Privacy Policy

MarketPicks.ai collects only the information needed to operate, secure, improve, and evaluate the platform. You can read every page without an account, without an email address, and without accepting a marketing cookie. We do not sell personal information.

Contact form entries may include your name, email address, topic, and message. Market data requests may include ticker symbols, pages viewed, device information, browser information, and basic analytics signals.

Last updated: October 2026. By using the site you consent to the handling described below: standard request data processed by our host, cookieless aggregate analytics, ad delivery by Google, and storage of anything you choose to submit through a form.

Information you give us

Daily digest signup. If you enter your email in the signup form or the daily popup, the address is stored in a Cloudflare D1 database table together with where you signed up, your IP address, and your browser's user-agent string. The IP and user-agent are recorded at submission time to make duplicate and abusive signups easier to spot; they are not used to build a profile of you. A welcome message goes out immediately through a form-delivery service, and the scheduled daily digest goes to addresses that have not unsubscribed. Every message we send explains how to stop: reply with "unsubscribe" or write to support@marketpicks.ai, and the address is marked unsubscribed.

Contact form. The contact page posts your name, email address, chosen topic, and message to FormSubmit (formsubmit.co), a form-delivery service that forwards it to our inbox. The message itself is not written to our database; it exists as email. A hidden honeypot field filters obvious spam. Writing to us does not put you on any mailing list.

Accounts. Registration and sign-in endpoints exist, but the account tables are not provisioned yet, so those routes answer "Accounts are not open yet" and every page works without signing in. If accounts open later, they will hold your email address, a display name, and a salted, iterated hash of your password — never the password itself — plus a session row that expires after 30 days. Signing in sets one cookie, mp_session, which is HttpOnly so page script cannot read it, Secure, SameSite=Lax, and good for 30 days. It carries a random token, not your email or password, and logging out clears it.

Information collected automatically

Every request carries standard web-server data — IP address, user agent, timestamp, and the page requested. Our host, Cloudflare, processes that data to deliver the page, route traffic, cache content, and block abusive requests. That is delivery infrastructure, not a profile.

Analytics are provided by Plausible. It counts page views with no cookies, no cross-site identifiers, and no personal profiles: which page was visited, where the visit came from, and coarse browser, device, and region detail. We use it to see which pages are useful and which are broken. It cannot follow you to other sites.

Some preferences stay in your browser only. Your watchlist lives under the localStorage key marketpicks-watchlist, and the daily-popup flags mp-daily-popup-dismissed and mp-daily-popup-collapsed remember that you closed it. None of these values is sent to us. Clearing site data in your browser removes them permanently.

Cookies

MarketPicks itself sets one cookie — mp_session — and only after a successful sign-in. Our own pages set no analytics or advertising cookies. Two third parties can set their own: Google AdSense loads on the site to display ads and may store cookies or read device identifiers to choose and measure ads, and Plausible sets none at all. You can delete or block cookies in your browser settings; the site still works, though a blocked session cookie keeps you signed out. Google's advertising controls are in your Google account Ads Settings, and Google explains its own practices in its privacy policy.

Advertising

Ads on MarketPicks are served by Google AdSense and are labelled as such. We do not hand your email address to advertisers, and nothing you look at on the site is packaged into a profile for sale. An advertisement sitting next to a signal card is paid placement, not an endorsement of the ticker on the page, and we do not choose which advertiser appears.

Who can see the data

A short, complete list of the parties involved: Cloudflare hosts the site, runs the edge functions, stores the database, and caches pages. Plausible sees aggregate page statistics. Google runs advertising through AdSense. FormSubmit carries contact and signup form submissions to us. Gmail SMTP sends the scheduled digest, and SendGrid is configured as the SMTP provider for system alert email. AI model providers — Groq and OpenRouter among them — receive the prompt text for an analysis or question you requested; those requests originate from our servers and contain ticker symbols, market context, and your question, not your name, email, or watchlist. Market-data vendors such as the public Nasdaq quote endpoint, Finnhub, Alpha Vantage, and news feeds receive ticker symbols from the same servers. Each of these parties processes data under its own terms and privacy policies.

We will disclose information if a valid legal compulsion requires it, and where we are permitted to, we will tell you first.

Retention

Subscriber rows stay until you unsubscribe or ask for deletion. Contact messages stay in our mailbox until we remove them. Session rows expire on their own after 30 days. Quote and analysis caches expire within minutes and are overwritten by the next refresh. Server logs are kept only as long as our host retains them for debugging and abuse detection.

Your choices and requests

To stop the digest, reply "unsubscribe" or email support@marketpicks.ai. To ask what we hold about you, to correct it, or to have it deleted, use the same address or the contact form and name the email address you subscribed with — that is the key we need to find the row. We will delete or correct it and confirm when it is done. To clear everything stored locally, clear site data for marketpicks.ai in your browser. To limit ad personalization, use Google Ads Settings. Content blockers can stop the Plausible script from loading at all; the pages will still work.

What not to send us

Do not submit sensitive financial account information, brokerage credentials, Social Security numbers, or private investment records through this site. We have no field for them and no way to protect something you send as free text that was never meant to leave your browser.

Children, security, and other sites

MarketPicks is written for adults doing their own market research. It is not directed at children, and we do not knowingly collect information from anyone under 13; tell us if that has happened and we will remove it. Traffic is served over HTTPS, passwords are stored only as salted hashes, and session cookies are HttpOnly and Secure. No method of transmission or storage is completely secure, which is one more reason never to send credentials here.

Reference links on the history and research pages point to third-party sites such as Wikipedia and Britannica. Those sites run their own policies, and this one stops at the click.

Changes and contact

This page is the policy. When the way we handle data changes, we update the text here and refresh the date above rather than emailing a new version. Continued use of the site after an update means you accept the revised description. Questions, deletion requests, and corrections go to support@marketpicks.ai or through the contact form.

This site provides market research tools only. It is not financial advice, investment advice, tax advice, or legal advice. AI-generated analysis may be inaccurate.