Privacy Policy

Effective date: May 21, 2026 | Insider Canary

Table of Contents

Who We Are
Information We Collect
How We Use Your Information
How We Share Your Information
Data Retention
Cookies and Session Tokens
Security
Your Rights
Children's Privacy
Changes to This Policy
Contact Us

1. Who We Are

Insider Canary is operated by Alec Huxford d/b/a Insider Canary ("we," "us," or "our"), located at 6924 Ashton St, Boynton Beach, FL 33437. We operate the website at insidercanary.com and provide a subscription-based email digest of SEC Form 4 insider trading activity.

2. Information We Collect

Information you provide directly:

Email address — collected when you subscribe or request a login link. This is the primary identifier for your account.

Information collected automatically:

Payment information — processed directly by Stripe. We store a Stripe customer ID and subscription ID but never receive or store full card numbers.
Session tokens — a short-lived token stored in a browser cookie (ic_session) when you log in, used to authenticate your session. See Section 6.
Usage data — server logs may record your IP address, browser type, and pages visited for security and diagnostic purposes. These are not used for advertising or sold to third parties.

3. How We Use Your Information

We use your information only to operate the Service:

To deliver your daily insider trading email digest;
To send transactional emails (login links, welcome emails, billing notifications);
To authenticate you when you log in;
To manage your subscription via Stripe;
To respond to your support requests;
To detect and prevent abuse or fraudulent activity;
To comply with legal obligations.

We do not sell your personal information. We do not use your information for advertising or build advertising profiles.

We share your information only with the service providers necessary to operate the Service:

Stripe — payment processing. Your email address is shared with Stripe to create and manage your subscription. Stripe's privacy policy is available at stripe.com/privacy.
Resend — transactional email delivery. Your email address is shared with Resend solely to deliver emails you request (login links, alerts). Resend's privacy policy is available at resend.com/legal/privacy-policy.
Cloudflare — hosting and infrastructure. Cloudflare processes traffic to our site as part of its CDN and edge compute services. Cloudflare's privacy policy is available at cloudflare.com/privacypolicy.

We do not share your personal information with any other third parties, except as required by law or to protect our legal rights.

5. Data Retention

We retain your account information (email, subscription status) for as long as your account is active or as needed to provide the Service. If you cancel your subscription, we retain your record for a reasonable period for billing and legal compliance purposes, after which we may delete or anonymize it upon request.

Session tokens expire automatically after 30 days. Magic link tokens expire after 15 minutes.

6. Cookies and Session Tokens

When you log in to the Service, we set a single cookie named ic_session in your browser. This cookie contains a random session token used to authenticate your requests. It is:

HttpOnly — not accessible to JavaScript;
Secure — sent only over HTTPS;
SameSite=Lax — provides protection against CSRF attacks;
Set to expire after 30 days.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

7. Security

We implement reasonable technical and organizational measures to protect your personal information, including:

All data transmitted over HTTPS;
Authentication via HMAC-signed one-time tokens;
Session tokens stored server-side with expiration;
Secrets managed via environment variables, not hard-coded.

No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

8. Your Rights

You may request access to, correction of, or deletion of your personal information at any time by contacting us at [email protected]. We will respond within a reasonable timeframe.

To delete your account and associated data, cancel your subscription and send us a deletion request by email. We will delete your information within 30 days, subject to any legal retention obligations.

If you are a resident of California, the EU, or another jurisdiction with specific privacy rights, please contact us and we will work to honor applicable legal requirements.

9. Children's Privacy

The Service is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the "Effective date" at the top of this page. Your continued use of the Service after the update constitutes your acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Alec Huxford d/b/a Insider Canary
6924 Ashton St
Boynton Beach, FL 33437
[email protected]