Cookies and browser storage

On your first visit, a card at the bottom of the screen asks you to choose. You can answer right away. If you have not chosen after 5 seconds, the card moves to the middle of the screen, and the page waits until you pick one of two equal buttons. Nothing is ticked for you, and neither button is delayed. The Terms, Privacy Policy, this page, the Risk Disclosures, Licenses and Contact pages stay open to read before you choose.

• "Only needed": only the cookies the app cannot work without.
• "Allow analytics and ads": also the analytics cookie, notes of the pages you open, the sign-up buttons you press and how far you scroll the home page, the Reddit pixel, and the same events sent to Reddit from our servers.

Before you choose, nothing optional runs. While the card is still at the bottom of the screen, pressing Escape means "Only needed".

If your browser sends Global Privacy Control, we take it as your choice not to share data for ads. We record "Only needed" for you, there is no wait, and the Reddit pixel never loads. The card then offers "Allow analytics" only, which you can still press for analytics alone.

Use Cookie settings or Your privacy choices in the footer of every page, or Settings, Your data. Choosing "Only needed" deletes the analytics cookie and Reddit's cookies.

A choice you made under an older version of the card still counts as it was (an old "Allow analytics" never turns ads on), and the card asks you once more. An "Allow analytics and ads" made before the card said that our servers also send events to Reddit counts for analytics only, never for ads, until you choose again.

You can also block or delete cookies for this site in your browser at any time.

These are set by QuantGPT and sent only to QuantGPT. The app cannot work without them. Page scripts cannot read them (they are httpOnly), except qg27_consent and qg27_flow.

• qg27_consent: your cookie choice, as needed.2, analytics.2 or all.3 (the number marks the version of the choice you answered), so we do not ask again. 1 year. Page scripts can read it. Each choice is counted in our activity log (the choice, whether Global Privacy Control made it, and the notice version). If you are signed in, your choice, the time, this page's version, your IP address and browser also go in our consent records.
• qg27_flow: Simple or Advanced, the depth the app's pages open at (Advanced, on QuantGPT Pro, adds more charts, numbers and context to each page, and opens charts on the Detailed view unless you picked a view), so the site and the app agree next time. It does not choose a home page: there is one. It holds only simple or advanced, and is set only when you choose: in the app's sidebar, More or Settings, or by opening a link that names one (an old /pro link names Advanced). 1 year. Page scripts can read it.
• qg27_gate: lets you into the private preview after you enter its password. It holds a hash keyed with our secret, never the password. 30 days.
• qg27_session: keeps you signed in. It holds your account id, a session version, when you signed in and when you last gave a two-factor code, sealed with our key. 30 days, and the server refuses it after that even if a copy is kept.
• qg27_who: your email and plan, sealed, so the activity log knows who did what without a database call. It is never used to grant access. 30 days.
• qg27_hq: opens the founders' private desk (HQ) on a browser after its password. 12 hours. Only founders get it.
• qg27_tester: opens every plan on a browser for the QuantGPT team and testers who press Website tester, with no account. The button only shows past the site password. It holds when it was opened and a check of the site password, sealed with our key. 12 hours.
• qg27_view: the plan a tester (or a founder) picked to look at the app as, so every page shows only what that plan opens. It holds only the plan's name, is set only while qg27_tester or qg27_hq is open, and never opens more than they do. 12 hours, and it ends with the tester pass.
• qg27_dev: for a Website tester with no account, a random id for this browser, so the API page keeps that tester's keys, calls and preview credits apart from other testers'. It holds nothing else and is set only while qg27_tester is open. 1 year.
• qg27_broker: the ids of the sandbox accounts QuantGPT opened for you on this browser and your account id, sealed with our key so no page can swap them and no other account can use them. 1 year, sent only from our own pages.
• qg27_alpaca: only while you connect your own Alpaca account: a random check for the trip to Alpaca and back, your account id and the app page to return to, sealed with our key. 10 minutes, sent only to the connect step, and deleted when you come back. Your Alpaca access itself is kept sealed on our server, never in your browser, until you disconnect.

qg27_src: the site that sent you on your first visit (its name only) and any utm_source, utm_medium and utm_campaign on that link. It goes with your first visit and your sign-up to our activity log, so we can count which links bring people. 90 days. Page scripts can read it. It holds nothing else.

