PRIVACY

We collect almost nothing.
By design.

EFFECTIVE 2026-07-23

1. Your desk stays on your device

Account balances, drawdown rails, daily P&L, and everything else you enter into the desk is stored in your browser's localStorage only. It is never transmitted to us or anyone else. Clear your browser storage and it's gone — we cannot recover it, because we never had it.

2. What we do collect

• Seat applications: what you submit on the application — name, email, country, handle, and your trading profile (experience, instruments, account types, capital band, session) — captured by Netlify Forms and — for review only — relayed to the desk’s private, staff-only Discord workspace. Used solely to review your fit, reply, and administer your seat. Applications are covered by the same confidentiality clause you agree to: we do not name members or share applications with anyone.
• Push subscriptions: the OneSignal SDK loads on our pages, so OneSignal's servers see the standard technical request data any CDN sees. But no push token, device registration, or subscription is created unless you click Enable Alerts and accept your browser's prompt. Disable alerts in your browser at any time to revoke it.
• Aggregate page counts: our own server tallies how many times each page is viewed — a number per page per day — and, when you arrive from another site, the bare hostname of that site (e.g. "google.com"; never the full address, never a search query). No cookies, no identifiers, no IP addresses attached. That is the entirety of our analytics.
• Server logs: our hosting provider (Netlify) keeps standard access logs (IP, timestamp, URL) for security and operations.

2a. The Morning Print list

If you subscribe to The Morning Print, we store your email address in our datastore, keyed by a cryptographic token, for exactly one purpose: sending you the morning print email. The unsubscribe link in every email deletes the address immediately and completely — not flagged, not archived, deleted. The list is never sold, shared, or used for anything else.

3. What we don't do

• No selling or renting of personal data. Ever.
• No advertising trackers, no third-party ad pixels.
• No data brokers, no "partners" receiving your profile.

4. Third-party services

Pages embed feeds from FinancialJuice and load the OneSignal push SDK; fonts are served from our own domain; live quotes and filings are fetched through our own server functions from CBOE and SEC EDGAR. Each provider sees the standard technical requests needed to serve their content, governed by their own policies.

5. Your rights

Email desk@penthaus.org to access or delete the data we hold about you (in practice: your application record and subscription record). We answer within one session, the same way we answer everything.