Privacy

Private research stays private

Last updated September 16, 2026.

Account and workflow data

Authentication uses Better Auth with the Watchlist's PostgreSQL database. If email sign-in is enabled, Resend delivers one-time sign-in links. The Watchlist stores your profile, saved products, private product notes, named evaluations, candidate membership, company follows, and update-read state.

Notes, saves, evaluation membership, evaluation text, and identity details are never exposed in company-facing analytics.

Product analytics

The Watchlist records an allowlisted set of public profile views, update views, outbound clicks, and product-share actions using an opaque first-party cookie. The database stores only a one-way HMAC pseudonym that rotates each UTC day. Vercel Analytics runs only on Vercel deployments.

A product-share event records only the product slug. It does not record the destination or channel, share text, copied URL, user identity, notes, or search content.

Optional PostHog events record public page type and slug, anonymous search-result buckets, and workflow action type. Autocapture, session replay, person profiles, names, emails, note contents, evaluation contents, and search text are disabled or excluded.

Company reporting

Future company reports may include aggregate profile views, outbound clicks, product-share counts, company-follow counts, and update engagement. Engagement rows with fewer than 10 distinct daily pseudonyms are omitted, and follow counts below 10 are suppressed rather than reported as zero. Contact sharing requires a separate explicit opt-in and is not offered in the current interface.

Editorial submissions

Correction and company-update submissions are private until reviewed. Contact email is used only to clarify the submission. A short-lived first-party cookie limits repeated submissions.