Privacy policy
This policy describes suninsightlab.com, operated as Sun Insight Lab. Contact [email protected] about privacy or a correction. Public calculators require no account. A separate private portfolio feature uses a PIN login.
Public calculators
Investment amounts and allocation calculations are processed in your browser. Requests for market data are sent to our site; depending on the endpoint, requests can include selected symbols and date ranges. Our hosting provider, Cloudflare, processes requests and may retain technical logs including IP address, requested URL, browser information, and timestamps. Do not enter account numbers or other sensitive financial information into these educational tools.
Private portfolio login
The PIN is sent to our authentication endpoint over HTTPS. A successful login creates an HttpOnly, Secure, SameSite=Strict cookie named portfolio_session, valid for up to twelve hours. Signing out clears the browser cookie. The server stores failed-attempt counts, timestamps, and a keyed hash derived from the requesting IP address to limit repeated attempts. The current implementation removes that record after a successful login; the fifteen-minute blocking window is not a promise that records are automatically deleted after fifteen minutes. Private portfolio data is returned only after authentication.
Advertising and browser storage
Advertising scripts are currently disabled while the site is revised for review. The publisher verification metadata and ads.txt entry identify the intended AdSense account; they do not themselves serve ads or set advertising cookies. A previous notice may have stored a cookieConsent flag in local storage. That flag was only an acknowledgment and was not a certified advertising consent mechanism. You can remove it by clearing this site's browser storage.
If advertising is enabled later, this policy must be updated to reflect the deployed services and choices. Google and its partners may use cookies based on prior visits to this and other sites. My Ad Center provides personalized-ad controls, and Google explains partner-site data use. Those settings are not a substitute for an on-site consent mechanism where one is required.
External resources
Some pages request fonts from Google Fonts and charts from jsDelivr. Their servers receive connection information when your browser requests those files. Price retrieval for our stored datasets occurs separately from visitor requests to Yahoo Finance. We have not added a dedicated Google Analytics tracker in this revision; hosting-level analytics and logs may still operate.
Email, retention, and choices
If you contact us, we receive your address and message and use them to respond. Email correspondence is retained as needed to handle the request and operational obligations. Hosting and third-party retention depend on those providers; we do not promise a deletion period we cannot verify. You can block third-party resources or clear cookies and storage in your browser, although clearing the session cookie signs you out of the private tool. For access, correction, or deletion requests concerning information we hold, email us with enough context to identify the request. Do not send passwords or account credentials.
The site is intended for an adult general audience and is not directed to children under thirteen. Material changes to these practices will be reflected in this policy's update date.