Privacy policy

Information we collect

• Account details if you sign up: email address, display name, and how you sign in (Google or email and password). We never see your Google password.
• Preferences and watchlists you save to your account.
• Usage data: pages viewed, symbols searched, how fast pages load, and the type of device and browser (see “First-party analytics” below). Google Analytics may also derive an approximate location from your IP address.
• Messages you send us through the contact form.

Brokerage files and your journal

Importing your own brokerage files requires a free account. When you import a file, we save the transactions from it (dates, symbols, quantities, prices, fees and an account nickname) to your account, so your journal is there on every device you sign in on. We don’t keep the original file.

Until you verify your email, or if you turn journal sync off, your journal is kept only on the device you used. You can turn sync off and delete your journal data at any time in Account → Journal. The sample journal is not linked to you and is not saved.

Cookies and similar technologies

We use cookies and local storage to keep you signed in, remember settings such as dark mode, measure how the site is used, and show advertising.

• Necessary: sign-in, security and your privacy choices.
• Analytics: Google Analytics cookies for counting visits and finding problems, only with your consent where the law requires it. Our own first-party analytics sets no cookie.
• Advertising: set by Google and other ad vendors, as described below.

Advertising: Google and third-party vendors

Wenlo is supported by ads served through Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your previous visits to this site and other sites. Google’s use of advertising cookies lets it and its partners serve ads to you based on those visits.

Other third-party vendors and ad networks may also serve ads on Wenlo and use cookies for the same purpose. Signed-in premium subscribers do not see ads, and no ads appear on pages that show your journal or account data.

Opting out of personalized ads

• Turn off personalized advertising in Google’s Ads Settings.
• Opt out of other vendors’ personalized ads at aboutads.info (U.S.) or youronlinechoices.eu (EU/UK).
• Use our Do not sell or share my personal information page, or send a Global Privacy Control signal from your browser; we honor it.
• Visitors in the EEA, UK and Switzerland are asked for consent before any personalized ads or analytics load, and can change their choice at any time.

If you opt out, you will still see ads, but they won’t be based on your browsing.

First-party analytics

To see which pages people use, how they find us and which pages load slowly, Wenlo records each page view itself, on our own servers. It is never sent to, shared with or sold to anyone else.

• What we record: the page (without its query string, apart from campaign tags such as utm_source), when, the name of the site that sent you (for example google.com, never the full address), the device type (phone, tablet or computer), the browser family, and how fast the page loaded.
• If you aren’t signed in: no cookie is set for this. Visits are grouped by an identifier made by scrambling (hashing) your IP address and browser with a secret that changes every day, so it can’t be turned back into your address and can’t link your visits across days. Your IP address and full browser details are not stored.
• If you are signed in: page views are linked to your account, so we can help you when you contact us and see how the site is used. We also record when you sign in and how (Google or email), without your IP address or browser details. Only our staff can see them.
• Invite links: if you open a link with an invite code (?ref=), your browser keeps that code (the last three codes at most) in its local storage for 30 days and sends it with your page views, so we can see which invitation brought you. Nothing is stored for links without a code, and we don’t record codes we don’t recognize, even though your browser keeps them. You can clear them by clearing this site’s data in your browser.
• Sign-up source: when you create an account, we keep with it where the visit that led to it came from: the first page you viewed that day, the page you landed on, the referring site (for example google.com), campaign tags and the invite code, if any. It is deleted with your account.
• How long: individual page views are deleted after 90 days; we keep daily totals that don’t identify anyone. Deleting your account deletes the page views, sign-in records and sign-up source linked to it.

Google Analytics and advertising partners

We also use Google Analytics to understand which pages are useful and where the site is slow. Google Analytics and Google AdSense are third parties: they receive information about the pages you view under their own privacy policies. Google Analytics follows the same consent choices as advertising (Google Consent Mode). We do not send your journal data or email address to them. Google Analytics data is kept for 14 months or less.

How we share information

We do not sell your name or email address. We share data with service providers that run the site for us (hosting, sign-in, email delivery, analytics and advertising), with market data providers only as needed to show quotes, and when the law requires it.

Your choices: export and deletion

Signed-in users can export their data (profile, watchlists and synced journal) as a file, and delete their account, from Account → Privacy. Deleting your account removes your profile, watchlists, synced journal and the page views linked to your account immediately, apart from records we must keep by law; backup copies age out within 30 days. Depending on where you live, you may also have rights to access, correct or limit use of your data; contact us to use them.

Children

Wenlo is for adults. Accounts require users to confirm they are 18 or older, and we do not knowingly collect data from children.

Changes and contact

We will post changes here and update the date above. Questions? Use the contact form and choose “Privacy request”.