The short version:
We keep your email address, what you approved, and what you paid for. We never store your brokerage keys. Your browser sends your key with each request that needs your Alpaca account, and our server passes it to Alpaca without keeping it. We do not sell anything about you to anybody, and the trade ideas we publish are identical for every subscriber, so nothing you do here changes what anyone else is shown.
1. Who this is about
WireRally publishes trade ideas at wirerally.com. This policy covers that site and the account behind it. It explains what we hold, why, who else sees it, and how to get rid of it.
Questions, or a request about your own data, go to the address on our contact page.
2. What we hold, and what we do not
The ordinary things an account needs and nothing beyond them: your email address, a password if you chose one rather than signing in with Google, your settings, your subscription status, and a record of which signals you approved or passed on.
What we deliberately do not hold is the more useful list:
- Your brokerage keys. Never written to our database or our logs — see the section below, which is the one worth reading in full.
- Your card details. Those go straight to Stripe and never reach us.
- Your holdings or your balance. Read from your broker while you have WireRally open, shown to you, and never saved.
- Your broker password, or any credential beyond the API key described below.
- Anything about your income, your net worth, or your goals. We have never asked and there is nowhere to put it — the signals are the same for everyone, so none of it would change anything you see.
Everything reaches us over an encrypted connection. Passwords, sign-in links, password reset links and recovery codes are stored only as one-way scrambles: we can check one you present, but it cannot be read back or shown to you again. That is what keeps that information safe.
When you subscribe with a real-money Alpaca account connected, we keep a one-way scramble of that account's number, which we use to apply the free first month. The number itself is not kept for this. Separately, each trade you send through WireRally is recorded with the Alpaca account number it went to, so WireRally can show which account a trade is in. That number is the same one shown in your Alpaca account.
If you sign in with Google, Google tells us your email address, your name and your profile picture. That is all we ask for and all we receive.
To limit repeated attempts to sign in or sign up, WireRally keeps a scrambled form of your internet address (IP address) for up to 7 days, and then deletes it.
3. Your brokerage keys, which we do not keep
Your broker API key is stored in your own browser, on your own device. WireRally sends it with each request that needs your Alpaca account, such as showing your balance and positions, or sending an order you approved. Our server uses it for that one request, passes it to Alpaca, and does not keep it. It is never written to our database or our logs.
The cost of that choice is real and we would rather state it than hide it: because we hold nothing while you are away, nothing can run on your behalf between visits. We cannot send your broker an order you did not approve, and we equally cannot watch a position for you overnight. That is the trade we made deliberately.
If you clear your browser data, your key is gone and you enter it again. We cannot recover it, because we never had it.
4. What we publish is the same for everybody
Every trade idea is identical for every subscriber: the same symbol, the same prices, the same reasoning. We never calculate how many shares you should trade, and nothing about your account — your balance, your positions, your history — changes what you are shown.
That is a deliberate design choice with legal weight behind it, and it has a privacy consequence worth naming: there is no profile of you driving what appears on your screen, because the feed does not know who is reading it.
5. Who else sees any of it
We do not sell your information, rent it, or hand it to advertisers. These are the companies involved in running the service, and what each one gets:
| Company | What they get |
|---|---|
| Google, if you sign in with Google | Google tells us your email address, name and profile picture. We do not send Google anything about your trading, your subscription or your broker. |
| Stripe, for payment | Your card details, given directly to them — they never reach us. They tell us whether your subscription is active. |
| Resend, for email | Your email address and the message being sent to you. |
| Telegram, only if you connect it | The alerts we send you. Telegram is a messaging service and handles those messages under its own terms. |
| Cloudflare, which serves the site | The ordinary details of a web request, including your IP address, as any website's network provider does. |
| Your broker | Your orders, and requests to read your balance, positions and orders. Each one is sent with your own key, to your own account. Your broker is a separate company with its own agreement with you — see section 6 of the Terms. |
Trade ideas are built from public market data and public news. The services that supply prices and score news receive nothing about any subscriber — they are asked about companies, never about people.
We may also hand over information if the law requires it, and we would rather say so plainly here than leave it unsaid.
6. Cookies
One cookie, to keep you signed in. It holds a scrambled session reference and nothing else. There are no advertising cookies and no third-party tracking scripts on this site.
Your browser also stores your broker key and a few preferences on your own device. Those never travel to us except as section 3 describes.
7. How long we keep it
Your account details last as long as your account. Sign-in sessions, password reset links and verification links expire on their own and are cleared out afterwards.
Your record of approved trades is kept while your account exists, because it is the record of what you did and you may need it for tax. If you want it gone, ask and we will delete it.
8. Getting a copy, or getting rid of it
Write to us at the address on the contact page and ask for any of these:
- A copy of what we hold about you.
- A correction, if something is wrong.
- Deletion of your account and its data.
- To stop marketing email — you can also do that in your settings, and it never affects email about your account or your subscription.
Deleting your account does not cancel anything at your broker, and it does not close positions. Those are yours, in your own account, and stay exactly as they were.
If you have signed in with Google, you can also remove WireRally's access from your Google account at any time, which stops you signing in that way.
9. Keeping it safe
We hold as little as the service can work with, which is the part that matters most — what does not exist cannot leak. Beyond that: the connection is encrypted, passwords and codes are one-way scrambles rather than anything readable (section 2), and broker keys are not stored at all (section 3).
We are not going to claim that nothing can ever go wrong, because no honest service can. If something did go wrong with your data, we would tell you.
10. Age
WireRally is not for anyone under 18, and we do not knowingly hold data about children. See section 2 of the Terms.
11. Changes to this policy
If this policy changes in a way that matters, we will update the date at the top and tell subscribers. Carrying on using WireRally after a change means the updated policy applies.
12. Contact
Anything about this policy, or about your own data, goes to the address on our contact page.