Privacy Policy

Last updated August 2026

This explains what Valtage, operated by Jihoo Ahn, collects about you and what happens to it. The short version: we collect what an account needs to work, we don't track you across the web, and we don't sell anything about you.

What we collect

Account details: your name and email address, plus your password stored as a bcrypt hash. We never store the password itself and cannot read it.
Portfolio holdings: if you choose to enter them: the ticker, share count and average cost. These exist so the site can show the algorithm's score against what you own. They are visible only to your account.
Waitlist email: if you ask to be told when paid membership opens, we store that address and which page you signed up from. No account is required, and the address is used for that one announcement, not a newsletter, and never passed to anyone else.
Page views: which page was viewed, when, and the site you arrived from (its domain only). To count visitors without identifying them, your IP address and browser are combined into a one-way hash that includes today's date and is then discarded, so we can say how many people visited, but today's number cannot be linked to tomorrow's, and none of it can be traced back to you. This runs on our own server: no analytics company is involved and no cookie is set. If your browser sends Do Not Track or Global Privacy Control, nothing is recorded at all.
Error reports: when something breaks, the message, the page it happened on and the technical stack trace are written to our own database so it can be fixed. No third-party monitoring service receives them.
Technical logs: your IP address and request details, used to apply rate limits, investigate errors and defend against abuse.

We do not ask for and do not want financial account numbers, brokerage credentials, or government identifiers. Please don't send them.

Cookies

One cookie, and it is strictly necessary: a signed session cookie that keeps you logged in. It is HTTP-only, so scripts can't read it, and it expires after 30 days. There are no advertising cookies, no third-party trackers and no cross-site profiling. Our analytics run on our own server and set no cookie at all, which is why the site has no cookie banner to click through.

Who else sees your data

Market data providers supply quotes and price history. The site calls them from its own server, so your IP address and identity are never passed to them: they see our server asking about a ticker, not you.
Our email provider handles password-reset messages, and therefore processes your email address when one is sent.
Our hosting provider operates the server the site and its database run on.

We do not sell, rent or trade personal data, and we don't share it for anyone else's marketing. We would disclose data if legally required to, and would tell you unless prohibited.

How it's protected and how long we keep it

Traffic is encrypted in transit. Passwords are hashed with bcrypt. Password-reset links are stored only as hashes, expire after an hour, and work once. No system is perfectly secure, but data is kept to the minimum that makes the product work.

Account data is kept while your account exists. Delete the account and it goes with it, along with your holdings, in the same moment. Waitlist addresses are kept until paid membership opens and the announcement goes out, or until you remove yours, whichever comes first; deleting your account removes it too. Page-view records are deleted after 180 days and error reports after 60. Technical logs are short-lived and age out on their own.

Your choices

You can ask us to show you what we hold, correct it, export it, or delete it outright, including your whole account. Depending on where you live (the EU/UK under GDPR, California under CCPA, and others), some of these are legal rights; we honour the requests regardless of where you live.

You don't have to ask us for any of it. All four are built into your account, so they happen immediately and don't depend on anyone reading a message:

See and export: your account page downloads everything we hold about you as a file, including what is deliberately left out and why.
Correct: change your name there. Changing your email isn't self-service yet, because without a verification step it would let an account be moved onto an address someone doesn't control.
Delete: the same page erases your account, your holdings, your waitlist entry and any Founders code, permanently, straight away. It asks for your password first, because it cannot be undone.

We won't charge you or treat you differently for using any of this. For anything the controls above don't cover, write to us at valtagepro@gmail.com.

Children

The site isn't intended for children, and we don't knowingly collect their data. If a child has created an account, contact us and we'll remove it.

Changes

If this policy changes, the date at the top changes with it. Material changes to how we handle existing data will be communicated to account holders by email.

Contact

This site is operated by Jihoo Ahn, based in Dubai, United Arab Emirates. For privacy questions and data requests: valtagepro@gmail.com.

What we collect

Account details: your name and email address, plus your password stored as a bcrypt hash. We never store the password itself and cannot read it.

Portfolio holdings: if you choose to enter them: the ticker, share count and average cost. These exist so the site can show the algorithm's score against what you own. They are visible only to your account.

Waitlist email: if you ask to be told when paid membership opens, we store that address and which page you signed up from. No account is required, and the address is used for that one announcement, not a newsletter, and never passed to anyone else.

Page views: which page was viewed, when, and the site you arrived from (its domain only). To count visitors without identifying them, your IP address and browser are combined into a one-way hash that includes today's date and is then discarded, so we can say how many people visited, but today's number cannot be linked to tomorrow's, and none of it can be traced back to you. This runs on our own server: no analytics company is involved and no cookie is set. If your browser sends Do Not Track or Global Privacy Control, nothing is recorded at all.

Error reports: when something breaks, the message, the page it happened on and the technical stack trace are written to our own database so it can be fixed. No third-party monitoring service receives them.

Technical logs: your IP address and request details, used to apply rate limits, investigate errors and defend against abuse.

We do not ask for and do not want financial account numbers, brokerage credentials, or government identifiers. Please don't send them.

Who else sees your data

Market data providers supply quotes and price history. The site calls them from its own server, so your IP address and identity are never passed to them: they see our server asking about a ticker, not you.

Our email provider handles password-reset messages, and therefore processes your email address when one is sent.

Our hosting provider operates the server the site and its database run on.

We do not sell, rent or trade personal data, and we don't share it for anyone else's marketing. We would disclose data if legally required to, and would tell you unless prohibited.

How it's protected and how long we keep it

Your choices

You don't have to ask us for any of it. All four are built into your account, so they happen immediately and don't depend on anyone reading a message:

See and export: your account page downloads everything we hold about you as a file, including what is deliberately left out and why.

Correct: change your name there. Changing your email isn't self-service yet, because without a verification step it would let an account be moved onto an address someone doesn't control.

Delete: the same page erases your account, your holdings, your waitlist entry and any Founders code, permanently, straight away. It asks for your password first, because it cannot be undone.

We won't charge you or treat you differently for using any of this. For anything the controls above don't cover, write to us at valtagepro@gmail.com.