Privacy Policy
Effective October 20, 2026
This policy explains what personal information 10kGenie LLC collects, why, and what choices you have.
1. Summary
- You can use most of 10KGenie without an account. Then we collect only standard server logs and, if you arrived from an ad link, the cookie described in section 4.
- With an account, we keep your email address and the lists and portfolios you create.
- We do not sell your personal information. We do not share it with advertisers.
- You can delete your account and its data at any time.
2. Information We Collect
When you create an account:
- Your email address.
- If you sign in with Google: your Google account ID and email address. We do not get your Google password or contacts.
- If you sign in with Apple: your Apple account ID, the email address Apple shares with us (this can be a private relay address if you choose "Hide My Email"), and your name if you choose to share it. We do not get your Apple password.
What you save on 10KGenie:
- Watchlists, portfolios and holdings (companies, number of shares and the cost you enter), notes, thesis rules, recently viewed companies and display settings.
Portfolio holdings can reveal information about your finances. We use them only to show you your own portfolio. We never share them, sell them or use them for advertising.
If you subscribe to Pro:
- Stripe collects your payment card and billing address. We keep only your subscription status, your plan and a Stripe customer reference. Stripe uses your billing address to calculate sales tax.
Automatically:
- Server logs: IP address, browser type, the page requested (including any campaign tags in the link) and the time. They contain no cookies. We use them to run and secure the site, to fix errors and to count visits from our ads.
- Sign-in protection: we count sign-in requests per email address and per IP address, to stop abuse. These counts are deleted automatically within 2 days.
- How you found us: see section 4.
3. How We Use Information
- To sign you in and keep your account secure.
- To provide your watchlists, portfolios and Pro features.
- To process payments and calculate sales tax.
- To send you sign-in links, billing emails and, if you leave it on, the weekly digest of filings for the companies you follow.
- To send product news, only if you turn it on.
- To learn which advertising and links bring new users (section 4).
- To protect the site against fraud and abuse, and to meet legal duties.
4. Cookies and Similar Technology
We use only first-party cookies, set by 10kgenie.com. We do not use third-party advertising or analytics cookies.
| Cookie | Purpose | Lasts |
|---|---|---|
| tkg_session | Keeps you signed in | 30 days |
| tkg_oauth | Protects Google sign-in | 10 minutes |
| tkg_apple | Protects Apple sign-in | 10 minutes |
| tkg_login | Lets an emailed sign-in link sign you in at once in the browser that asked for it | 15 minutes |
| CloudFront-Policy, CloudFront-Signature, CloudFront-Key-Pair-Id | Give Pro accounts access to Pro data | 24 hours |
| tkg_ft | Remembers how you first came to 10KGenie: the ad source, campaign and ad click ID from the link, and the first page you saw | 30 days |
About tkg_ft. When you first arrive from a link that carries campaign information (for example an ad on Reddit), we note that information. If you create an account within 30 days, we save it with your account. We use it only to measure which advertising works. We do not send it to advertising networks. We do not set it if your browser sends a Global Privacy Control signal, or if you visit from the European Union, the EEA, the United Kingdom or Switzerland.
The site also saves display settings, such as light or dark mode, in your browser's local storage. That information stays on your device.
5. Who We Share Information With
We share personal information only with service providers that run parts of 10KGenie for us, under contracts that limit their use of it:
| Provider | What It Does | Data |
|---|---|---|
| Amazon Web Services | Hosting, database, sign-in and digest email delivery | All account data, stored in the United States |
| Stripe | Payments, subscriptions and sales tax | Email, payment and billing details, and the campaign information from tkg_ft |
| "Sign in with Google", only if you use it | Your Google sign-in | |
| Apple | "Sign in with Apple", and forwarding of our emails if you use "Hide My Email" | Your Apple sign-in, and the emails we send you |
We may also disclose information if the law requires it, to protect the rights and safety of our users or of 10KGenie, or as part of a merger or sale of the business. A new owner would have to follow this policy.
We do not sell or share personal information for cross-context behavioral advertising, as California law defines those terms.
6. How Long We Keep Information
- Account data: until you delete your account.
- When you delete your account, we delete your profile, lists, portfolios, notes and settings at once. Database backups keep a copy for up to 35 days, then it is gone.
- We keep a one-way code made from your email address (a hash), so that the 7-day free trial is used only once per email address. It cannot be turned back into your email address.
- Stripe keeps payment and invoice records for as long as tax and financial law requires.
- Server logs: website access logs 60 days, account service logs 30 days. Then they are deleted.
7. Your Choices and Rights
- Emails: turn off the weekly digest and product news on the Account Settings page, or use the unsubscribe link in any digest. Sign-in and billing emails cannot be turned off while you have an account.
- Access and correction: you can see and change your saved data on My 10KGenie.
- Deletion: delete your account on the Account Settings page, or email us.
- Copy of your data: email us and we will send it to you.
- California residents have the right to know, delete and correct personal information, and to opt out of sale or sharing. We do not sell or share it. We honor Global Privacy Control signals. We will not treat you differently for using these rights.
To make a request, email support@10kgenie.com from the email address on your account. We answer within 30 days.
8. Security
We protect data with encryption in transit and at rest, single-use sign-in links, signed session cookies and limited staff access. No system is fully secure. If a breach affects your personal information, we will tell you as the law requires.
9. Children
10KGenie is not for children. We do not knowingly collect information from anyone under 18. If you think a child gave us information, email us and we will delete it.
10. Visitors Outside the United States
10KGenie is run from the United States, and our data is stored there. We do not target visitors in the European Union, the EEA, the United Kingdom or Switzerland.
11. Changes to This Policy
We will post changes on this page with a new effective date. For a material change, we will email account holders before it applies.
12. Contact
10kGenie LLC, a California limited liability company. Email: support@10kgenie.com