Privacy Policy
Last updated: 2026-06-09
This is plain-English. What we collect, why, and what we do with it. If anything's unclear, email us.
What we collect
- Account data: your email address and a bcrypt-hashed password (we never store your actual password).
- Activity data: which whales you've starred, your alert rules and their parameters, which alerts have fired and which you've marked seen.
- Telegram link (optional): if you connect Telegram, we store your Telegram chat ID and the username/first name Telegram returns. You can disconnect at any time.
- Payment data (Pro subscribers only): Stripe handles all payment details. We never see your card number. We store only your Stripe customer ID and subscription ID, used to manage your subscription.
What we do NOT collect
- No analytics platforms (no Google Analytics, no Mixpanel, no Fathom — nothing).
- No tracking pixels or third-party scripts beyond the Tailwind and Chart.js CDNs we use to render the page.
- No ad networks.
- No email newsletters or marketing tools.
- No data brokers.
What we do with it
- Sign you in.
- Evaluate your alert rules against incoming whale movements.
- Deliver alerts to your Telegram if you've linked it.
- Charge your subscription via Stripe if you're on Pro.
- Nothing else.
Who we share it with
- Stripe — for processing payments. Their privacy policy applies for payment data.
- Telegram — to deliver alerts to chats you've explicitly linked.
- That's it. We don't sell your data, share it with advertisers, or send it to "partners."
Cookies + local storage
One HttpOnly session cookie keeps you signed in. It's set when you log in, cleared when you log out.
Browser localStorage stores non-personal preferences: scope toggle (All vs. My Whales), dormant-whale filter, dismissed-disclaimer flag. This data never leaves your browser.
Your rights
- Delete your account via the Settings page (instant + irreversible), or email remykavanagh@gmail.com if anything goes wrong.
- Export your data — same channel.
- Disconnect Telegram at any time via the Alerts page (instant).
- Cancel your subscription via the Manage Subscription button (handled by Stripe Customer Portal).
Data retention
Your account + watchlist + rules: kept until you delete your account. Alert fire history: kept up to 90 days then auto-deleted. Telegram chat ID: deleted immediately when you disconnect.
Changes to this policy
If we change anything material, we'll post the updated date above and email registered users at least 14 days before it takes effect.
Contact
For privacy questions: remykavanagh@gmail.com