Privacy

FullyCooked reads the brokerage data you connect, writes a roast, and deletes that data the moment the roast is written. We keep two things: the roast, because the share link shows it, and, if you log in with SnapTrade, that login, so you can roast another account without connecting again. We never see your brokerage password, we cannot trade, and we sell nothing about you.

Who we are

FullyCooked (“we”) runs this site. Questions, requests and complaints go through the contact page.

What we read

When you connect through SnapTrade, with your SnapTrade account or a read-only link to your brokerage, we get read-only access to your accounts: names and types, balances, current positions and recent transactions. We use them for one thing: your roast. We read them only when you open the account list or ask for a roast. Nothing runs in the background.

We never receive your brokerage login. We cannot place trades or move money.

What we delete

Positions, balances, transactions and the summary we build from them are deleted the moment the roast is written. If a roast fails or is interrupted, they are deleted then instead. SnapTrade stays the source of truth; every roast reads your accounts fresh.

If you pick a broker directly instead of logging in, we create a temporary SnapTrade user for you. That user and its connection are deleted at SnapTrade when the roast is written or the session is abandoned, and nothing about it is kept.

Your account

“Continue with SnapTrade” is the login. There is no FullyCooked password. When you log in we create an account that holds exactly two things: a scrambled, one-way form of your SnapTrade user number, so we can tell it is you next time, and the token SnapTrade gives us to read your accounts, which we store encrypted.

SnapTrade also sends us your email address when you log in. We do not store it. We keep no name, no email and no holdings on your account.

We keep the account until you delete it. “Delete my account” on the account page erases our copy of the token, logs out every browser and unties your roasts from the account. The roasts stay at their links unless you ask us to remove them. Your authorization also exists on SnapTrade’s side, where SnapTrade manages it.

What we keep

The roast: your investor type, the tagline, the one or two lines and the receipts they cite. Those receipts include figures from your accounts, such as a position’s unrealized gain or loss and its share of the portfolio.

Alongside it: a short label for what was roasted, when it was written, whether you pressed share, and the reactions visitors leave. We keep it so your link keeps working. Nobody can reach it without the link, and the link is unguessable.

Cookies

One random identifier tells a roast’s author apart from the people who receive the link; only the author sees the share controls. A second cookie holds your working session while you pick an account. If you log in, a third keeps this browser logged in for up to a year and ties it to your account; logging out removes it. Nothing else.

Messages and logs

If you write to us we keep your email address and message so we can reply. They are not linked to any roast.

Like every site we log requests (path, status, timing, a hashed form of the identifier) and errors. An error may name a brokerage account and the data we could not read; access secrets are scrubbed. Logs exist to keep the site working.

Who else sees data

SnapTrade provides the brokerage connection, under its own terms and privacy policy.

Anthropic provides the model that writes the roast. It receives the summary: tickers, position values, gains and losses, account counts, trading statistics. Never your name, email, account numbers or brokerage.

Fly.io hosts the service, in Toronto, Canada.

No ad networks, no third-party analytics, no tracking pixels. We do not sell, rent or trade personal information.

Sharing

A share link shows the card and nothing else: no holdings list, no balances beyond the figures the lines cite. Anyone with the link can view and react. If you press share, the roast may also appear on our home page as the example. You control where the link goes.

Security

Traffic is encrypted in transit. Holdings are held for seconds, not stored. The SnapTrade token on your account is encrypted at rest and is read-only: it cannot trade or move money. No system is perfectly secure, and we cannot promise unauthorized access will never happen.

Your choices

Connect nothing, and nothing is read. Log out whenever you like, or delete your account on the account page. To delete a roast or a message, send us the link through the contact page. Clear the cookies in your browser whenever you like.

Age and changes

FullyCooked is not for anyone under 18. We may update this policy; the date at the top says when. Using the service after a change means you accept it.