What we collect.
The shortest version of this page: email for magic-link auth, anonymized page analytics, and your chat history.
Authentication
Sorbet uses magic-link sign-in via Supabase. We store your email address, the timestamps of your sessions, and a per-user rate counter (10 chat messages / hour). No passwords are stored. No third-party social login is offered.
Analytics
We use Google Analytics 4 (property G-RP7VMG2RD8) for aggregate page and event counts. GA4 anonymizes IP addresses by default. No personal identifiers are sent to GA from this site; custom events (chat send, ticker drawer open, ADR drawer open) carry only the action name and the user's session ID.
Admin sessions are excluded from analytics. We also use Vercel Speed Insights for performance monitoring; Vercel hashes the IP before storage.
Chat
When you chat with the thesis, we store your messages and the model's replies so the session is resumable for 7 days. Messages are sent to Anthropic (Claude Sonnet 4.6 / Haiku 4.5) for inference. Anthropic does not train on our API traffic. You can request deletion of your chat history at any time.
The cost-pulse and daily-decision digest emails are sent via Resend. We only email accounts that have signed in. Unsubscribe by replying to any email.
Cookies
We set a Supabase session cookie (essential, first-party) and a theme-preference cookie (light/dark). GA4 may set its own cookies; see Google's policy for details.
Data deletion
Email arun@alignmink.ai from your account address and your data will be deleted within 7 days.
Changes
Material changes to this policy will be published as a decision record on /decisions. The version visible today is dated May 2026.