GotOptions ("the app", "we", "us") is an options-analytics tool published
by Kearsarge Studios LLC, a New Hampshire limited
liability company ("Kearsarge Studios"), and available on the web and as
an installable web app (PWA) you can add to your home screen or dock.
Native iOS and Android apps are in development and are not available yet;
the passages below that describe them are labelled as future behaviour and
do not describe anything the app does today. This policy explains what data
the app handles and why. It is written to satisfy the Google AdSense
publisher requirements for the web build, and, ahead of any native release,
Apple App Store Guideline 5.1.1(v) and the Google Play Data safety
disclosure.
What we collect
Sign-in identifiers. If you choose to sign in with
Google or Apple, we receive a verified email address and a stable account
identifier from that provider. We use these to identify your account and
to determine your subscription tier. We never receive your provider
password. Sign-in is optional — the app is usable anonymously.
Brokerage connection (optional). If you connect a
Schwab brokerage account, the authorization is handled by Schwab. Access
tokens are held server-side only and are never exposed to the app; your
browser or device holds only a session cookie.
Cloud sync data (optional). If cloud sync is enabled,
your saved filters, color rules, and option-history snapshots are stored
against your account so they are available across devices.
Advertising identifiers — when our native apps ship (not
today). We do not currently ship native iOS or Android apps, so
GotOptions collects no advertising identifier today. When free native
builds ship, they will show ads via Google AdMob, which may access an
advertising identifier; on iOS those ads will be non-personalized unless
you grant App Tracking Transparency permission. Pro users will see no
ads, and the ad SDK will not be initialized for them. We will update this
policy before any native build is released.
Advertising data (web). The free web build shows ads via
Google AdSense. See "Advertising on the web" below for what Google
collects and how to opt out. Pro users see no ads and the AdSense script
is not loaded for them.
Feedback you send us (optional). If you report a
problem, suggest an idea, or leave a note from inside the app, we store
what you typed, the area of the app you sent it from, and — for problem
reports only — a short diagnostic bundle (app version and build, device
type, operating system and its version, device model, browser and its
version, screen size, theme, language, time zone, whether you were
online, the time, and your plan). The device model is the kind of
device, such as “iPhone” or “Pixel 8”, and the
browser is its name and main version, such as “Safari 18”;
a report never carries a device identifier, a serial number, or the full
identification string your browser sends. We never capture what you typed into other forms, a ticker,
your location, or your IP address, and we never take a screenshot of
your screen. You may choose to attach up to five screenshots of your
own to a problem report; they are deleted with the report. You can send
an idea or a note without any name attached; a problem report needs an
email address so we can answer it. See “Feedback” below.
Usage analytics. We measure how the app is used both
with a first-party, privacy-preserving system (pseudonymized, no email or
account id stored against events) and, on the web build, with Google
Analytics. See "Analytics" below for what Google collects, how consent is
handled, and how to opt out.
Who we share data with
This section consolidates, in one place, everyone who receives data about
you or your use of GotOptions — the same recipients already described
above under “What we collect” and below under
“Advertising on the web” and “Analytics”. Nothing
here is a new disclosure; it exists so there is a single list you (or a
reviewer) can check against. Each recipient handles what it receives under
its own privacy policy.
Google Sign-In. If you sign in with Google, Google
issues the identity assertion — a verified email address and an account
identifier — that we use to identify your account.
Sign in with Apple. If you sign in with Apple, Apple
issues the identity assertion — a verified or private-relay email
address and an account identifier — that we use to identify your
account.
Charles Schwab. If you connect a Schwab brokerage
account, Schwab receives the authorization you grant it and returns
access and refresh tokens to our server, which we use to fetch option
chains on your behalf. Those tokens
never leave our server — they are never sent to your
browser or device. Your browser holds only a same-origin session cookie.
Paddle. Paddle is the merchant of record for GotOptions
Pro and receives the billing and payment information needed to process a
transaction. Paddle, not us, collects your card details. See
“Purchases and subscription data” below.
Resend. Email about your account and your Pro trial
(sign-in links, trial messages) is written and scheduled by a Kearsarge
Studios system, run by the same company that publishes GotOptions, so
it is not a third party. That system hands each message to
Resend (resend.com), an email delivery provider, which
receives your email address and the content of the message in order to
deliver it, and reports back whether it was delivered, bounced, or
marked as spam. See “Email about your account and trial”
below.
Zoho Mail. Our support mailbox,
support@kearsargestudios.com, is hosted by Zoho Mail
(zoho.com). If you email us — including by answering one of our
emails instead of replying in the app — Zoho receives your
message and your email address and stores them in that mailbox, kept
separately from the app. Ask us and we’ll delete it. See
“Email about your feedback” below.
Kearsarge Studios operations console. Feedback you send
is read and answered by a person using an internal Kearsarge Studios
tool. The console reads your feedback live from this app rather than
keeping its own copy of it; it keeps only what is needed to reply to a
problem report and its own working notes. When you delete your account,
this app tells the console to delete anything it holds about you in the
same step.
