Giorgio Gilestro
f1903e1e61
Adds the unauthenticated surface that's needed to invite outsiders:
- Landing (/) — dual-purpose root: dashboard for logged-in users,
landing for everyone else. New maybe_current_user soft-auth helper
in app/auth.py supports it without disturbing the per-route
require_token deps on /news, /log, /upload, /settings.
- About, Pricing, Disclaimer, Terms, Privacy — own router
(app/routers/public.py), no auth dep, shared public_base layout
(brand link, thin nav, footer with legal links + ICO ref + date).
- Editorial positioning: news aggregator with a macro brain; tagline
"Understand markets. Don't gamble on them."; anti-trading-as-gambling
stance carried through About and Landing.
Legal pass following an independent lawyer-style review:
- Privacy: explicit UK-GDPR Art. 6 lawful-basis section; Art. 22
automated-decision line; explicit consent for sessionStorage sync
key (PECR); 30-day IP-log retention; Art. 21 objection right;
Children clause; Art. 33/34 breach-notification clause;
international-transfer mechanism (IDTA + UK Addendum). ICO
registration ZC098928 surfaced at the top.
- Pricing: paid-card AI-portfolio-analysis bullet rewritten to remove
advice-shaped wording ("what would invalidate the posture" gone);
added italic carve-out citing FSMA / FCA COBS.
- Disclaimer: separate EU/EEA carve-out + MAR 596/2014 Art. 3(1)(34)
commentator safe-harbour; "qualifies the Terms" line; hallucination
wording fixed.
- Terms: cl.4 explicit AI-training prohibition + harassment line;
cl.5 CCR 2013 14-day cancellation; cl.7 softened AI copyright
claim under CDPA s.9(3) ambiguity; cl.8 proportionate suspension +
pro-rata refund for paid users; cl.10 CRA 2015 Pt 1 statutory-rights
carve-out from the liability cap; cl.11 right to close account on
material change; cl.12 non-exclusive jurisdiction + UK consumer
local courts.
Code-side enforcement of the Privacy claim:
- openrouter.py: outbound OpenRouter calls now carry
X-OR-Allow-Training: false. DeepSeek doesn't expose a per-request
flag; the Privacy page discloses this caveat verbatim.
Apex domain prep:
- branding.APP_URL flipped to https://read.markets (was app.). DNS for
the apex already resolves; pending operator NPM step is a cert that
covers the bare apex + a 301 from app.read.markets. No hard-coded
subdomain references remain in code (verified with grep).
Nav + chrome:
- app dropdown gains Pricing / Terms / Privacy / Disclaimer links.
- login.html gains a small legal-links footer for the
highest-leverage moment to surface them.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
76 lines
2.9 KiB
HTML
76 lines
2.9 KiB
HTML
{% extends "public_base.html" %}
|
|
{% block title %}{{ BRAND_NAME }} · About{% endblock %}
|
|
|
|
{% block main %}
|
|
|
|
<section class="public-section">
|
|
<h1 class="public-section__head">About {{ BRAND_NAME }}</h1>
|
|
<p>
|
|
{{ BRAND_NAME }} is a <strong>news aggregator with a macro brain</strong>.
|
|
We pull market headlines and a curated set of cross-asset signals,
|
|
auto-tag the news by theme, and use a large language model to write
|
|
a short interpretation every hour — in plain English, with a fixed
|
|
editorial discipline.
|
|
</p>
|
|
<p>
|
|
Editorially we’re a media service, not a financial one. We
|
|
don’t make buy/sell calls, we don’t do technical
|
|
analysis, and we don’t pretend to know which way the tape goes
|
|
next.
|
|
</p>
|
|
</section>
|
|
|
|
<section class="public-section">
|
|
<h2 class="public-section__head">Who it’s for</h2>
|
|
<p>
|
|
Investors who’d rather <em>understand</em> than trade. People
|
|
who want a coherent read of the underlying fundamentals — what the
|
|
real economy, policy, and valuation are doing — not the next 30
|
|
minutes of price action, not chart patterns, and not which ETF to
|
|
buy.
|
|
</p>
|
|
<p>
|
|
Particularly: investors new enough to markets that the gambling
|
|
framing of social media is doing real damage. Every read here is
|
|
deliberately calm, anti-technical-analysis, and rooted in
|
|
fundamentals. We treat trading and gambling as different activities,
|
|
and we’re built for the people who already see them that way.
|
|
</p>
|
|
</section>
|
|
|
|
<section class="public-section">
|
|
<h2 class="public-section__head">How it’s built</h2>
|
|
<p>
|
|
Architecturally, the product is deliberately privacy-shaped:
|
|
</p>
|
|
<ul>
|
|
<li>Your portfolio lives in your browser. The server’s view is
|
|
an aggregate set of tickers held across the whole user base,
|
|
which on its own does not identify any individual user — see
|
|
the <a href="/privacy">Privacy notice</a> for the exact data
|
|
structures.</li>
|
|
<li>Cloud sync of your portfolio is opt-in and end-to-end encrypted
|
|
with a PIN only you know.</li>
|
|
<li>No third-party tracking, no analytics SDKs, no ad cookies.</li>
|
|
</ul>
|
|
<p>
|
|
Full details on the <a href="/privacy">privacy page</a>.
|
|
</p>
|
|
</section>
|
|
|
|
<section class="public-section public-section--callout">
|
|
<p style="margin:0 0 8px;">
|
|
{{ BRAND_NAME }} is operated from {{ OPERATOR_JURISDICTION }} by an
|
|
individual operator. It is <strong>not a regulated firm</strong>, and
|
|
nothing here is investment advice. See the
|
|
<a href="/disclaimer">disclaimer</a>.
|
|
</p>
|
|
<p style="margin:0; font-size:12.5px; color: var(--muted);">
|
|
If you are in financial distress, please consider speaking to a
|
|
free service such as
|
|
<a href="https://www.moneyhelper.org.uk/" target="_blank" rel="noopener">MoneyHelper</a>
|
|
before relying on anything you read here.
|
|
</p>
|
|
</section>
|
|
|
|
{% endblock %}
|