Skip to content
Allocater
Join the list Test results
Privacy

Privacy Policy

This is a short policy because Allocater collects almost nothing. That is not modesty — it is the same fact the whole business rests on. A publication that knows nothing about its readers cannot tailor anything to them, and does not have to be trusted not to.

Draft, published for review. Published ahead of launch and marked as a draft until counsel has reviewed it. It describes what the site does today, not what it might do later; anything planned rather than live is labelled planned below. Effective date: {{EFFECTIVE_DATE}}.

1. Who this is

{{LEGAL_ENTITY_NAME}}, trading as Allocater, is the controller of the personal information described here. Postal address and contact details are in section 11.

2. What is collected

When you submit the signup form on this site, the following is stored:

  • Your email address. Required. Stored in lower case.
  • An optional product-interest value — Kratos, Athena, both, or still deciding — only if you choose one from the dropdown.
  • A source tag recording which form on the site you used (for example forward-log), so we know which pages actually work.
  • A timestamp of the submission.

That is the whole record. There is no name field, no phone field and no free-text field. The form contains one hidden field that humans never see and never fill; if it arrives filled, the submission is treated as a bot and discarded.

IP address. Your IP address is used in server memory to rate-limit signups (five per hour) and is not written to the subscriber record. Standard web-server request logs may contain IP addresses and are kept only as long as needed for security and troubleshooting.

The product-interest value affects only which emails are sent to you. It never affects what any system publishes. Kratos and Athena publish one identical output to everyone, generated by code from public market data before any subscriber list is consulted. There is no version of the signal that depends on anything Allocater knows about you, because there is nothing Allocater knows about you.

3. What is deliberately not collected

Allocater does not collect, request, receive or store any of the following:

  • your holdings, positions, portfolio, account balances or transaction history;
  • exchange, brokerage or wallet linkage of any kind, and never any API key;
  • income, net worth, tax position, employment or financial-account information;
  • risk tolerance, investment objectives, time horizon or any suitability answer;
  • government identification, date of birth or KYC documentation;
  • precise geolocation, biometric data, or any special-category data.

None of this is collected because none of it is used. Allocater has no mechanism to acquire it and no product that could consume it.

4. What it is used for

  • To send you the emails you signed up for: the forward-log recap and launch notices.
  • To decide which of those emails to send, using the product-interest value.
  • To operate and secure the site — rate limiting, abuse prevention, troubleshooting.
  • When checkout opens: to provide the subscription you paid for, and to send the transactional emails that go with it (receipts, renewal notices, access details).

Under the GDPR, where it applies, the legal basis is your consent for marketing email (withdrawable at any time by unsubscribing), Allocater's legitimate interest in securing its own site, and performance of a contract for anything relating to a paid subscription.

5. Cookies, analytics and the pixel

Today, this site sets no cookies, runs no third-party analytics, and stores nothing at all in your browser — no cookies, no localStorage, no sessionStorage. There is no preference to remember and nothing to opt out of. You can verify this yourself in your browser's developer tools, under Application, in a few seconds; that is a faster check than taking this paragraph's word for it.

Planned: the Meta pixel. Allocater intends to advertise, and expects to install the Meta (Facebook/Instagram) pixel on this site. When it is live, this section will say so without the word "planned", and the pixel will record page views and signup events and share them with Meta Platforms, Inc. for advertising measurement and audience building. Under the CCPA/CPRA that transfer may constitute "sharing" for cross-context behavioural advertising; a "Do Not Sell or Share My Personal Information" control will be published before the pixel is enabled, alongside a consent banner where one is legally required. Browser-level Global Privacy Control signals will be honoured.

6. Who else sees it

Allocater does not sell personal information, has never sold it, and does not disclose it to third parties for their own marketing. The complete list of processors that touch it:

  • Hosting — the signup record is stored on Allocater's own server at {{HOSTING_PROVIDER_AND_SERVER_LOCATION}}. It is not held in a third-party CRM or marketing platform.
  • Email delivery — Resend, Inc. or Google Workspace, depending on which transport is configured, purely to deliver the mail.
  • Payments (when checkout opens) — Stripe, Inc. Stripe collects and holds card details directly under its own privacy policy. Allocater never sees, receives or stores a card number.
  • Advertising (planned) — Meta Platforms, Inc., as described in section 5.

Information may also be disclosed if required by law, or transferred to a successor if the business is sold — in which case this policy travels with it and you will be told.

7. How long it is kept

Signup records are kept until you unsubscribe or ask for deletion. After an unsubscribe, your address is moved to a suppression list and kept there — that is the only way to guarantee nothing is ever sent to you again by accident. If you want the suppression entry removed as well, ask and it will be, on the understanding that a later re-signup would then be possible.

Records relating to a paid subscription are kept for as long as tax and accounting law requires. Server logs are kept short-term for security purposes.

8. Your rights

Every unsubscribe link works, on every email, and the request is honoured promptly. Beyond that, you may ask to access, correct, delete or receive a copy of what is held about you, and you may object to or restrict processing. There is no charge and no retaliation.

California (CCPA/CPRA). In the statute's categories, Allocater collects Identifiers (an email address) and, when the pixel is live, internet or other electronic network activity. It collects no commercial information about your holdings or transactions, no financial account information, no geolocation, no biometric or sensitive personal information, and draws no inferences to build a profile of you. Allocater does not sell personal information. You have the rights to know, delete, correct, opt out of sharing, and not be discriminated against for exercising them.

Europe and the UK (GDPR). You have the rights of access, rectification, erasure, restriction, portability, objection, and to withdraw consent at any time without affecting prior processing. You may also complain to your national supervisory authority. Where data is transferred outside the EEA or UK, it is transferred to processors relying on the EU–US Data Privacy Framework or on standard contractual clauses.

To exercise any of this, email {{PRIVACY_CONTACT_EMAIL}}. Identity is verified by replying from the address on the record; nothing more is asked for, because nothing more is held.

9. Children

This publication is not offered to anyone under 18, and Allocater does not knowingly collect information from anyone under 18. If such information has been collected, tell us and it will be deleted.

10. Security, stated honestly

The site is served over TLS, the signup endpoint is rate-limited, and access to the stored list is restricted to the operator. No system is perfectly secure, and Allocater will not claim otherwise. The strongest security control here is the one already described: the most sensitive thing that could possibly leak is an email address and a one-word product preference, because nothing else is ever collected.

11. Changes, and how to reach us

If this policy changes, the effective date above changes, and material changes are notified by email before they take effect. Superseded versions are kept and available on request.

{{LEGAL_ENTITY_NAME}}
{{BUSINESS_POSTAL_ADDRESS}}
{{PRIVACY_CONTACT_EMAIL}}

See also the publisher statement and terms, which set out the same fact from the other direction: every subscriber receives identical content, and nothing published is tailored to any reader.