Privacy Policy
Last updated: July 17, 2026
This Privacy Policy explains what SpecHawk Inc. (“SpecHawk,” “we,” “us”) collects when you use skeptic.fyi and the Skeptic application (the “Service”), how we use it, and the choices you have. We collect as little as we can to run the Service, and we do not sell your personal information.
1. Information we collect
- Account information — your email address, and a salted argon2id hash of your password. We never store your password in readable form.
- Your runs — the strategy descriptions you submit and the backtest results and settings associated with your account.
- Authentication data — a session identifier stored as an httpOnly cookie so you stay signed in, and single-use email-verification tokens.
- Limited technical logs — for security, abuse prevention, and rate-limiting we process transient data such as IP address and request metadata. We do not use this to build advertising profiles.
- Payment information — if you purchase credits, our payment processor handles your card details directly. We receive a confirmation and a transaction reference; we never receive or store your full card number.
2. How we use it
- To provide the Service — authenticate you, run your backtests, and keep your run library.
- To send transactional email such as address verification. We do not send marketing email without your consent.
- To secure the Service — detect and prevent abuse, fraud, and automated attacks, and enforce our Terms.
- To operate and improve the Service and fix problems.
3. Cookies and analytics
We use a single essential cookie: your httpOnly session cookie, required to keep you signed in. We use privacy-focused, cookieless product analytics to understand aggregate usage and performance; these do not track you across other websites. We do not use third-party advertising or cross-site tracking cookies.
4. How we share information
We do not sell your personal information. We share it only with:
- Service providers who process data on our behalf under contract — our hosting and database providers, our email sender, and our payment processor — solely to operate the Service;
- Authorities, if required by law, legal process, or to protect the rights, safety, and security of SpecHawk, our users, or the public; and
- A successor in the event of a merger, acquisition, or asset sale, subject to this Policy.
5. Market data
The historical market data the Service uses is collected from third-party and public sources for research purposes and is not personal information about you. We do not redistribute this data or expose it through public endpoints.
6. Security
We protect credentials with strong, salted password hashing (argon2id), transmit data over encrypted connections, and store session and verification tokens only as hashes. No system is perfectly secure, and we cannot guarantee absolute security.
7. Data retention
We keep your account information and runs for as long as your account is active and as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. You may request deletion as described below.
8. Your choices and rights
You may request access to, correction of, or deletion of your personal information, and you may ask us to stop processing it, subject to legal limits. Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA/CPRA. To exercise any right, contact us at support@spechawk.ai. We will not discriminate against you for exercising your rights.
9. Children
The Service is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
10. Changes and contact
We may update this Policy; material changes take effect when posted with a new date. Questions or requests: support@spechawk.ai.