who is the controller of the information described here and can be reached at hello@diademedge.com.
Diadem Edge has no user accounts, logins, watchlists, or payments. You can use the whole service without telling us who you are. The only personal information we hold is what is described below.
What We Collect
Feedback and error reports you send. If you use the feedback form or the "Report an error" form on the Congress Trades pages, we store the type of report, your message, the time it was sent, and your email address if you choose to give one. The email field is optional; we use it only to reply to you. Please do not put personal information in the message itself.
Emails you send us. If you email hello@diademedge.com, we receive your email address and whatever you write.
Technical request data. Like any website, our servers receive your IP address, the address of the page or data you requested (which includes any search text you typed), the time, and your browser's user agent. We use your IP address to apply rate limits that stop abuse, and our hosting provider records requests in server logs.
Analytics, if it is on. When analytics is active (see Cookies below), we record which pages you visit, the buttons and links you click, the stocks and sectors you view, the text of stock searches you run along with how many results they returned, and basic timing data for requests. These events are tied to a random device identifier, not to your name or email. Our analytics provider also receives your IP address with each event and uses it to estimate your approximate location.
Error reports. When a page or request fails, an error report is sent to our error-reporting provider, as described under Cookies below.
We do not collect names, account credentials, payment details, or precise location, and we do not buy data about you from anyone.
How We Use Information and Why
We use feedback and emails to read and respond to what you sent and to correct errors in our data. The legal basis is our legitimate interest in running an accurate service, and your choice to contact us.
We use technical request data to deliver the service, keep it secure, and stop spam and abusive traffic. The legal basis is our legitimate interest in a working, secure service.
We use analytics to understand which features are used and to improve the product. In the EU, EEA, and UK the legal basis is your consent, which you can withdraw at any time.
We do not use your information for advertising, we do not send marketing email, and we do not sell or share personal information for cross-context behavioural advertising.
Cookies and Similar Technologies
We do not use advertising, cross-site tracking, or social media cookies. Our own servers do not set cookies. The service uses the following browser storage.
Strictly necessary and preference storage. We record your cookie choice in your browser's local storage under the key de_analytics_consent, and your light or dark theme choice under de_theme. Each holds only that one setting, contains no identifier, and never leaves your browser. The first is needed to honour your choice on later visits; the second only exists if you switch themes.
Product analytics. We use PostHog, provided by PostHog, Inc. While analytics is active, PostHog sets a cookie and matching local storage entries whose names begin with ph_, holding a randomly generated device identifier and session information. The PostHog cookie has a maximum lifetime of 365 days. No analytics storage is written before consent where consent is required, and declining removes any PostHog storage that was previously set.
Error reporting. We use Sentry, provided by Functional Software, Inc., to be told when a page or request fails. A report is sent only when something breaks, and contains the error message and technical details of the failure such as the browser version and the page address. It contains no cookie, no browser storage, no advertising or device identifier, and no request headers or form contents, and we have configured Sentry not to collect your IP address. Because it sets no storage on your device and is used only to keep the service working, it runs on our legitimate interest in a functioning product rather than on your analytics choice; you can object to that processing using the contact details below.
Visitors whose browser time zone places them in the EU, EEA, UK, or Switzerland, or whose location we cannot tell, are asked before any analytics storage is created. Elsewhere analytics is enabled by default. In either case you can change your decision at any time by opening , and withdrawing is as straightforward as granting.
You can also block or delete cookies and site data through your browser settings. Because we set no essential cookies of our own, this will not stop the service from working, though it will reset the choices stored in your browser.
Who Receives Your Information
We use the following service providers to run Diadem Edge. Each processes information on our behalf and only for the purpose listed.
- Cloudflare, Inc. serves the website. It receives your IP address and the pages you request.
- Railway Corporation hosts our application server and the in-memory store that holds rate-limit counters. It receives every request to our API, including your IP address and any search text, and keeps server logs.
- Supabase, Inc. hosts our database, which stores feedback and error reports including any email you gave.
- GitHub, Inc. stores our encrypted weekly database backups, which include feedback and error reports.
- PostHog, Inc. receives analytics events when analytics is active.
- Functional Software, Inc. (Sentry) receives error reports.
Market data, news, and filing providers receive requests from our servers, not from you, and receive none of your information. We may also disclose information when required by law, to protect rights or safety, or as part of transferring the service to a new operator, in which case this policy would continue to apply to information collected under it.
How Long We Keep It
- Feedback, error reports, and emails you send: kept until you ask us to delete them, so that we can follow up on corrections. Once deleted, they remain in encrypted backups for up to 90 days, after which each backup is deleted automatically.
- Rate-limit counters: your IP address is held in memory for no more than two hours and then expires automatically.
- Server logs: kept by Railway for the log retention period of our hosting plan and then deleted.
- Analytics events: kept by PostHog for up to one year.
- Error reports: kept by Sentry for up to 90 days.
- Browser storage: the PostHog cookie lasts up to 365 days; the consent and theme settings stay until you clear your browser's site data.
Your Choices and Rights
Depending on where you live, you may have the right to access, correct, or delete the personal information we hold about you, to receive a copy of it, to restrict or object to how we use it, and to withdraw consent where we rely on consent. You can switch analytics off at any time with .
To make a request, email hello@diademedge.com. For feedback you sent, telling us the email address you used or roughly when and what you wrote is usually enough for us to find and delete it. Because analytics is tied only to a random device identifier, we generally cannot link it to you unless you give us that identifier. We respond within one month.
If you are in the EU, EEA, or UK, you also have the right to complain to your local data protection authority. We would appreciate the chance to address your concern first.
Children's Privacy
The service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has sent us personal information, contact us and we will delete it.
International Data Transfers
The providers listed above are based in the United States and may process information there or in other countries where they operate. If you use the service from the EU, EEA, or UK, your information is therefore transferred outside those areas. The United States has not received a general adequacy decision covering all transfers, so we rely on the safeguards in our providers' data processing agreements, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, and on the EU-U.S. Data Privacy Framework where a provider is certified under it. You can avoid the analytics transfer entirely by declining analytics.
Security
We use reasonable technical and organisational safeguards to protect personal information, including encrypted connections, encrypted backups, and restricting access to feedback to the operator. No system is completely secure, and we cannot guarantee absolute security.
Changes and Contact
We may update this policy from time to time, and the date at the top of this page shows when it last changed. If we start collecting new kinds of personal information, for example by adding accounts, we will update this policy before doing so. Questions and privacy requests can be sent to hello@diademedge.com.