RaelInfoStarter notice · Review and complete before public launch
Privacy Notice
This page describes the data behavior of the RaelInfo website, which uses Cloudflare Pages/Pages Functions, Cloudflare D1, and Supabase Auth in production. The site operator must review it against the actual hosting configuration, legal entity, third-party services and applicable law. This template is not legal advice.
1. Calculator inputs
Calculations run in the visitor's browser. Calculator balances, income, debt amounts and other calculator inputs are not intentionally sent to RaelInfo API endpoints. When a visitor looks up a stock symbol, news topic, or SEC CIK, that query is sent to the RaelInfo server and then to the relevant public or configured data provider. Do not enter sensitive information on a shared or public device.
2. Local browser storage
RaelInfo can store calculator values and display preferences in the browser's local storage so a visitor can return to a scenario. This data is not encrypted by the application, is not synced between devices and may be accessible to anyone with access to the browser profile. The JSON export feature creates a file on the visitor's device. Visitors should protect exported files as they would other personal financial records. A clear-data control is provided in the application.
3. Public data services
The website requests indicative crypto-market data from CoinLore, daily currency reference-rate data from Frankfurter, article metadata from GDELT, and (when configured) stock data from Alpha Vantage, Financial Modeling Prep or EOD Historical Data. SEC filing metadata is requested from data.sec.gov when the operator has configured the required identifying SEC User-Agent. Those requests do not include the amounts entered in calculators. The providers and network infrastructure may process technical connection information (such as IP address, request metadata and user-agent data) under their own policies.
4. Cookies, analytics and advertising
The application does not include an analytics provider, advertising pixel, behavioral advertising cookie or marketing email platform by default. Browser local storage is used for preferences and optional calculator scenarios. Optional accounts use an email address and password. Supabase Auth manages password credentials, email confirmation and authentication sessions; RaelInfo does not store raw passwords. The Pages Functions use HttpOnly cookies for the Supabase access and refresh tokens, plus a separate CSRF token for state-changing requests. Supabase Auth is a third-party service provider and processes account information under its own privacy terms. If the operator later adds analytics, advertising, chat, embedded content, email marketing or other integrations, this notice must be updated and any legally required consent must be obtained.
5. Affiliate links
No affiliate offers are configured by default in this build. If the operator adds affiliate or sponsored links, the relevant placement must disclose the material connection clearly and conspicuously. Third-party destinations may use their own cookies and tracking technologies under their own privacy notices.
6. Hosting and security logs
Cloudflare Pages Functions receive API requests for authentication, stock lookups, news searches, SEC filing lookups and portfolio actions. Supabase Auth processes email/password authentication. Cloudflare D1 stores the RaelInfo account profile and portfolio positions. Market-data requests may be forwarded to CoinLore, Frankfurter, GDELT, SEC EDGAR and any configured stock-data provider. API keys are stored as server-side Cloudflare secrets and are not included in static frontend files. These providers may process IP addresses, query parameters and technical request metadata under their own terms and privacy notices. The operator must update this section to identify the actual host, retention practices and any additional processors used by the deployed site.
7. Retention and deletion
Calculator scenarios stored in local storage remain on the visitor's device until removed by the visitor or browser. Portfolio positions are stored in Cloudflare D1 and associated with the authenticated Supabase user ID. Supabase Auth manages credentials and sessions separately. Signed-in users can request account and portfolio deletion from the dashboard when the operator has enabled the required Supabase administrative secret. D1 retention, backups and deletion behavior are subject to the configured Cloudflare plan and operator procedures. Operator support and a monitored privacy contact should also be provided for privacy requests.
8. Children
The site is intended as a general financial-information resource and is not designed to collect personal information from children. The operator should adapt this section if the intended audience or features change.
9. Operator and contact
Before launch, replace this sentence with the operator's legal name and a monitored privacy contact email/address. Also identify the applicable jurisdiction and any required privacy representative.
10. Changes
This notice should be updated whenever the site's data practices, integrations, hosting, or legal obligations change. Display the actual effective date after review.