Privacy Policy
FolioStuff is built to be useful without collecting much of anything. Here is exactly what we do and do not know about you.
The short version
You can use every tool on FolioStuff without an account, and the numbers you type into them are processed entirely in your browser and never sent to our servers. If you create an account to submit a tool to the directory, we store your email address and the listing content you give us, and nothing more. The only other data we collect is anonymous usage analytics, described below.
What happens in the tools
The calculators and the portfolio visualizer run completely on your device. Your tickers, allocations, position sizes, and cost basis numbers are never uploaded, stored, or seen by us. Close the tab and they are gone.
Accounts and directory submissions
Creating an account requires an email address and a password. Passwords are hashed and never visible to us. If you submit a tool, we store what you provide: the tool's name, URL, description, tags, any social links for the tool, and any images you upload. Your profile's display name, and your X handle if you set one, are attached to each listing and shown publicly with it. This data lives in our database and file storage, hosted by Supabase.
Images are prepared in your browser before upload: screenshots and icons are resized and compressed, and profile pictures are cropped to the square you choose. Only the prepared version reaches our servers; the original file never leaves your device. Images attached to pending submissions are private. Once a listing is approved, its icon and screenshots become public files, as does your profile picture.
Pending submissions are private and visible only to you and the site admin, and rejected submissions are deleted outright rather than stored. Approved listings are public by design, since that is the point of submitting. Submitting requires a display name and username, which appear publicly on your listings and maker page; your bio, photo, website, and social links are optional additions to that page. Social handles you enter are normalized to a standard form, and links get an https prefix if you leave it off. You can delete your own listings at any time from your dashboard, which removes their content and images. You can also delete your whole account from your profile settings, which permanently removes your profile, your listings, and every image you uploaded. We may also pause a listing (it stays stored but hidden from the site and search engines), feature it on the homepage, or remove listings or accounts ourselves, as described in the Terms of Service.
Logging in and cookies
When you log in, we set cookies that keep you signed in and one that records when you last visited. You are logged out automatically after 24 hours without a visit, so a forgotten session on a shared device does not stay open. If a login attempt fails, we tell you whether the problem is the email or the password, which means the login form will confirm whether an email address has an account here; every attempt is protected by the spam check described below, so this cannot be used to scan for accounts in bulk.
Beyond login and the analytics cookies described below, we set no cookies of our own.
Emails
We send transactional email only: confirmation of your account, and updates about your submission, such as approval or feedback. These are sent through Resend, our email provider. We do not send marketing email, and we do not share your address with anyone else.
Analytics
We use Google Analytics to understand how the site is used: which pages get visited, roughly where visitors come from, and what kind of device they use. This data is aggregated and does not identify you personally. Google Analytics sets cookies to do this. You can block these with a browser extension or your browser's cookie settings, and the site works exactly the same without them.
Spam protection
The signup, login, and submission forms use Cloudflare Turnstile to keep bots out. Turnstile analyzes technical signals from your browser to decide whether you are human, without the traffic-light puzzles. Its processing is covered by Cloudflare's privacy policy.
Affiliate links
Some outbound links on this site are affiliate links, meaning we may earn a commission if you sign up for or purchase something through them. This costs you nothing extra, and it does not affect which sites we choose to link to. We link to things because they are useful, not because they pay.
External sites
FolioStuff links out to third party sites we do not control. Once you leave this site, their privacy practices apply, not ours. We encourage you to review the privacy policy of any site you visit.
Changes to this policy
If the way we handle data changes, this page will be updated to reflect it. The date below always shows the last revision.
Questions
If you have questions about any of this, use the contact form.
Last updated: September 3, 2026