Privacy policy

Filing Flows draws SEC filings as charts. It is run by an individual developer. This page lists everything it stores about you and who handles it. To ask anything, open an issue at github.com/eurikamonica/filing-flows.

Reading the site

Nothing personal is collected. There are no analytics, no tracking cookies and no ads. Your browser keeps your theme and filter choices in its own storage; they are never sent anywhere.

If you sign up for alerts

• Your e-mail address, to sign you in with a one-time code and to send the alerts and reports you ask for.
• Your settings: the companies and sectors you follow, the revenue threshold, the starred list, how often and how you want alerts, whether the daily report covers only the companies you follow or every company that filed, whether charts show company-reported or calculated figures and revenue lines that do not add up, whether charts can be dragged and zoomed with the mouse, and your browser’s time zone (for example Asia/Shanghai), so the daily report arrives at the hour you chose in your own time.
• A delivery log: which charts were e-mailed to you and when, so nothing is sent twice. Entries are deleted after 120 days.
• Reports you ask for with “Email me” or the home page’s daily report: company and quarter or fiscal year (or the filing date), time and whether it was sent.
• Comparisons and companies you ask for (“Compare any two periods”, “Build its charts”): company, the two periods, time, and the chart drawn for you.
• Your sign-in session is kept in your browser so you stay signed in.

This information is used only to run the alerts. It is not sold, rented or shared for advertising.

Android app

The app shows this website. To notify you about new charts it keeps your follow settings and a list of charts it has already seen on your phone, and it downloads the public list of charts every 30 minutes. It has no ads, no analytics and does not read the advertising ID.

Who handles the data

• Supabase stores accounts and settings and issues the sign-in codes.
• An e-mail provider (Gmail by default) delivers the codes, alerts and reports.
• GitHub hosts the site and runs the scheduled jobs; like any web host it may log IP addresses for security.
• jsDelivr delivers the sign-in library, and Google Fonts the typefaces, to your browser.

Your choices

• Change or stop alerts at any time on the Alerts page; every e-mail has an unsubscribe link.
• Delete my account on the Alerts page removes your address, settings, delivery log and requests at once.
• For a copy of what is stored about you, use the contact at the top of this page.

Security

All traffic uses HTTPS. In the database each person can read and change only their own settings; the delivery log is visible only to the sending job.

Children

The site is not meant for children under 13; please do not sign up if you are under 13.

Changes

If this policy changes, the date above changes.