Privacy
What Dotto keeps, where, and how to remove it.
Draft, not yet reviewed by counsel.
In your browser
Your onboarding draft, theme, time zone and which portfolio is selected are kept in this browser's local storage.
A single cookie, dotto_guest, holds a random token that links this browser to its portfolios on Dotto's server. It's only sent to Dotto's API, can't be read by scripts, and isn't used for tracking. Dotto stores only a hash of it.
On Dotto's server
- Practice portfolios, rule versions, decisions and activity, so Dotto can keep reviewing your twin while you're away. There's no account, email or name attached.
- Portfolios of browsers that haven't visited for 30 days stop being reviewed until you return.
- Price requests: the ticker symbols you price.
- Share links: only the content shown in the preview when you created the link, plus when it was created and turned off. Wallet addresses are never included.
- Standard request logs for errors, with a reference code you can quote when reporting a problem.
- An append-only audit log of actions (created, shared, deleted) that keeps an anonymous identifier after you delete your data, and no portfolio contents.
Export everything or delete it all from Settings. Deleting removes your portfolios, decisions and share links from the database immediately.
Wallets
Connecting a wallet shares its public address with your browser session. Dotto reads balances from Robinhood Chain and doesn't store the address on its server.
No tracking
This release doesn't use analytics, advertising cookies or third-party trackers.