PRIVACY NOTICE · OCTOBER 22, 2026 · V2
Your interest is private.
Your analytics choice is yours.
This notice covers the Leeboard market-validation website and early-access research. It is not a trading account agreement.
What you provide
We save your email, selected interest (individual trader or trading team), how much you would let the agent do, your response to the planned price, and optionally your current tool, use case, paid paper-pilot interest and, for teams, your role and team size, plus the consent version and request time. With the request we also store which version of the page headline you saw and any campaign labels in the link you followed (utm_source, utm_medium, utm_campaign; short letters/numbers only). We do not store full URLs, referrers or a visitor ID with your request unless you separately allow analytics. Please do not include account credentials, financial account numbers or sensitive personal information in the use case.
We use this information to assess demand and contact you about research, early access or a paper pilot. The required checkbox gives permission for this contact; it does not sign you up for unrelated marketing. There is no payment, trading authorization or guaranteed invitation. Email ownership is not verified by this website.
After signing up you may see an optional link to book a call. That link opens a separate scheduling service; anything you enter there is processed by that provider under its own privacy policy, and nothing is sent to it unless you choose to book.
Storage and access
Signup records are held in a private Cloudflare D1 database accessible only to authorized operators through the Cloudflare account. They are not published or returned by a public API. We do not sell your information, train a trading model on it, or send it to an LLM. Cloudflare processes website hosting, storage, network and security information as our service provider; international processing may apply under its service terms.
Early-access records are deleted automatically by a daily cleanup job once they are 90 days old, unless you separately agree to continue a pilot or relationship. Backups may retain deleted data temporarily under the provider’s recovery policy. You can request access, correction, withdrawal or deletion by emailing the contact above, including the email used to sign up. Requests may require reasonable ownership verification. Depending on your location you may have additional rights, including contacting your data protection authority.
Optional first-party analytics
Analytics are off until you choose “Allow analytics.” Refusing them does not prevent the demo or signup. If allowed, this site uses a randomly generated first-party ID that expires after 24 hours. We do not use device fingerprinting, ad pixels, cross-site IDs, precise location, or third-party analytics scripts.
We record visits, declared visitor segment, demo starts, demo completions and successful new signups. With your permission, we also record the message variant, bounded UTM source/medium/campaign labels and referrer hostname. We do not store referrer paths, queries, email addresses, use-case text or full visited URLs in analytics. Signup events carry segment and an interest flag only; they do not contain your email or a lead record ID.
“Unique visitors” means unique random IDs among people who opt in. It is an estimate, not a count of people: browser changes, expiry or cleared storage can count someone again. Event and visitor records are deleted automatically by the same daily job once they are 30 days old. The consent preference itself is stored on this device for up to 180 days; the visitor ID for up to 24 hours. Browser storage restrictions can reduce measurement accuracy.
Use “Analytics preferences” below at any time. Declining removes the local visitor ID and asks the service to erase analytics attached to the current ID. If that network request fails, stored events remain subject to retention. This does not erase an early-access request; contact the operator for that.
Abuse protection and necessary processing
When configured for public signup, Cloudflare Turnstile verifies form requests and may process browser and network signals for abuse prevention. It loads independently of optional analytics as a security measure. See Cloudflare’s privacy policy. For rate limiting, our server temporarily processes an IP address and stores only a rotating keyed hash with a short expiry; this is used for security, never visitor identification. Expired rate-limit records are deleted by the same daily job. The hosting provider may process IP addresses in its own security or infrastructure logs under its policies; optional analytics choices do not disable necessary hosting/security processing.
No trading or market-data collection
The demo runs in your browser using seeded synthetic data. No exchange authentication, real accounts, real-money execution, LLM inference or licensed market feed is connected. Generated replay exports stay on your device unless you choose to share them.
Changes and contact
Material new purposes, service providers or retention terms require an updated notice and any further consent needed before use. This site is intended for adults. Contact the operator above with privacy questions; do not send exchange credentials.