Privacy Notice

1. Data stored in your browser

Saved items, read history, the light/dark theme, recent searches (up to 10) and feedback drafts are stored in your own browser. List and scroll positions are kept only in the current tab's session storage and are cleared when you close the tab. None of this is sent to our server, it disappears when you clear your browser data, and it does not sync between devices. You can export and import saved items, read history and the theme on the "Saved" page.

2. Feedback

When you use the feedback page we store what you write, the email address if you choose to give one, the page you were on and any screenshot you attach, only so we can handle your feedback. To prevent abuse, the server also stores a one-way identifier derived from your network address and browser type, used for rate limiting and blocking abusive senders.

3. Newsletter

If you sign up for the Midu Weekly, we store your email address, the page you signed up from, the signup time and a random unsubscribe token, only to send you the newsletter. We send it with Resend (resend.com), our email delivery provider, which processes your address only to deliver our emails. We first send one confirmation email, and you only get the newsletter after you confirm. We do not share or sell your address, and our emails contain no tracking pixels. Every email has an unsubscribe link that deletes your address immediately; you can also email team@midu.si and we will remove it. Signups are rate limited per network address to prevent abuse; the address is not stored with your signup.

4. Member accounts and alerts

If you create a free account we store your email address, when the account was created and when you last signed in. We have no passwords: to sign in we email you a one-time link that expires after 15 minutes; we store only a one-way hash of that link and of your session. Your session is kept in a secure, HTTP-only cookie (midu_session) for up to 30 days, plus a non-secret cookie (midu_member) that only tells the page to show "Account" instead of "Sign in". These are strictly necessary first-party cookies; we set no other cookies.

If you create deal alerts we store your filter settings (sectors, rounds, regions, keyword, investor, minimum amount, whether to include Form D signals) and, for each daily digest we send, the date and which deals it listed, so we never email the same deal twice. Alert digests are sent with Resend, at most one per day and only when there are matches; every digest has a link to stop alert emails. Sign-in requests are rate limited per network address and per email address; the network address is not stored.

You can delete your account at any time on the Account page. That immediately deletes your account, alerts, digest history, sign-in links and sessions, and optionally your newsletter subscription. If you are subscribed to the Midu Weekly, your account page shows that subscription because it uses the same email address.

5. Hosting and server logs

Midu is hosted on a DigitalOcean server in San Francisco, USA. Our nginx web server keeps standard access logs (IP address, time, requested page, referrer and browser user agent) for security and troubleshooting; they rotate automatically and are kept for about 14 days. We do not use advertising trackers or third-party cookies.

Analytics

To understand which pages are useful we run Umami, an open-source analytics tool that we host ourselves on the same server, served from midu.si. It sets no cookies and stores nothing in your browser. It records the page visited, referrer, browser, operating system, device type, country, and a few anonymous actions (for example, that a newsletter signup or alert was created, without the email address). Your IP address is used only transiently to derive the country and an anonymized visitor hash that rotates, and is not stored. No data is shared with third parties. Pages under /account and /admin are not tracked.

6. Third-party content

Midu shows English summaries of, and links to, articles and filings published by others, such as news sites and SEC EDGAR. When you follow a link you are on their website and their privacy policy applies.

7. Contact

To ask about, correct or delete feedback you sent us, to unsubscribe from the newsletter, or to have your account deleted, email team@midu.si.