Privacy Policy

Last updated October 2026

1. What we collect

When you sign in with Google, we receive your name, email address, and profile picture. We store these to create your account and identify you. We record your sign-in dates and your access tier (free or paid). We do not collect financial account credentials or brokerage data.

2. How we use it

To provide access to the terminal, manage your subscription, and communicate about your account. We do not sell your personal information.

3. Google sign-in

Authentication is handled through Google OAuth. We only request basic profile and email scopes. You can revoke access anytime from your Google account settings.

4. Storage & third parties

Account data is stored with our infrastructure providers (hosting and a managed key-value store). Market data is retrieved from third-party financial data providers. Payments, when enabled, are processed by a third-party payment processor — we do not store your card details.

5. Cookies & tracking technologies

We use only strictly-necessary, first-party cookies: a session cookie to keep you signed in and an access cookie for team-code entry. These are required for the site to function. We do not use advertising cookies, session-replay or session-recording tools, fingerprinting, or cross-site tracking. We do not embed Meta/Facebook, TikTok, Google Analytics, or similar ad trackers. To understand which pages are useful, we use Vercel Web Analytics and Vercel Speed Insights, which count page views and page-load performance in aggregate without cookies and without identifying you across websites. We do not sell or rent your personal information.

6. California privacy (CCPA / CIPA)

California residents: because we use no advertising trackers, session-recording or interception technology, and our analytics are aggregate and cookieless, and we do not sell or share personal information, we do not "wiretap," operate a pen register, or run a trap-and-trace device as those terms are used under the California Invasion of Privacy Act. You may request access to, or deletion of, your personal information, and you will not be discriminated against for exercising these rights. To make a request, email us.

7. Third-party services we rely on

Authentication is via Google OAuth (only when you choose to sign in). Payments, when enabled, are handled by Stripe on Stripe-hosted pages — we never see or store your card number. Hosting and our account store are operated by our infrastructure providers. Vercel provides hosting, aggregate page-view analytics and performance measurement. Each processes data only to provide its service, not for advertising.

8. Your choices

You may request deletion of your account and associated data by emailing us. Signing out clears your session on this device.

9. Contact

Privacy questions: contactburak@gmail.com