Privacy

Last updated 13 Oct 2026

The short version: no cookies, no ads, no tracking across other sites. I count visits so I know whether anyone reads this, and that's it.

Who is responsible

Tomas Albuquerque, Cyprus, reachable at tom@tomalbum.com, is the controller for the data described here, under the EU General Data Protection Regulation (GDPR). Full details are on the legal notice.

Visit statistics

I use PostHog, hosted on PostHog's EU servers, to count page views and a few named clicks (for example, which chart view you open). It is set up without cookies or local storage, with no session recordings and no user profiles: nothing is stored on your device, and a returning visit counts as a new one.

To do this, PostHog receives the page you opened, the page that sent you here, your browser and device type, and your IP address, which it uses to estimate your country. The legal basis is my legitimate interest in knowing how the site is used (GDPR article 6(1)(f)). The statistics are kept for up to 12 months.

Hosting

The site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Like every web host, it handles your IP address and the request itself to deliver the page, and keeps short-lived server logs for security. Data may be processed outside the EU under the EU Standard Contractual Clauses.

The Invest in Public waitlist

If you leave your email on Invest in Public, it is sent to my own inbox as a single notification, through Postmark (an email delivery service run by ActiveCampaign, which may process it in the US under the EU Standard Contractual Clauses). Nothing is stored on this site, and no one else gets the list.

I'll use your address for one thing: to tell you your own Invest in Public page is ready. The legal basis is your consent (GDPR article 6(1)(a)), which you can withdraw at any time by replying to that email or writing to tom@tomalbum.com; I'll delete your address. If the list ever moves to a mailing service, this page will be updated first.

Payments

"Buy me a coffee" payments go through Stripe's own checkout page. Stripe processes your payment details under its own privacy policy; I only see the amount, the date and the details Stripe shows a seller. Only totals appear on this site, never names.

Links to other sites

Links to XTB, Kraken, X and others take you to their sites, under their own privacy policies. A referral link tells the platform you came from this site, so it can credit the referral.

Your rights

You can ask me for a copy of any data about you, to correct it, to delete it, or to stop processing it, by emailing tom@tomalbum.com. I'll reply within a month. You can also complain to your national data protection authority.