Privacy
Read once, roasted, deleted. Here is what that means.
FullyCooked reads the brokerage data you connect, once, writes a roast, and deletes that data the moment the roast exists. We keep the roast, because the share link shows it. We never see your brokerage password, we cannot trade, and we sell nothing about you.
Who we are
FullyCooked (“we”) runs this site. Questions, requests and complaints go through the contact page.
What we read
When you connect through SnapTrade, with your SnapTrade account or a read-only link to your brokerage, we get read-only access to the accounts you pick: names and types, balances, current positions and recent transactions. We use them for one thing: your roast.
We never receive your brokerage login. We cannot place trades or move money.
What we delete
Positions, balances, transactions and the summary we build from them are deleted the moment the roast is written.
Access credentials live in server memory only. They are dropped when the roast is written, when you disconnect, or after thirty minutes.
For a direct brokerage connection we create a temporary SnapTrade user for you. That user and its connection are deleted at SnapTrade when the roast is written or the session is abandoned.
What we keep
The roast: your investor type, the tagline, the one or two lines and the receipts they cite. Those receipts include figures from your accounts, such as a position’s unrealized gain or loss and its share of the portfolio.
Alongside it: a short label for what was roasted, when it was written, whether you pressed share, and the reactions visitors leave. We keep it so your link keeps working. Nobody can reach it without the link, and the link is unguessable.
Cookies
One random identifier tells a roast’s author apart from the people who receive the link; only the author sees the share controls. It is tied to no name, email or account. A second cookie holds your connection while you pick an account. Nothing else.
Messages and logs
If you write to us we keep your email address and message so we can reply. They are not linked to any roast.
Like every site we log requests (path, status, timing, a hashed form of the identifier) and errors. An error may name a brokerage account and the data we could not read; access secrets are scrubbed. Logs exist to keep the site working.
Who else sees data
SnapTrade provides the brokerage connection, under its own terms and privacy policy.
Anthropic provides the model that writes the roast. It receives the summary: tickers, position values, gains and losses, account counts, trading statistics. Never your name, email, account numbers or brokerage.
Fly.io hosts the service, in Toronto, Canada.
No ad networks, no third-party analytics, no tracking pixels. We do not sell, rent or trade personal information.
Sharing
A share link shows the card and nothing else: no holdings list, no balances beyond the figures the lines cite. Anyone with the link can view and react. If you press share, the roast may also appear on our home page as the example. You control where the link goes.
Security
Traffic is encrypted in transit. Brokerage data is held for seconds, not stored. No system is perfectly secure, and we cannot promise unauthorized access will never happen.
Your choices
Connect nothing, and nothing is read. A connection ends by itself when the roast is written. To delete a roast or a message, send us the link through the contact page. Clear the cookie in your browser whenever you like.
Age and changes
FullyCooked is not for anyone under 18. We may update this policy; the date at the top says when. Using the service after a change means you accept it.