V·EDETTA
Postern Labs · quiet lookout
research & tracking only — informational, not investment advice · places no trades · quotes may be delayed
MIC LIVE

Watchlist

Price alerts

alerts fire only while this tab is open and quotes refresh — nothing runs in any cloud

Portfolio

tracking only — vedetta places no trades; connecting a real broker is deliberately out of scope

    Hold the orb (or the space bar) and ask about the market — or just type below.
    Your watchlist and portfolio never leave this device; see Privacy for exactly what does.

    ● no server · no account · holdings never leave this device model:

    Settings

    Stored only in this browser’s localStorage and sent only to api.anthropic.com — Vedetta has no server that could ever see it. Get a key at console.anthropic.com.

    Keys at rest (optional lock)

    Locking seals your Anthropic and Finnhub keys with AES-256-GCM under a key derived from your passphrase (PBKDF2-SHA-256, 310,000 it. — the same construction as the vault below and Chiave, our sign-in reference). localStorage then holds only ciphertext; you unlock once per session, and forgetting the passphrase means re-entering the keys. Without a lock, the keys sit readable in this browser’s localStorage — any code or person with access to this browser profile can read them.

    Billed to your own Anthropic account at your account’s rates.

    Market data — bring your own source
    Stock & ETF quotes

    Crypto always uses CoinGecko (keyless, CORS-open, works in any browser). FX pairs like EUR/USD always use Frankfurter (keyless, CORS-open, ECB daily reference rates). Both are disclosed in the Privacy ledger.

    Every board refresh fetches these too, so the set of symbols your provider sees is padded beyond what you actually hold. It blurs the picture; it does not erase it — see Privacy.

    Off by default because it means a network call to your data provider once a minute while the tab is visible. Alerts are checked on every refresh.

    Voice
    Speech-to-text engine
    Erase everything

    Wipes your API keys, all settings, the encrypted vault (watchlist, portfolio, alerts), and this session’s conversation from the browser. Nothing else exists to erase — there is no server copy.

    Vault — your holdings, encrypted

    Right now your watchlist, portfolio, and alerts live only in this tab’s memory — they vanish when you close it. Set a passphrase to keep them on this device, encrypted at rest with AES-256-GCM (key derived from your passphrase with PBKDF2-SHA-256, 310,000 iterations, per-vault random salt, fresh IV per write). The passphrase and key are never stored and never leave this browser. Forget the passphrase and the data is honestly gone — there is no recovery, because there is no server.

    Privacy — who sees what

    Vedetta is a static page. There is no Postern server, no account, no telemetry, and no analytics. Your keys and settings live in this browser’s localStorage — with the optional lock set in Settings, the API keys are stored only as AES-256-GCM ciphertext sealed under your passphrase; without it they are readable there, and Settings says so plainly. Your watchlist, portfolio, and alerts live in an encrypted vault on this device; the conversation lives in this tab’s memory and is gone when you close it. The honest ledger:

    ◮

    Quote lookups → your market-data provider

    Every quote request necessarily tells the provider which symbol you asked about, from your IP address. Over time that lets the provider infer your watchlist and interests. That is the unavoidable physics of asking someone else for a price. What Vedetta does about it:

    · Snapshot refreshes — the board refreshes the whole list at once, so a single lookup doesn’t spotlight which asset you care about right now. Honest fine print: on per-symbol providers (Yahoo, Finnhub) a snapshot is still one request per symbol to the same host — it hides your focus, not the set. CoinGecko batches genuinely (one request for all coins), and Frankfurter returns every currency in one response, so an FX lookup reveals nothing beyond the base currency.

    · Decoy symbols (Settings) pad every snapshot so the set the provider sees is larger than what you actually track. A blur, not an eraser.

    · Name search is fully local — resolving “Petrobras” to PBR uses a directory inside this file. Nothing is sent until you fetch the actual quote.

    · The real Postern product fetches quotes over on-device Tor (postern-tor) so the provider doesn’t get your IP. This browser prototype does not do that — your IP is visible to the provider here.

    ◮

    Your words → Anthropic (when you send a message)

    Each turn, the conversation text goes from your browser directly to api.anthropic.com, authenticated with your key — no middleman relays or logs it. Anthropic processes it under your agreement with them. Honest and important: when you ask about your portfolio or watchlist, their contents are included in that message so the model can answer — your holdings reach Anthropic in that moment, under your key. If you never ask, they never go.

    ◮

    Your voice → your browser’s vendor (only while you hold to talk)

    Voice input uses the browser’s Web Speech API. In Chrome and most browsers this sends your audio to the browser vendor’s servers for transcription — so speech input is not fully private. It is strictly push-to-talk: the microphone is captured only while you hold the orb or the space bar, never in the background. Want zero audio leaving the machine? Type instead — the text path is fully local until you hit send. The real product ships an on-device Whisper (whisper.cpp/WASM) engine in the same slot.

    ●

    Watchlist, portfolio, alerts — this device only, encrypted

    Stored in localStorage as an AES-256-GCM ciphertext; the key is derived from your passphrase (PBKDF2-SHA-256, 310,000 iterations) and is never stored or exported. No cloud copy, no sync, no account. “Erase everything” in Settings destroys it instantly. Your holdings are the sensitive asset here — they stay yours.

    ●

    Spoken replies — on-device

    Text-to-speech uses your operating system’s voices via speechSynthesis. Audio is generated locally and does not leave the device.

    ●

    Price alerts — this tab only

    Alerts are checked in this page’s JavaScript when quotes refresh, and chime locally. No push service, no server watching on your behalf — which honestly also means: alerts do not fire when the tab is closed.

    What we won’t claim: Vedetta is not “100% private.” Symbols you look up reach your data provider; words you send reach Anthropic; spoken input may reach your browser vendor. What Vedetta guarantees is no extra parties and no resident copy of your holdings anywhere but here. The only network destinations in this page’s code are your chosen quote provider(s) and api.anthropic.com. The source is one readable HTML file; verify it yourself.

    And what this is not: Vedetta is voice-driven research and tracking — not a brokerage, not a trading terminal. It places no orders and holds no assets. “Buy” and “sell” here would only ever mean rows in your local tracker. Actually trading would require connecting a regulated broker under your own agreement — a deliberate non-feature of this app.