Who runs this
LoadConsensus is operated by Brian, an individual based in Minnesota. Mailing address: PO Box TBD, Minneapolis, MN 55401, USA. There is no parent company and no investors. When this changes, this page changes.
What we collect
We collect the minimum needed to operate the product. Specifically:
- Email address — when you sign up for the launch list, create an account, or subscribe to a paid tier. Used for account login, billing receipts, and the alerts you have explicitly opted into.
- IP address (hashed)— we hash incoming IPs at the edge before they hit our application logs. The hash is used for rate limiting and to map traffic to an ASN (autonomous system number), which we use to identify that a given session came from, e.g., “Amazon corporate” rather than to identify you personally.
- Session ID cookie — a first-party cookie that groups requests from the same browser into a session for our own analytics. It contains a random opaque ID. No third-party tracker reads it.
- Stripe customer data — if you subscribe to a paid tier, Stripe (our payment processor) collects the card and billing info. We store only the Stripe customer ID and the subscription state. We never see the card number.
Cookies
We use exactly two cookies, both first-party:
- The Supabase Auth session cookie — httpOnly, SameSite=Lax, used to keep you logged in. Set only after you sign in.
- A session_id cookie used by our first-party analytics to stitch pageviews into sessions. Contains a random ID; not shared with third parties.
We do not run Google Analytics, Facebook Pixel, Segment, Mixpanel, Heap, or any third-party advertising or behavioral tracker. We do not load any third-party script on our marketing pages.
Where data lives
Application data is stored in a Postgres database hosted by Supabase (US-East-1). Web hosting is on Vercel. Background workers run on DigitalOcean. Payments are processed by Stripe. Outbound email is delivered via SendGrid. LLM-assisted extraction of public regulatory filings uses Anthropic’s API; we send only the public-domain document content, never user data. ASN lookups use a MaxMind database loaded into our own workers.
Retention
Raw pageview rows are retained for 180 days and then archived in aggregate form (counts per route per day) and the original rows are deleted. Subscriber records, including your email and subscription state, are retained for as long as your account exists. When you request deletion, the row is removed within 30 days, including from logical backups on the next rotation.
Right to delete
Email privacy@loadconsensus.com from the address on file and ask us to delete your account. We will confirm within 72 hours and complete the deletion within 30 days. There is no fee and no form to fill out. If you also subscribe to alerts, the same email request removes you from those.
GDPR & CCPA
LoadConsensus is not commercially targeted at residents of the European Union or California, and we do not sell personal data to anyone. If you are an EU or California resident and want to exercise a statutory access, correction, or deletion right, contact privacy@loadconsensus.com. We will respond in good faith.
Changes to this policy
When we change this policy in a way that materially expands what we collect or how we use it, we update the date at the top and email account holders. We do not change it silently.
Contact
privacy@loadconsensus.com — for anything in this policy.