Privacy Policy

Last updated: April 16, 2026

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address and optional display name. If you sign in with Google OAuth, we receive your name, email, and profile image from Google.

1.2 Usage Data

We collect anonymous usage metrics via Vercel Analytics and Sentry (error tracking). This includes page views, performance metrics, browser type, and error reports. We do not track individual trading activity or portfolio positions.

1.3 Payment Data

Payments are processed by PayPal and/or Lemon Squeezy (Merchants of Record). We never store credit card numbers or payment method details. We receive only the subscription status and associated email from the payment processor.

1.4 Telegram Chat ID

If you configure Telegram alerts, your Chat ID is stored in your browser's localStorage and sent to our server only to deliver the messages you request. It is not shared with third parties.

2. How We Use Your Information

  • Provide, maintain, and improve the Service.
  • Send transactional emails (magic links, password reset, welcome).
  • Send periodic analytics digests (weekly, opt-in).
  • Deliver Telegram notifications you explicitly configure.
  • Analyze aggregate usage to improve the platform.
  • Enforce our Terms of Service and prevent abuse.

3. Data Sharing

We do not sell, rent, or trade your personal information. We share data only with:

  • Payment processors (PayPal, Lemon Squeezy) — to process subscriptions.
  • Email provider (Resend) — to send transactional and digest emails.
  • Error monitoring (Sentry) — anonymized error data for debugging.
  • Hosting (Vercel) — standard server logs for request processing.

4. Cookies & Local Storage

Essential cookies: we use first-party cookies for authentication sessions (NextAuth). We use localStorage for user preferences (language, theme, Telegram settings, journal drafts).

Advertising & Google AdSense. For visitors on the free plan we display ads served by Google AdSense. Google and its partners may use cookies and similar technologies to serve and measure ads, including personalized ads based on your prior visits to this site or other sites. You can opt out of personalized advertising at any time through Google Ad Settings.

If you are located in the EEA, UK or Switzerland, you will see a consent banner (via Google's certified CMP) before ad cookies are set. You can change your choices any time by clicking the "Privacy" link in the banner.

Paid plans are ad-free. Subscribers to Pro or Elite do not see AdSense units and the AdSense script is not loaded in their session.

Analytics. We use Vercel Analytics (aggregated, privacy-preserving) and Sentry (error tracking, privacy-hardened with session replays). Neither is used to build cross-site advertising profiles.

5. Data Retention

Account data is retained while your account is active. You may request deletion at any time by emailing info@whale.ceo. On-chain data we index is publicly available blockchain data and is retained indefinitely.

6. Your Rights (GDPR / CCPA)

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data ("right to be forgotten").
  • Export your data in a portable format.
  • Object to processing of your data.
  • Withdraw consent at any time.

To exercise these rights, contact info@whale.ceo. We will respond within 30 days.

7. Security

We employ industry-standard security measures including HTTPS encryption, secure authentication (bcrypt password hashing, CSRF protection), rate limiting, and Content Security Policy headers. However, no system is 100% secure; we cannot guarantee absolute security.

8. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect data from minors. If we become aware that a child has provided personal data, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the platform.

10. Contact

For questions about this Privacy Policy: info@whale.ceo