Privacy Policy
Last updated: August 2026. The short version: this service does not create accounts, does not track you, and stores no personal data.
1. What we collect
Nothing that identifies you. The frontend runs as a static site on GitHub Pages and does not set cookies, run analytics, or maintain sessions. Your browser fetches public risk data directly from the API; no account, login, or personal profile exists.
2. Requests and logs
The API server (hosted on Render) receives HTTP requests containing your IP address, as any web server does, for standard operational logging and abuse prevention. The backend application itself does not log request bodies. Third-party platforms (GitHub Pages for hosting, Render for the API) process traffic under their own privacy policies.
3. Attestation history
Computed risk scores are stored in an SQLite database to provide the per-symbol history trail. This store contains symbols, scores, factor values, explanations, and timestamps only; no user data, no IPs, no device fingerprints.
4. Third-party data sources
In live mode, the backend fetches market data (Yahoo Finance) and news headlines on your behalf, server-side. Your browser never talks to those providers directly, and the XIRA server forwards no personal data to them.
5. No selling, no ads
We do not sell, rent, or share personal data (we have none to sell). There is no advertising on the service and no third-party ad scripts.
6. Children
The service is not directed at children under 13, and we do not knowingly process their data.
7. Your rights
Since no personal data is held, there is nothing to access, correct, or delete on your behalf. If you believe data about you has found its way into the service (for example, in logs held by hosting providers), contact us via a GitHub issue at github.com/Kohap/xira and we will investigate.
8. Changes
If this policy changes, the "last updated" date above will change accordingly. Material changes will be announced in the repository.