It is set only after you choose "Allow analytics and ads" (or "Allow analytics" with Global Privacy Control on). Choose "Only needed" and it is deleted, and it is never set or read at sign-up.

We advertise on Reddit. To measure those ads, and only after you choose "Allow analytics and ads" (never with Global Privacy Control on), your browser loads Reddit's pixel from redditstatic.com. It sends Reddit, Inc. each page you visit here, a sign-up when you open an account, a press of Start your trial, and a purchase when you start a paid plan (only its amount and currency). Reddit may match these to a Reddit account or device, under its own privacy policy, to tell us how our ads did.

We never send your email, phone number or name, and advanced matching is off. Under California law this is "sharing" for advertising. The pixel never runs on the founders' desk or for founders.

The pixel sets these cookies on our site. Page scripts can read them:

• _rdt_uuid: a random id for this browser, so Reddit can link a visit to a later sign-up or purchase. 90 days.
• _rdt_cid: the Reddit ad click id, when you arrive from a Reddit ad. 90 days.
• _rdt_em and _rdt_pn: a hashed email or phone number, set only with advanced matching. We keep advanced matching off, so they are not set. 90 days if they ever are.

Our servers also send Reddit the same events, through Reddit's Conversions API: a sign-up, a press of Start your trial, and each paid plan charge, renewals included (only its amount and currency). Each carries the same event id the pixel uses, so Reddit counts it once, plus the Reddit ad click id and the _rdt_uuid browser id when we have them, and, for a sign-up or a press of Start your trial, your IP address and browser. Never your email, phone number or name.

qg27:rdt_cid (this tab only, in sessionStorage, never a cookie): when you arrive from a Reddit ad, its click id is taken out of the address bar and held here until you choose. "Allow analytics and ads" hands it to the pixel and to our servers for the events above; "Only needed" or Global Privacy Control deletes it at once.

It also keeps _rdt_cfg (its settings, this tab only, in sessionStorage). Reddit gets your IP address and browser with each event. If you use Reddit itself, its cookies on reddit.com follow Reddit's policies.

How to opt out: choose "Only needed" (or "Allow analytics" with Global Privacy Control on) in Cookie settings or Your privacy choices. The pixel sends nothing more from that tab and does not load again, its cookies above and qg27:rdt_cid are deleted, and our servers send Reddit nothing more for you.

These keys live in your browser's localStorage, or in sessionStorage where it says this tab only. They stay on your device. A page sends part of one only to do what you asked (for example, a backtest's settings). Clearing this site's data in your browser removes them all.

When you are signed in, your saved work in these keys is also kept on your account, so it follows you to your other devices: your saved backtests and books, saved screens, watchlist, Ask conversations, the documents you checked and saved, chart drawings, recent stocks, Terminal boards, your data choices in My data and the series you save from a screen (see the Privacy Policy). Signing out removes it from this browser. Your AI key never goes there.

