Last updated July 24, 2026

Privacy Policy

This policy applies to the OpenAlphaStack static website and the separately deployed public read-only MCP service. The local dashboard, local MCP server, and paper-trading data run on the user's own device by default.

Information we process

The static website requires no account and does not actively collect broker accounts, positions, or identity data. The public MCP processes tool names and bounded inputs, such as public stock codes, indicator options, and price series, to produce a response.

Infrastructure logs

GitHub Pages, MCP hosting providers, reverse proxies, or security services may record IP addresses, request times, paths, user-agent data, status codes, and diagnostics for operations and abuse prevention. Do not submit API keys, broker information, local ledgers, or other sensitive data to public tools.

Third-party market data

Live read-only tools may send stock codes and similar query parameters to public market-data providers. The current implementation may use Sina Finance, Tencent Finance, and sources reached through AkShare. Those providers apply their own terms and policies.

Retention and sharing

The public MCP is stateless with respect to local paper accounts, plans, positions, and ledgers. Infrastructure-log retention depends on the deployed hosting configuration. We do not sell personal information.

Security and contact

Use the local MCP when processing must remain entirely local. Raise privacy questions through the channels on the support page. Report vulnerabilities privately under the repository security policy.