Cloudflare (R2 storage). If you attach screenshots to
a problem report, the image files are stored in a private Cloudflare R2
storage bucket that is never public. They are never linked from
anywhere a person could open them without our credentials. They are deleted with the report (see
“Feedback” below).
Anthropic (Claude). To help sort feedback and draft a
reply, the operations console may send Claude, an AI service from
Anthropic, what you wrote, the replies on it (ours included), and — for
a problem report — the diagnostic bundle listed under “What we
collect”, except your plan. It never sends your email address,
your name, your plan, the list of recent errors, or a screenshot, though
anything you type into the message itself goes as you wrote it. A person
reads and confirms every suggestion before anything is published or sent
to you; nothing is decided by the model. Anthropic acts only as our
service provider and does not use this data to train its models.
GitHub. Our private bug tracker. We may copy your
feedback into it — what you wrote, with the diagnostic bundle
except your plan — so the problem or idea reaches the people
working on it as you described it. We do not add your email address,
your name, or a screenshot. GitHub acts only as our service provider.
If an issue is ever tracked somewhere public, we first remove your
name, email and anything else that identifies you.
Google AdSense (web, free tier). Receives advertising
identifiers and ad-interaction data to serve and measure ads on the free
web build. See “Advertising on the web” below.
Google AdMob — when our native apps ship (not today).
We do not currently ship native iOS or Android apps, so AdMob receives
nothing from GotOptions today. When free native builds ship, AdMob will
receive an advertising identifier to serve ads in them, and on iOS only
if you grant App Tracking Transparency permission.
Google Analytics (web). Receives pseudonymous
measurement data — which screens of the app are opened and which
features are used, with no email address or account id attached, and
never a ticker, strike, expiry, position or anything you typed. In the
EEA, the UK, Switzerland and Quebec it receives nothing that sets a
cookie or persistent identifier unless you choose Allow. See
“Analytics” below.
We do not sell any of this data, and none of these recipients receives
more than what is described in the sections above and below.
Purchases and subscription data
Paddle is the merchant of record for GotOptions Pro —
Paddle, not Kearsarge Studios, is the seller you contract with when you
subscribe, and Paddle collects and processes your payment. The commercial
terms (pricing, automatic renewal, cancellation) are in
Terms of Service §8; this section
covers the data.
What we receive from Paddle. When you subscribe or
purchase, Paddle sends our server billing events containing your plan,
the associated Paddle price identifier, your subscription status, its
current renewal or expiry date, and a Paddle customer/subscription
identifier. We store this to determine your Pro entitlement and to let
you open Paddle’s customer portal.
What we never receive or store. We never see or store
your card number, card network, or any other raw payment-instrument
data — that stays with Paddle. We also do not persist the amount you
were charged; that lives in Paddle’s records and receipts, not
ours.
Retention. Our copy of your subscription data (plan,
status, renewal date, Paddle identifiers) is deleted when your
entitlement record is removed, including
immediately on account deletion — see
Deleting your account. As described
there, Paddle independently retains your transaction records after your
account is deleted, because it is legally required to for tax and
accounting purposes. That retention is Paddle’s and is governed by
Paddle’s own privacy policy, not ours. Our record of any
administrator-applied grant or revocation is a further
exception and is retained — see “Entitlement grant
records” under Data retention below.
Advertising on the web
The free web version of GotOptions displays advertising served by
Google AdSense. To serve and measure these ads:
Google, as a third-party vendor, uses cookies and similar technologies
to serve ads and to measure ad performance.
Google's use of advertising cookies enables it and its partners to serve
ads to you based on your visit to GotOptions and other sites on the
internet.
The points above describe what Google's advertising cookies can do
generally, and the choices available to you. In practice we currently
instruct Google — for every visitor, in every location — not to use
advertising storage, advertising user data, or ad personalization. While
those signals remain denied, the ads shown on GotOptions are not
personalized to you. We will update this section before enabling
personalized advertising.
Pro subscribers do not see ads; the AdSense script is not loaded for them,
so no AdSense advertising cookies are set.
Analytics
We use two analytics systems to understand how the app is used and to
improve it:
First-party analytics. We record aggregate usage events
(for example, that a feature was used) keyed to a pseudonymous identifier
derived by a one-way HMAC; we do not store your email or account id
against these events. A copy of the events that time your trial email
(that your trial started, when it ends, and whether you subscribed) goes
to the Kearsarge Studios system that sends that email, which links them
to your address so it can send the right message at the right time. That
system is run by the same company, and none of this data is shared with
a third party.
Google Analytics (web). The web build uses Google
Analytics 4 to see which parts of the app are used and where things
break. It runs in your browser, so Google receives your device’s
IP address along with the measurement data. Google processes this data
on our behalf under its data processing terms. Google states that
Google Analytics 4 does not log or store IP addresses. Depending
on your choice and where you are, Google Analytics either sets
first-party cookies (_ga, _ga_<id>) to
tell one visit from the next or operates in a cookieless mode that sets
no such identifier.
