Privacy Policy

Last updated: August 2, 2026

1. Information We Collect

When you create an account or sign in using a third-party provider (Google, Facebook, or Discord), we receive your name, email address, and profile picture from that provider. We also store data you provide directly, such as your portfolio holdings, watchlist selections, and release-alert preferences.

2. How We Use Your Information

We use your information to provide and improve our services, including displaying your portfolio, watchlist, personalized price data, and requested transactional release reminders. We do not sell your personal information. We do display third-party advertising to non-subscribers (see “Advertising” below), which may involve sharing certain online identifiers with our advertising partner; you can opt out as described in that section.

3. Data Storage

Your data is stored securely using Supabase, a hosted database platform with encryption at rest and in transit. Authentication tokens are stored in your browser and are not shared with third parties.

4. Third-Party Services

We use third-party authentication providers (Google, Facebook, Discord) to enable sign-in. These providers have their own privacy policies governing how they handle your data. We only receive the basic profile information needed to create your account.

We use Resend to deliver transactional emails you request, including release-alert digests. Your email address and the content needed to send those messages are processed by Resend for delivery.

We use Stripe as our payment processor for paid subscriptions. When you check out or manage billing, Stripe processes your payment and billing information under its own privacy policy. OPData receives subscription status and limited transaction identifiers, but does not receive or store your full payment-card details.

5. Advertising

We display advertising provided by Google AdSense to visitors who are not paying subscribers. Google and its advertising partners use cookies and similar identifiers to serve and measure ads, including personalized ads based on your prior visits to this and other websites. Google’s use of advertising cookies enables it and its partners to serve ads based on your visits to our site and other sites on the Internet.

You can opt out of personalized advertising in Google Ads Settings or via www.aboutads.info. For details on how Google uses data when you use our site, see Google’s partner sites policy.

For visitors in the European Economic Area, the United Kingdom, and Switzerland, we present a consent message through a Google-certified Consent Management Platform before serving personalized ads, in line with GDPR requirements. You can change or withdraw your consent at any time using the privacy options link presented on the site.

Paying subscribers (Gold and Platinum) are not shown ads, and the advertising scripts and cookies described above are not loaded for them.

6. Analytics

We use Google Analytics to understand how visitors use our site — which pages and sets are popular, how visitors arrive, and general usage trends — so we can improve the service. Google Analytics sets cookies and collects usage data (such as pages viewed and approximate, IP-derived location) on our behalf. This applies to all visitors, including subscribers.

You can opt out of Google Analytics across all websites using the Google Analytics Opt-out Browser Add-on. For details on how Google uses this data, see Google’s partner sites policy.

7. Cookies

We use cookies and local storage to keep you signed in and to remember your preferences. We also use cookies for analytics (Google Analytics) for all visitors. For visitors who are not paying subscribers, our advertising partner (Google) additionally sets cookies and similar identifiers used to deliver and measure ads, as described in the “Advertising” section above.

8. Security and Abuse Prevention

We use short-lived request-rate records to protect the service from abuse. Network addresses are transformed with a keyed one-way hash before storage, are grouped into a limited set of route categories, and are automatically deleted after 24 hours. These records are used only for security and availability, not advertising or user profiling.

9. Data Deletion

You may request deletion of your account and associated data at any time by contacting us. After we verify the request, we delete or de-identify personal data from our active production systems within 30 days, except for limited information that we must retain to meet legal, security, fraud-prevention, or dispute-resolution obligations.

Encrypted database backups are access-restricted and are not used for normal product operations. Daily backup copies are scheduled to expire after 35 days and monthly copies after no more than 400 days. Because backup integrity locks prevent selective editing, deleted account data may remain in a backup until that backup expires. If a backup is restored, completed deletion requests are reapplied before the restored system returns to normal operation.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date.

11. Contact

If you have questions about this privacy policy, please reach out via our website.