Privacy Policy

Effective 3 August 2026 · the short version: we store almost nothing, and sell none of it

What we store, and why

Data	Why	Where
Email address + password hash	Your sign-in	Firebase Authentication (Google)
Your tier and its expiry	Deciding what to unlock	Firestore
Timezone, chosen symbol, watchlist	So your settings follow you across devices	Firestore + your browser

That is the whole list. Passwords are handled entirely by Firebase Authentication — we never see them.

What we don't do

No analytics or tracking scripts. No Google Analytics, no pixels, no fingerprinting.
No advertising cookies. The only stored state is your sign-in session and your own preferences.
No selling or sharing of data. Ever, to anyone.
No marketing email. The only email you can receive from the platform is transactional (verification, password reset).

Payments

Card and payment details are collected and processed by our merchant partners (for example Whop) on their own pages, under their own privacy policies. We never receive your card number. What we receive is the email used at checkout, so we can activate the matching account.

The embedded widgets

If you meet our widget on someone else's site: it sets no cookies and runs no analytics. It fetches public statistical data from our servers, which involves your IP address in the ordinary way any web request does; we don't log it beyond standard hosting logs.

Infrastructure

The service runs on Google Firebase (hosting, authentication, database). Google processes data on our behalf under its own terms: firebase.google.com/support/privacy.

Your choices

Delete your account: ask via the contact form or your purchase receipt, and we will remove your auth record and user document.
Export: your stored data is small enough to read on your own account page; ask if you want a copy.

Changes

Material changes will be dated at the top of this page.