Privacy Policy
What we collect, what we don't, where it lives, and how to delete it. Every item maps to a concrete field in our database — no vague wording.
01What we collect
- Email address: your login credential — entered by you for code sign-in, or returned by Google if you use Google sign-in.
- Time zone: the IANA time zone name your browser reports (e.g. America/New_York) at sign-up and sign-in, used to render times in your local time. Never typed by hand, never resolved to a location.
- Language preference: whether you read the Chinese or English version.
- Watchlist: the ticker symbols you explicitly add.
- Followed channels: the YouTubers you explicitly follow.
- Active days: the calendar days you open the product (day precision only), used for retention metrics. We do not record what you do on a page.
- Subscription state: trial end date and current plan, used to gate member features.
02What we don't collect
- Passwords. This site has none: sign-in is by email code or Google authorization, so we never see or store a password.
- Precise geolocation, device fingerprints, or cross-site browsing history.
- Payment details. Everything is free during beta; when paid plans arrive, card details will be handled directly by the payment processor and never touch our servers.
03How we use it
To sign you in and recognize your account; to render times in your local time zone; to keep your watchlist and followed channels (used to filter your feed); and to measure overall retention so we can improve the product.
Your email is currently used only to send sign-in codes. If we add email digests in the future, every email will include a clear unsubscribe option.
04Cookies and local storage
This site uses no advertising cookies and no cross-site tracking. Only the following two items exist, both strictly necessary:
- Session cookie (set by Supabase Auth): keeps you signed in.
- mm_return_to: returns you to the page you were heading to after sign-in. Single-use, expires in 10 minutes.
Traffic is measured with Vercel Analytics: cookieless, anonymous, page-view counts only.
05Third-party services
The service relies on these third parties, each receiving only the minimum needed for its role:
- Supabase: authentication and sign-in sessions.
- Google: optional third-party sign-in. Google shares your email and basic profile with us only if you choose it.
- Vercel: hosting and anonymous traffic measurement.
- An SMTP email provider: delivers sign-in codes.
- Twelve Data and YouTube: sources of market data and video content. They never receive any of your information from us.
06Retention and deletion
Data is kept while your account exists. To delete your account and everything attached to it (watchlist, followed channels, activity records, subscription state), email service@usstockwatch.com — we will complete the deletion and confirm within 7 days.
07Data sharing
Your information is never sold, and never shared with advertisers. Information moves only within the scope listed in "5. Third-party services", only as needed to run the service.
08Changes and contact
Material changes will update the effective date on this page. For any question or deletion request, contact service@usstockwatch.com.