• qg27:aikey:v1: your own AI key and which provider it is for. This tab only, unless you choose Remember on this device. It goes only to the provider you picked, from your browser, never to QuantGPT. Remove it with Forget key.
• qg27:session:v1: your name, email and plan as the app last saw them, so pages open signed in.
• qg27:settings:v1, qg27:theme:v1, qg27:signals:v1, qg27:gradesum:v1: your settings, light or dark mode, the signals board you set up, and whether the detailed grade summary opens by default.
• qg27:watchlist:v1, qg27:portfolios:v1, qg27:books:v1, qg27:pins:v1, qg27:futuretest:v1, qg27:futuremap:v1, qg27:feed:v1: your watchlist, portfolios, books, map pins, the futuretests you watch, how the futuretest map looks, and the event types, order and region you picked in the futuretest live feed.
• qg27:backtest:v1, qg27:iterate:v1, qg27:screens:v1, qg27:takes:v1, qg27:forum:v2, qg27:terminal:v1, qg27:trader:v1, qg27:learn:v1: your last runs, how Iterate ranks versions and your last sweep, the screens you save in the Screener, your take drafts, your forum posts, comments and likes on this device, your Terminal boards and notes, your AI trader's rules and log, and your University progress.
• qg27:ranges:v2, qg27:btranges:v1, qg27:charttype:v1, qg27:chartview:v2, qg27:drawings:v1, qg27:futurechart:v1, qg27:recent:v1, qg27:firstrun:v1, qg27:firstfive:v1: chart ranges (for stock charts and for backtest charts), chart types and views, the lines, shapes and notes you draw on stock charts (and whether they show), how the futuretest chart shows (in dollars, every past episode), recent searches, the first-run steps, and which of your first five steps you have done (a stock page opened, Alpaca's sign-up opened from here).
• qg27:datapicks:v1: the data you chose for your models in My data (which sources Backtest, Futuretest and Ask AI may use), only what you switched off and when you last changed it.
• qg27:series:v1: the series you save from a screen's result (each name's value on the day of the data), up to 20, for your own backtests. Yours alone: on your account when you are signed in, never shown to anyone else.
• qg27:saved-sync:v1: which account this browser last kept your saved work in step with, as a short code (never your email), so another person signing in here never gets your saved work. Removed when you sign out.
• qg27:trail:v1, qg27:src:v1 and qg27:rdt_cid (this tab only): the pages you came through, for the back button, whether this visit's source was already noted, and a Reddit ad click id held until you choose (see the Reddit pixel above).
• qg27:nudge:v1, and qg27:nudge-tab:v1 (this tab only): when you last closed the weekly Try Futuretest card, so it stays away for 7 days, and the day the Futuretest it button last showed on Portfolio, so it shows once a day and once a visit at most. Below QuantGPT Pro only.
• qg27:alerts:v1: for your alerts (the bell): the last QuantGPT grade seen for each name you hold or watch, the grade changes found in the last two weeks, when you last opened your alerts, and when the grades were last checked.
• qg27:visit:v1: the day of this visit and the one before, and when you starred each name you watch, for Since your last visit on the dashboard (Advanced).
• qg27:calls:v1, qg27:chains:v1: the calls you make on events (a ticker, up or down, over a set time, graded later on real closes) and the chains of events you string together on Futuretest (Advanced).
• qg27:research:v1: the reports of documents you checked in Ask AI and chose to save (each claim, its verdict and the numbers we found, never the file itself).
• qg27:aithreads:v1, qg27:aimodel:v1: your Ask AI conversations with tools and the model you picked (Advanced). They stay in this browser and go to your AI provider only when you send them.
• qg27:hq:range:v1, qg27:hq:numbers:v1, qg27:hq-team:v1, qg27:hq-team-tab:v1: the founders' desk view choices (founders only).
• The Advanced design (/pro) keeps its own: qg27:pro-tour:v1 (whether you took its tour), qg27:pro-chat:v1 and qg27:pro-model:v1 (your Ask conversations and the model you picked; Ask in the app keeps its conversations in qg27:pro-chat:v1 too; they go to your AI provider only when you send them, and to your account when you are signed in), qg27:pro-saved:v1 (the results you saved: their inputs and the summary shown), qg27:pro-watch:v1 (when you starred each name you watch, and the events you watch), qg27:pro-visit:v1 (the day of this visit and the one before, for Since your last visit), qg27:pro-recent:v1 (stocks you opened), qg27:pro-desk:v1 and qg27:pro-panel:* keys (your Markets desk layout, and each panel's ticker, coins or notes), qg27:pro-view:* keys (whether a page opens in its simple or detailed view), and, this tab only, qg27:pro-backtest:v1 and qg27:pro-handoff:v1 (the study on the Backtest page, and a study handed to it from Ask or Learn). It reads and writes the simple design's own keys above for your AI key, session, watchlist, portfolios, forum posts and first steps, so both designs show the same things.

Older keys: the app deletes qg27:ledger:v1 and qg27:book:v1 when it finds them. It reads an old qg27:chartview:v1 to carry your chart view over, and no longer writes it.

The futuretest map loads pictures from OpenFreeMap, Amazon Web Services terrain tiles and NASA GIBS. University videos and the Terminal's TV panel use YouTube's youtube-nocookie.com player, only after you press play; once a video plays, YouTube may keep data in your browser under its own policy. Ask AI calls the provider you chose. The Reddit pixel loads only with your OK. These sites see your IP address and browser, like any website, and follow their own policies. Apart from the Reddit pixel, the app sets no cookies for them. See the Privacy Policy.

These cookies are set by QuantGPT LLC, a Florida limited liability company, 15350 N Florida Ave, Tampa, FL 33613. Write to desk@quantgpt.co, or by mail to 15350 N Florida Ave, Tampa, FL 33613.