PRIVACY

We collect almost nothing.
By design.

EFFECTIVE 2026-07-23

1. Your desk stays on your device

Account balances, drawdown rails, daily P&L, and everything else you enter into the desk is stored in your browser's localStorage only. It is never transmitted to us or anyone else. Clear your browser storage and it's gone — we cannot recover it, because we never had it.

2. What we do collect

• Seat applications: what you submit on the application — name, email, country, handle, and your trading profile (experience, instruments, account types, capital band, session) — captured by Netlify Forms and — for review only — relayed to the desk’s private, staff-only Discord workspace. Used solely to review your fit, reply, and administer your seat. Applications are covered by the same confidentiality clause you agree to: we do not name members or share applications with anyone.
• Push subscriptions: the OneSignal SDK loads on our pages, so OneSignal's servers see the standard technical request data any CDN sees. But no push token, device registration, or subscription is created unless you click Enable Alerts and accept your browser's prompt. Disable alerts in your browser at any time to revoke it.
• Aggregate page counts: our own server tallies how many times each page is viewed — a number per page per day — and, when you arrive from another site, the bare hostname of that site (e.g. "google.com"; never the full address, never a search query). No cookies, no identifiers, no IP addresses attached. That is the entirety of our analytics.
• Payments and your seat: checkout and billing run on Whop. Whop holds your payment details under its own policy — we never see your card. When you collect your key, our server asks Whop whether your membership is active and checks the email on it against the one you enter. We keep the membership id, its tier and status, and a fingerprint of your key — not the key itself.
• Server logs: our hosting provider (Netlify) keeps standard access logs (IP, timestamp, URL) for security and operations.

2a. The Morning Print list

If you subscribe to The Morning Print, we store your email address in our datastore, keyed by a cryptographic token, for exactly one purpose: sending you the morning print email, which is delivered through our email provider, Resend. The unsubscribe link in every email deletes the address immediately and completely — not flagged, not archived, deleted. The list is never sold, shared, or used for anything else.

3. What we don't do

• No selling or renting of personal data. Ever.
• No advertising trackers, no third-party ad pixels.
• No data brokers, no "partners" receiving your profile.

4. Third-party services

The processors that touch a visit or a seat:

• Netlify — hosting, application forms (Netlify Forms), server functions and our datastore.
• Whop — payments, billing and membership lookup when you collect your key.
• OneSignal — the push SDK, loaded from cdn.onesignal.com and talking to onesignal.com.
• FinancialJuice — the headline feed, embedded as a frame from feed.financialjuice.com.
• Resend — delivers The Morning Print email.
• Discord — the desk’s private, staff-only workspace that receives applications for review.

Fonts are served from our own domain. Market data — CBOE, SEC EDGAR, CFTC, FRED, Nasdaq, Yahoo Finance — is fetched by our own server functions, not by your browser, so those providers never see your visit. The record's hash chain is anchored through OpenTimestamps, which receives a hash, never personal data. Each provider sees only the standard technical requests needed to serve its part, under its own policy.

5. Your rights

Email desk@penthaus.org to access or delete the data we hold about you (in practice: your application record and subscription record). We answer within 24 hours — usually before the next Globex open — the same way we answer everything.