Privacy, without
the fine-print fog.
RiskSized is designed to calculate in your browser without an account. This page explains what stays local, what a shared link contains and what a web host may still log.
Effective date
November 1, 2026. This policy applies to the RiskSized MVP static website.
Calculation inputs
Account equity, cash, prices, costs and other planner inputs are processed by JavaScript in your browser. RiskSized does not send them to an application backend, because the MVP has no application backend. Do not enter names, brokerage account numbers or other sensitive identifiers.
Saved plans and local storage
When you choose Save, up to eight plans are stored in your browser's local storage under the key risksized.saved-plans.v1. Plans from the former StockPilot brand are read from its legacy storage key for compatibility. They remain on that browser until you delete them, clear site data or use a browsing mode that discards storage. Anyone with access to the same browser profile may be able to view them. If storage is blocked, use CSV or a share link instead.
Share links
Share links contain the complete plan encoded in the plan query parameter. Encoding is not encryption. Anyone with the URL can read and reproduce the inputs. If you send or post the link, the recipient and involved messaging, analytics or hosting services may process it. Avoid sharing links when the numbers are sensitive.
Hosting and technical logs
Like most websites, the hosting provider and network infrastructure may process IP addresses, requested URLs, timestamps, browser user agents and security diagnostics. Those logs depend on the deployment provider and are not used by the calculator. A production operator must publish the actual host and retention details when deploying this template.
Analytics, advertising and cookies
RiskSized uses Google Analytics 4 (measurement ID G-E5KVEYRLTW) on risksized.programnotes.cn to understand page usage and privacy-safe product interactions. Google may process IP addresses, device/browser information, approximate location, referring pages and usage events under its own privacy terms. The integration requests IP anonymization. Localhost and staging do not load analytics. Fonts and icons are self-hosted; the planner itself does not require third-party asset CDNs.
Analytics may use cookies or similar identifiers for measurement. Google signals and advertising personalization are not enabled by this integration. Field Notes articles include Google AdSense (publisher ID pub-3614504270218797). Google and its partners may use cookies, device identifiers, IP addresses and ad interaction data to serve and measure ads, including personalized ads where permitted. You can control personalized advertising through Google My Ad Center and, where offered, your browser/device settings. Consent requirements vary by region; EEA, UK and Swiss deployment requires an appropriate Google-certified consent-management configuration before personalized ads are served. See Google's partner-site data disclosure at https://policies.google.com/technologies/partner-sites and controls at https://myadcenter.google.com/.
Events and plan-data boundary
Events record actions such as a completed calculation, sharing, saving, printing or CSV export. They may include a trade direction or which constraint determined size, but deliberately exclude account equity, cash, risk amount, entry, stop, target and other price inputs. Shared-link page reports omit the plan query string. Do not add plan inputs to future analytics events.
Data retention and deletion
Delete individual plans from Saved plans or clear this site's browser storage to remove local copies. Delete shared URLs from wherever you posted or sent them; RiskSized cannot retract copies held by recipients. CSV and print outputs are under your control.
Children and changes
The tool is not directed to children and does not ask for personal profiles. Policy changes will be dated on this page. No non-essential data collection should be introduced silently.