Hedgestone

Privacy Policy

Last updated July 17, 2026.

This policy covers hedgestonelabs.com and the Hedgestone app ("Hedgestone," "we," "us"), built and operated by Alhallak Technologies. It explains what we collect, why, and the choices you have.

What never leaves your device

Building a portfolio and running a crisis test or Monte Carlo simulation happens entirely in your browser. Your allocation and results aren't sent anywhere unless you choose to save a portfolio, buy a PDF report, or create an account. Some settings live in your browser's local storage, which we never receive.

Data with no account required

A saved portfolio or a purchased report gets a private edit-key link so you can return to it — that link, not an account, is what proves it's yours. A one-time PDF report can be bought the same way, with no sign-up.

Data we collect with an account

  • Account info: your name, email address, and a password (stored as a salted hash, never as plain text) — or, if you sign in with Google or Apple where we offer it, the basic profile info they share with us instead.
  • Saved portfolios: the allocations you save and their resilience-score history.
  • Billing: Hedgestone Pro and single-report purchases run through Stripe Checkout. Your card details go straight to Stripe — our servers never see or store your full card number. We keep only your Stripe customer ID and subscription status.
  • Session data: sign-in timestamps, IP address, and browser user-agent, kept to secure your session and catch abuse.
  • Digest preference: whether you've opted into the weekly Portfolio Pulse email.

Cookies

One essential cookie keeps you signed in. We don't run advertising or analytics cookies.

How we use it

To run your account, restore saved portfolios, process payments, send the emails you asked for (sign-in links, receipts, password resets, and — if you opt in — the weekly Portfolio Pulse), and to keep the service secure against abuse. We also log aggregate, anonymous counts of feature usage (like how many backtests ran today); those counts aren't tied to your identity.

Who we share it with

We don't sell your data or share it with advertisers. A few named services process it on our behalf:

  • Stripe — payment processing and billing.
  • Cloudflare — hosting, content delivery, transactional email, the Turnstile challenge that screens bot traffic on sign-in and report requests, and — only if you generate an AI narrative summary on Hedgestone Pro — Workers AI, which turns your portfolio's computed metrics into plain-language text.
  • Google or Apple — only if you choose to sign in with one of those, and only where we currently offer it.

Your rights and choices

  • Update your name or email from your account page.
  • Delete your account any time from the account page, which removes your sign-in credentials and account record.
  • Unsubscribe from the weekly Portfolio Pulse with the link in every email, or by toggling it off in your account — no sign-in needed either way.
  • Email us to request a copy of your data, ask us to delete specific saved portfolios or reports, or ask any question about this policy. We aim to respond within a few business days.

Children's privacy

Hedgestone isn't directed at children, and we don't knowingly collect personal information from anyone under 13. If you believe a child has given us information, contact us and we'll remove it.

Changes to this policy

We may update this policy as Hedgestone changes. We'll update the date at the top when we do; continuing to use Hedgestone afterward means you accept the update.

Contact

Questions about this policy or your data: alhallaktechnologies@gmail.com.