Privacy policy

Operator and privacy contact

Anthony Joshua is responsible for the site's processing. Contact [email protected] or [email protected] to ask about your data, request access or correction, or request deletion where applicable.

Contact and mailbox

The contact form is currently unavailable. If you email the operator directly, your address, message and correspondence are processed to handle your request.

Mailbox correspondence has a 24 months retention schedule administered by the operator's mail service. Do not include trading passwords, identity documents or unnecessary sensitive data in ordinary correspondence. This application does not archive form message bodies in the research database.

Security and providers

Cloudflare is the edge and security processor when enabled by the operator; it processes request data to deliver and protect the service. The contact form uses Cloudflare Turnstile when configured, and sends its verification token to Cloudflare. Infrastructure request logs are administered by the operator; this page does not claim an unverified log-retention period.

GoatCounter, hosted by the operator on this site's own domain, counts page views and a fixed set of interactions: broker search, broker result opened, compare action, source link opened, filter used, broker checker run and contact form submitted. Requests go to this site's own analytics path. Query strings, search text, checked domains and destination URLs are removed before sending; the referrer is sent without its query string. GoatCounter documents that it sets no cookies and does not keep raw IP addresses. Administration pages are not counted.

Search Console data

If the operator connects Google Search Console, its daily performance data for this site is imported and stored in the research database: the search query text, the page, the country, the device type, and the clicks, impressions and average position. These are Google-provided summaries of searches that led to this site, not visitor-level records, and they carry no visitor identifiers. Query text is whatever searchers typed into Google, so it can occasionally contain personal or sensitive wording. No automatic deletion schedule is currently implemented for these rows; ask the privacy contact to delete a specific query. Google processes Search Console data under its own terms.

Research and administration

Public research contains sourced business and regulatory records and the named accountable editor. Private evidence and administration are access-controlled. Admin sessions use a necessary authentication cookie; ordinary visitors do not receive that admin session cookie.

Some public endpoints (the broker checker) rate-limit each client with an in-memory counter keyed by a salted one-way hash of the connecting address. The hash and counter live only in server memory, are discarded within about a minute and on restart, and are never written to the research database; searched names, domains and queries are not stored by the limiter. Backups and research audit trails are administered separately from visitor analytics.