Privacy Policy
Last Updated: 1/28/2026
1. Data Controller
[LEGAL COMPANY NAME]
Address: [FULL ADDRESS]
Privacy Email: [EMAIL]
DPO (if applicable): [NAME / EMAIL]
2. Data We Collect
2.1 Data provided by user via Google (Supabase Auth)
When you sign in using Google, our authentication provider (Supabase) receives and stores:
- Full Name
- Email Address
- Avatar / Profile Picture URL
- Google User ID
We do not access or store your Google password. Authentication is handled securely via OAuth 2.0.
2.2 Profile & Preferences Data
We store the following user preferences to customize your experience:
- Interface Settings: Theme preference (Light/Dark mode), Home View layout (Standard/Casual/Markets).
- Profile Information: Optional bio, country, and display name updates made explicitly by you.
2.3 Automatic Technical Data
- IP Address and Device ID (for security and session management)
- Browser Information
- Operating System
- Cookies: Essential session cookies (`sb-*-auth-token`) to maintain your login state.
2.4 Push Notifications (OneSignal)
If you opt-in to receive notifications, we share an anonymous identifier with OneSignal to deliver alerts about market movements or news. You can manage or revoke this permission directly in your browser settings or user profile.
2.5 Newsletter
If you subscribe to our newsletter, your email is stored to send you editorial content. You can unsubscribe at any time via the link in the emails.
3. Purposes of Processing
We use your data to:
- Provide the Service: Manage your account, save your preferences, and maintain your session.
- Personalization: Display content relevant to your selected "Home View" and interface settings.
- Communication: Send critical account updates or, if opted-in, market notifications and newsletters.
- Security: Prevent fraud and unauthorized access.
4. User Rights
EU Users (GDPR)
- Access
- Rectification
- Deletion ("Right to be Forgotten")
- Portability
- Limitation of processing
- Opposition
California Users (CCPA/CPRA)
- Know what data we collect
- Request deletion
- Opt-out of "sale/sharing of data"
- Non-discrimination for exercising rights
Requests: [EMAIL]