Tulir Systems
Contact Us
Portfolio Analysis PulseAlert

Legal

Privacy Policy

Last updated: October 22, 2026

The short version

This website has no accounts, no uploads and no cookies of ours, and we do not know who you are. Four things involve a third party: your request reaches our hosting provider, Cloudflare; the web fonts are fetched from Google; a cookieless page-view counter runs on the page; and there is now one form, on the contact page, which hands what you type to our email provider, Resend, so it can be delivered to us. The form is the only one of the four that receives anything you typed, and what you type is not stored. All four are described below. Our products are separate and have their own, much longer privacy policies — this one does not cover them.

1. Who this policy is from, and what it covers

This policy is published by Tulir Systems LLC, a limited liability company formed in the State of New Jersey, United States. It covers tulir.systems and its pages (the “Site”) — this site only.

It does not cover Portfolio Analysis or PulseAlert. Those products hold accounts, store data and send email. Portfolio Analysis publishes its own privacy policy setting out exactly what is sent, what is kept and how to delete it. PulseAlert sets its disclosures out in its Terms of Use rather than in a separate policy. Read whichever applies to the product you are using, and section 2 below for how this Site differs from both.

2. This Site and the products are different things

Almost every answer on this page is the opposite for our software. The Site holds nothing; the products hold accounts, store data and send email. A reader who carried “we collect nothing” from here across to a product would be badly misled, so rather than leave the distinction to one sentence, here is the shape of it. Each product’s own policy is the one that governs your use of that product.

Portfolio Analysis

The statement you choose is read on your own device and the file itself is never uploaded. If you are signed in, the holdings it read out of it — the security, its description, the account label, the quantity, the value, the price, the cost basis and the kind of asset — are stored on our server against your account, so you do not have to import again.

That happens on every import, and there is no setting to switch it off. It is kept until you delete it; there is no automatic expiry. The in-product control removes your saved portfolios and planning figures — it does not delete the account itself, so do not read it as closing your account.

Two details worth knowing rather than discovering. Account labels are kept as the statement printed them, and a brokerage account label sometimes contains a person’s name, so a stored portfolio should not be thought of as anonymous. And when that software meets a fund whose holdings it cannot resolve, the ticker and the fund’s name are recorded so the gap can be filled — that happens whether or not you are signed in, and it carries no dollar amounts, no share counts and no account names.

PulseAlert

Holds an account, your watchlist and your alert preferences, and sends you email on a schedule. Its disclosures are set out in its own Terms of Use. Account deletion is by request to us rather than a button in the product.

Where to look

For anything you do inside a product — what is stored, for how long, and how to remove it — read that product’s own policy and terms, which are longer and more specific than this page. If you cannot find an answer there, write to [email protected] and we will answer for both products.

3. What we collect on this Site

The Site has no sign-up, no sign-in, no comment box and no file upload, we have no database of visitors, and we never ask you for financial information.

There is one thing you can type, and it is new as of 19 October 2026: the contact page carries a form. Apart from that form, nothing here collects anything from you — and the form collects nothing unless you choose to fill it in and send it.

What the contact form does

It asks for your name, your email address and your message, and optionally your phone number, your organisation and which product interests you. The optional fields are genuinely optional: leaving them blank sends the form just the same, and we do not use a phone number you give us for anything except replying to the message it came with. When you send it, those fields are emailed to us at [email protected] through our email provider, Resend, which receives them in order to deliver the message and for no other purpose. The reply address is set to yours, so answering you is a reply rather than a new message.

It is not stored. There is no database behind this Site and the form does not create one: your message arrives as an email in our inbox and exists nowhere else. From that point it is ordinary correspondence, kept and used exactly as described in section 8.

The form sets no cookie and writes nothing to your browser. It carries one hidden field that a person never sees and never fills in, which is there to catch automated submissions; if it is filled in we discard the message. If you would rather not use the form, [email protected] reaches the same inbox.

4. Server logs

Like any website, loading a page means your browser makes a request, and that request is recorded by the infrastructure that serves it. The Site is hosted on Cloudflare Pages, and Cloudflare records, in the normal course of operating and protecting the service: your IP address, the page requested, the date and time, your browser’s user-agent string and the referring page if your browser sends one.

We use these logs only to keep the Site running and to defend it against abuse. We do not use them to build a profile of you, we do not combine them with anything else, and we do not sell or share them. They are retained by our provider under that provider’s own retention policy.

5. Cookies and tracking

We set no cookies on this Site. There is no tag manager, no advertising pixel, no session identifier and no cross-site tracking of any kind. Nothing here writes to your browser’s storage. That is why you are not being asked to accept anything.

There is one measurement script: Cloudflare Web Analytics, which our hosting provider inserts into the page at its edge. It sets no cookie and stores nothing in your browser. Once per page view it reports the address of the page, the referring page if your browser sends one, and how long the page took to load. The address is sent without any query string or anchor, so anything after a ? or a # never leaves your browser.

We use it to see which pages are read and whether the Site is working, nothing more. Our two products count their own usage separately, each with its own counter; no identifier is shared between this Site and either product, or between the products, so none of them can be used to follow you from one to another. Blocking static.cloudflareinsights.com removes it and changes nothing else about the page.

6. Web fonts

The Site uses the Inter and Playfair Display typefaces, loaded from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Making that request discloses your IP address and your user-agent string to Google, which states that it does not use Google Fonts requests to create profiles or serve ads. It does not disclose which page you are reading: this Site sends Referrer-Policy: strict-origin-when-cross-origin, so a request to another origin carries https://tulir.systems and nothing more. Google Fonts sets no cookies. If you would rather not make that request, blocking those two hostnames changes only the typeface the page is drawn in.

7. What we do not do

8. Email you send us

If you write to [email protected] — or send the contact form, which arrives in the same inbox as an ordinary email — we receive your message, your email address and whatever you choose to put in it, through our email provider. We keep correspondence for as long as it is useful to answer you and to keep a record of what was asked, and we use it only to reply. We do not add you to a mailing list because you wrote to us.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete or obtain a copy of personal information a company holds about you, and to appeal a refusal. For this Site the honest answer is that there is almost nothing to exercise them against: beyond the server logs described in section 3 and any email you have sent us, we hold no personal information about visitors. If you want to make a request anyway, or you believe we hold something you did not expect, write to [email protected] and we will answer. We will not charge you or discriminate against you for asking.

For data held by a product — a stored portfolio, a watchlist, an account — use the deletion controls inside that product, which are the fastest route. If you cannot reach them, or you want something those controls do not cover, write to [email protected] and we will deal with it.

10. Where data is processed

Tulir Systems LLC operates from the United States, and the Site is served from Cloudflare’s global network. Requests may be handled by a server outside your country.

11. Changes to this policy

If this Site ever starts collecting something — a contact form, or analytics — this page will say so before it does, and the “last updated” date above will change. We will not quietly add tracking and leave this text standing.

That has now happened twice, and both are written up above rather than quietly absorbed: the page-view counter our hosting provider runs (section 5), and the contact form (section 3). The date above moved with them.

12. Contact

Tulir Systems LLC
1099 White Horse Road
Voorhees, NJ 08043
United States
[email protected]