Optional analytics
You can use thesis with optional analytics turned off. Use Privacy settings at the bottom of the page to change your choice at any time.
When this U.S. rollout is enabled, new accounts created on or after its fixed start date receive a visible disclosure before optional collection begins. Existing accounts are asked to allow analytics. A saved decline or Global Privacy Control signal keeps it off. A missing signal or a later disclosure does not override your saved decline.
What we measure
After collection becomes eligible in your signed-in browser, we measure app pages, onboarding steps and saved preference changes, and whether a requested research reply or trade construction finishes and becomes visible. We also measure later eligible sign-in, research and construction activity. This helps us understand where the app experience needs work. Signed-out visits, public website visits and demo previews are outside this release.
This analytics system excludes research questions, thesis text, conversations, email addresses, brokerage account numbers, holdings, balances, order details, intake text and your declared investing-experience or explanation-preference values. It does not record your screen or automatically collect what you type.
How visits connect
After the disclosure or your affirmative choice, we check your signed-in browser’s privacy signal before creating an optional session identifier. Eligible activity is associated with your account. Signing out ends that browser identity. We keep staging and production activity separate.
A new analytics session begins after 30 minutes without observed activity. Missing or declined analytics is not treated as proof that you did not use thesis. We record only future eligible activity, without reconstructing earlier visits or signup. A measured app-session start is not an account-creation event.
Our analytics provider
When delivery is enabled, PostHog receives a restricted copy of these events with an environment-specific pseudonym. We keep the account association in our own database. Optional analytics does not grant trading permission or change your account access.
Your choices and retention
Turning analytics off stops optional collection and suppresses events waiting to be delivered. It does not recall events already delivered. Local legacy unlinked event records become eligible for scheduled cleanup after 90 days and account event records after 365 days; cleanup runs in batches and requires an operating retention job. PostHog retention and deletion are separate. We retain a minimal saved privacy choice when optional analytics data is erased, so a later visit does not silently turn it back on. Operational account, security, brokerage and billing records are separate.
For broader privacy information and deletion requests, see our Privacy Policy.