Privacy policy
Effective date: October 24, 2026. Last updated: October 25, 2026.
This policy covers Filing Ahoy, the website at filingahoy.com and the email alerts it sends (the "Service"), operated by Barracuda Projects LLC ("we", "us"). Filing Ahoy emails you summaries of public SEC filings for the stocks on your watchlist. To do that it needs very little about you, and this page lists all of it.
What we store when you create an account
| Information | Why |
|---|---|
| Your email address | To sign you in and send the emails you asked for |
| The stocks on your watchlist (stored as the company's SEC identifier) | To know which filings to send you |
| Your plan and whether our emails are on (one switch covers alerts and the daily email) | To run your account |
| Stripe customer and subscription identifiers, plan and status (paid plans only) | To run your subscription |
| A record of which filings we have already emailed you, and each day's email | So you never get the same alert twice |
| Copies of the emails we send you | To check delivery problems |
Sign in links. When you ask to sign in, we email you a link that works once and expires after 15 minutes. We keep a scrambled copy of the link (a hash, which cannot be turned back into the link) for less than 24 hours, to stop repeated requests. Our copy of the sign in email leaves the link out and is deleted within the same 24 hours.
One cookie. Signing in sets one cookie that keeps you signed in for up to 30 days. It holds your account number and a signature, nothing else. It is needed for the site to work, it is never shared, and no advertising or tracking cookies are used. Signing out removes it from that browser.
What we do not collect. We do not store your IP address, browser details or device identifiers. There are no advertising pixels, analytics trackers or other third party tracking code on the site. The public pages load no scripts from anyone else.
Payments. If you buy a paid plan, Stripe processes the payment as our payment processor, under its own privacy policy at stripe.com/privacy. You enter your card on Stripe's payment page; we never see or store your card number. We store only what billing needs: your Stripe customer and subscription identifiers, your plan, the subscription status and the date the current month ends, and, if you schedule deletion, the date and the subscriptions involved. Deleting your account removes these from our records. Stripe keeps its own records of payments as the law requires.
Our hosting provider
The Service runs on Cloudflare. To deliver the pages and protect them from abuse, Cloudflare processes technical information such as your IP address when your browser connects. Cloudflare handles that information under its own privacy policy at cloudflare.com/privacypolicy. Our own records described above contain none of it.
How we use it
- To sign you in, keep your watchlist, and email you the filing alerts and daily email you asked for.
- To keep the Service working, for example to find out why an email did not arrive.
We do not sell your personal information, and we do not share it with anyone for advertising. We do not use it to make automated decisions about you.
Who else sees it
Only the service providers that help us run the Service: Cloudflare for hosting and storage; Resend, an email delivery service, to send your emails; and Stripe to process payments for paid plans. They may use the information only to provide their service to us. We may also disclose information when the law requires it.
How long we keep it
We keep your account information until you delete your account. Sign in records and our copies of sign in emails are deleted within 24 hours. Filing data, which is public SEC information, is not personal data and is kept.
Unsubscribe and delete
- Unsubscribe. Every alert and daily email has an unsubscribe link that works without signing in (it asks you to confirm), and mail apps that offer a one click unsubscribe button can use it directly.
- Delete your account from the watchlist page. Deleting it right away immediately removes everything: your email address, watchlist, sign in records, the record of emails sent and our copies of those emails. If you have a paid plan, you can instead schedule the deletion for the end of the month you already paid for. Until then your account stays as it is, and on that date, or within two days after it, we delete it the same way. Resend, which delivers our emails, keeps its own record of the emails it delivered for 30 days.
- See or correct your information by emailing info@filingahoy.com from the address on your account. We will respond within 30 days.
- Depending on where you live, state law may give you additional rights. We honor these requests for everyone, wherever you live.
Not investment advice
Alerts restate what public SEC filings say. Everyone watching the same company gets the same alert.
Do Not Track
We do not track you across other websites, and we use no third party trackers, so a browser Do Not Track signal does not change how the Service works.
Children
The Service is for adults. You must be 18 or older to create an account. We do not knowingly collect information from anyone under 18, and if we learn we have, we delete it.
Security
Account information is stored in a database that only we can access. No system is perfectly secure, but we collect as little as we can so there is less to protect.
Changes
If we change this policy, we will post the new version here with a new effective date. If a change would affect information we already hold in a significant way, we will tell you by email first.
Contact
Barracuda Projects LLC
info@filingahoy.com