Privacy Policy
How we handle personal information, what cookies we set, and your rights as a visitor or subscriber.
Effective Date: April 27, 2026 Last Updated: August 16, 2026
This Privacy Policy explains how Dr. David Alcindor, a sole proprietor doing business as 4xForecaster ("we," "us," "our"), collects, uses, shares, and safeguards personal information when you visit https://www.4xforecaster.com (the "Site") or subscribe to our paid services (collectively, the "Service"). We are based in the United States.
1. Information We Collect
Information you provide directly: your email address, the report types you choose to receive, and any messages you send us. A name is optional and only if you give us one. The Service is free and has no accounts: we do not ask for, receive or store payment-card details, a billing address or a password. If a paid tier opens in future, this policy will be updated before any payment information is collected.
Information collected automatically: IP address, user-agent, device and browser type, operating system, referring URL, pages viewed, timestamps, approximate location derived from IP, and information from cookies and similar technologies (see Cookie Policy below).
Signup context: when you join a mailing list or waitlist, we record where the signup came from — the campaign parameters in the link you arrived through (for example utm_source, utm_medium, utm_campaign) and the referring website's domain — and store it alongside your email address so we can tell which channels bring people to the Site. We keep only the first such value we see for an address and never overwrite it. Carrying this information between pages of the Site requires the analytics cookie category, so if you decline it we can only see the campaign when you sign up on the same page you arrived on.
Information from third parties: engagement data (opens, clicks) from our email service provider, and aggregated analytics from our analytics provider if enabled and consented to. We receive no payment information, because the Service takes no payments.
We do not intentionally collect sensitive personal information. There are no log-in credentials to collect: your subscription is managed through a single-use link we email you, not through an account and password.
2. How We Use Information
We use personal information to: (a) provide, operate, secure, and maintain the Site and Service; (b) protect the Site against abuse and fraud; (c) communicate with you about the reports you have chosen, respond to inquiries, and deliver newsletters and notices; (d) analyze usage and improve the Service; (e) comply with legal obligations and enforce our agreements; and (f) prepare aggregate, de-identified analytics that do not identify you.
3. Legal Bases (EU/UK Visitors)
Where the EU General Data Protection Regulation, the UK GDPR, or the Swiss Data Protection Act applies, we process personal data on the bases of: (i) performance of a contract (Article 6(1)(b)); (ii) consent (Article 6(1)(a)) for marketing emails and non-essential cookies, withdrawable at any time; (iii) legitimate interests (Article 6(1)(f)) for fraud prevention, security, and basic site operation; and (iv) compliance with legal obligations (Article 6(1)(c)).
4. Third-Party Service Providers
We share personal information with the following processors strictly to operate the Service:
Vercel Inc. — website hosting and delivery, and the managed key-value database (Vercel KV, operated on Upstash infrastructure) in which your email address and report preferences are stored. Privacy policy: https://vercel.com/legal/privacy-policy
Google LLC (Google Analytics 4) — analytics, only where enabled and you consent. Privacy policy: https://policies.google.com/privacy
Resend (email delivery) — sends the reports, blog notifications and welcome messages you subscribe to, and therefore processes your email address. Amazon Web Services (Amazon SES) is configured as an alternative sender. Privacy policy: https://resend.com/legal/privacy-policy
We access read-only third-party financial and market-data APIs, currently operated by the Federal Reserve Bank of St. Louis (FRED), Massive, CoinGecko, Twelve Data, OANDA and bonds-api.com. We do not transmit any personal information about you to these data providers.
5. International Data Transfers
Because we are based in the United States, your personal information will be transferred to and processed in the U.S. For transfers from the European Economic Area, the United Kingdom, or Switzerland, we rely on the EU-U.S. Data Privacy Framework (and its UK Extension and Swiss-U.S. version) where the recipient is certified, and on the European Commission's 2021 Standard Contractual Clauses where the recipient is not DPF-certified.
6. Data Retention
We keep your email address and report preferences for as long as we operate the Service, including after you unsubscribe. Unsubscribing stops every email immediately and clears your report selections, but the address itself stays on file so that we can honour that choice and not re-add you. We hold no payment records, because we take no payments. Server and access logs are retained for up to 90 days. Analytics event data is retained for up to 14 months. Cookie consent records are retained for up to 24 months.
If you would rather we did not keep your address at all, email privacy@4xforecaster.com and ask us to erase it. We will delete the record entirely, and you will need to sign up again if you later want the reports back.
7. Your Privacy Rights
Depending on where you live, you may have the right to: access the personal information we hold about you; correct inaccuracies; delete your personal information; restrict or object to processing; port your data; withdraw consent at any time; opt out of the sale or sharing of your personal information; and limit the use of sensitive personal information.
We do not sell personal information for money. We honor Global Privacy Control (GPC) browser signals as a valid opt-out of any sharing for cross-context behavioral advertising.
To exercise any right, email privacy@4xforecaster.com with sufficient detail for us to verify your identity. We will respond within thirty (30) days under GDPR/UK GDPR or forty-five (45) days under CCPA/CPRA. You may also lodge a complaint with a supervisory authority in your jurisdiction.
8. Children
The Service is not directed to children under the age of sixteen (16), and we do not knowingly collect personal information from children under sixteen. If you believe a child under sixteen has provided personal information, please contact privacy@4xforecaster.com and we will promptly delete it.
9. Security
We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS), access controls, and regular review of our service providers' security practices. No method of internet transmission or electronic storage is one hundred percent secure. In the event of a personal-data breach, we will notify you and the appropriate regulators consistent with applicable law.
10. Changes to This Privacy Policy
We will post any updates on this page and update the "Last Updated" date. Material changes will be communicated by email to active subscribers at least thirty (30) days before they take effect.
Cookie Policy
This Cookie Policy supplements and forms part of our Privacy Policy.
What Cookies Are
Cookies are small text files placed on your device when you visit a website. We also use related technologies such as local storage and pixel tags; references to "cookies" include these.
Categories of Cookies We Use
Strictly necessary — authentication, security, session continuity, fraud prevention. No consent required.
Functional / preferences — remember settings such as theme and language. Consent required for EU/UK visitors.
Performance / analytics — understand how visitors use the Site (e.g., Google Analytics cookies). Consent required for EU/UK visitors. GPC honored in U.S.
Advertising / targeting — we do not currently use advertising cookies.
Your Choices
When you first visit, you may Accept All, Reject All, or Customize non-essential cookies. You can change your preferences at any time through the Cookie Settings link in our footer. We detect and honor the Global Privacy Control (GPC) browser signal as a valid opt-out. You can also block or delete cookies through your browser settings. For Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout
Retention
Strictly necessary cookies expire at session end or shortly thereafter. Analytics cookies may persist up to 13 months. Consent records are retained for up to 24 months.
Contact
Dr. David Alcindor — privacy@4xforecaster.com