Privacy Policy

Draft policy · 9 November 2026

This page describes the intended privacy principles for the DARWIN website. It is a preliminary website policy and must be reviewed and completed with the operating entity's actual details before collecting personal information or launching customer services.

1. Website information

This informational website is designed to explain the DARWIN allocation intelligence concept. Apart from the owner-only research sign-in described in section 7, the website does not provide account registration, brokerage authorization, payment processing or customer portfolio services.

2. Information collection

We do not intentionally request sensitive personal information through this website. The website's hosting and security providers may process basic technical information, such as IP address, browser information and request logs, to deliver and protect the service.

3. Cookies and analytics

No advertising or analytics cookies are intentionally configured in this initial website release. Hosting infrastructure may use essential technologies required for security and service delivery.

4. Third-party services

Links to third-party websites, if added, are governed by those providers' own privacy terms. Apart from the owner-only research sign-in described in section 7, this website does not connect to a brokerage account, and it never receives or transmits brokerage passwords.

5. Data security and retention

Reasonable technical and organizational safeguards should be applied to any information processed. Retention periods and data-subject request procedures must be finalized before any user data collection begins.

6. Contact and policy updates

Operator identity, privacy contact details, applicable jurisdiction and request procedures will be published here before any customer-facing data collection or account onboarding begins. This draft should not be treated as a complete statutory privacy notice.

7. Private research sign-in (Alpaca OAuth)

The owner-only page at /research.html lets the site owner sign in with Alpaca OAuth to view their own paper-trading account in read-only mode. An access token is kept only in an encrypted, HttpOnly session cookie that expires after 8 hours; no brokerage data or credentials are stored on DARWIN servers. This page is not a public service and is not offered to other users.