Privacy Policy

1. What we collect

Account data. Your email address and a bcrypt hash of your password (we never store your password itself). If you sign in with Google, we store the Google account identifier Google gives us and your Google-verified email — we do not receive your Google password.

What you save. Chart layouts, drawings, alert rules, favorites, and any custom indicator scripts you write, all tied to your account.

Contact and feedback. If you use the Contact or Feedback form, we store the message, your name and email if you provide them, and — for feedback — an optional rating and category. If you are signed in, the message is linked to your account.

Payment. If you subscribe to a paid plan, Stripe processes the payment and shares with us only a customer reference id and your subscription status — never your card number.

Traffic and abuse prevention. We count page views by page name (not by visitor) with no IP address or device identifier stored. Login, registration, and password-reset attempts are rate-limited using your IP address, held only for a short time (minutes) in a cache and never written to a database.

Analytics. If Google Analytics is enabled on this site, it sets its own cookies and collects usage data under Google's own privacy terms. You can block or clear these cookies in your browser — see our Cookie Policy.

2. What we use it for

• operating your account: authentication, saving your layouts/alerts/indicators, sending

transactional email (verification, password reset, alert notifications) through our email provider, Resend;

• responding to messages you send us;
• processing payment for a paid plan, through Stripe;
• keeping the Service secure (rate limiting, abuse detection);
• understanding aggregate traffic to improve the site (Google Analytics, if enabled).

We do not sell your data, and we do not use it to train any model or share it with an advertiser.

3. Who else sees it

• Resend — sends transactional email on our behalf (verification, password reset, alerts).
• Stripe — processes payment for paid plans; handles your card details directly, we never see

them.

• Google — provides sign-in (OAuth) if you choose it, and Analytics if enabled.
• Hosting — the web application runs on Vercel; the API and database run on a server we

operate, fronted by Cloudflare.

We do not share your data with anyone else, and we do not sell it.

4. How long we keep it

• Your account and everything saved to it (layouts, drawings, alert rules, indicators) is kept

until you delete your account, which removes it permanently and immediately (see Account).

• Alert notification history is kept for 30 days, then automatically deleted.
• A contact or feedback message you sent is kept even after you delete your account, but is no

longer linked to your name — see Section 5.

• Rate-limiting data lives for minutes, in memory, never in a database.

5. What happens when you delete your account

Deleting your account (from Account) permanently removes: your login, chart layouts and drawings, alert rules and their history, favorites, and any indicator scripts you wrote. A contact or feedback message you previously sent is not deleted — it stays in our support inbox so we can keep track of what was reported — but it is detached from your account: nothing about it identifies you as its sender any more once the account is gone. This cannot be undone.

6. Your rights

You can see your own account details, change your password, and delete your account at any time from Account — no request to us needed. For anything else about your data, use Contact.

7. Children

The Service is not directed at children and we do not knowingly collect data from anyone under 18.

8. International transfers

Our servers and processors (listed in Section 3) may be located in different countries from yours. By using the Service you accept that your data may be processed outside your own country.

9. Changes to this policy

We may update this policy. A material change will be reflected by a new date at the top of this page.

10. Contact

Questions about this policy or your data: use the Contact page.