What we send to Google Analytics, and what we never send.
We send which screen of the app you opened, named by the screen rather
than by its web address (for example “/analysis” or
“/glossary”), and named feature-usage events such as that a
query was run or a chart was opened, with a small fixed set of labels
(for example the strategy type or the plan). We never send a ticker
symbol, a strike, an expiry date, a position or its identifier, a dollar
amount, a profit or loss figure, your email address, your account id, or
anything you typed. Web addresses inside the app can carry your column
filters, a one-click email link or a feedback item’s identifier, so
before anything is sent we replace the page address with the screen name
(keeping only campaign tags beginning utm_), replace the page
title with a fixed title for that screen, and reduce the referring page to
its site name. Advertising events (ad impressions and clicks) are not sent
to Google Analytics; AdSense reports those itself.
Consent. Google Analytics is loaded under Google Consent
Mode v2. When you first visit, a small notice at the bottom of the page
asks whether to turn analytics on, with two buttons of equal weight,
Decline and Allow. It does not block the
app, and it controls analytics only. Until you answer, what Google
Analytics may store depends on where you are:
In the EEA, the United Kingdom, Switzerland and Quebec,
analytics storage is denied by default. Until you choose Allow,
no analytics cookie and no persistent identifier is set, and Google
Analytics runs in a cookieless mode in which Google still receives your
IP address, browser type, the screen name and the time. If you choose
Allow, analytics cookies are set from then on.
Elsewhere, including the United States, analytics storage
is allowed by default, so Google Analytics sets the first-party
_ga cookies described under “Cookies” below
until you choose Decline.
Wherever you are, choosing Decline turns Google Analytics off on
that device. No analytics cookie is set from then on, the app
stops sending anything to Google Analytics, and on later visits it does
not load Google Analytics at all. We do not ask again for 180 days. If
you choose Allow, we do not ask again.
Advertising storage, advertising user data and ad personalization
are denied for every visitor, in every location. We do not enable
personalized advertising anywhere, and we do not make advertising data
from this site available to Google for personalization. The analytics
notice does not change this, and no choice in it affects advertising.
Changing your choice. Use Privacy choices
at the bottom of the app’s analysis views, which opens
“Analytics on this device” below. Your choice is stored in your
browser’s local storage on this device (not in a cookie, and not on
our servers), so it applies to this browser only, and clearing your
browser’s site data resets it.
Browser privacy signals. If your browser sends a Global
Privacy Control signal, we treat it as choosing Decline: analytics is off
on that device, we do not show the notice, and it cannot be turned on
while the signal is on. We do not respond to the older “Do Not
Track” setting, because it has no agreed meaning and most browsers
have retired it; Global Privacy Control is the signal we honour. If you
later turn the signal off, analytics stays off on that device until you
turn it on under Privacy choices.
How long Google keeps it. Google Analytics event data for
GotOptions is kept for no longer than 14 months, then deleted.
Google Analytics is loaded only in the web build; when native iOS and
Android apps ship, it will not be loaded in them at all.
Other ways to opt out. You can also opt out of Google
Analytics in any browser by installing Google's opt-out add-on at
https://tools.google.com/dlpage/gaoptout,
or by blocking or clearing first-party cookies for this site in your browser
settings. Declining analytics does not disable any GotOptions feature.
Analytics on this device
Your analytics choice for this device is shown here when JavaScript is
on.
Declining doesn’t change anything about how GotOptions works.
Email about your account and trial
When you sign in and your free Pro trial starts, we send you a short set
of emails about it: up to five over the length of the trial. Most are
service messages (what the trial includes, when it ends, and one tip on a
feature). Near the end of the trial, and just after it, a few messages
mention the price of Pro and link to the subscribe page. We tell you this
under the sign-in button before you start, and you can decline trial
email there.
Why we send it. The service messages are part of the
trial you asked for. The messages that mention the price are sent
because we have a legitimate interest in telling someone on a trial
what happens when it ends; in the EEA and the UK you have the right to
object to them at any time, and the one-click link is how.
How to stop it. Every message has a one-click
unsubscribe link and a preferences link. Preferences let you stop
email from just this app or from all Kearsarge Studios apps. Stopping
email does not affect your trial or your account.
What we record. Which messages were sent and whether
each was delivered, bounced, unsubscribed, or marked as spam, and which
link in a message you clicked. We do not track whether you opened a
message; there is no tracking pixel.
If you unsubscribe or mark a message as spam. We keep
a scrambled version of your email address so we never email you again,
even if you later delete your account or sign up again with the same
address. It is a one-way coded value with a secret key held outside
the database; we do not turn it back into an address and it is used
for nothing except making sure we do not email you.
How long we keep it. The send and delivery records
above are kept for 13 months, then reduced to counts
that identify no one. The scrambled address is kept for as long as it
takes to honour your request, which is indefinitely.
Feedback
The Feedback control in the sidebar and header lets you
report a problem, suggest an idea, or leave a note from wherever you are
in the app. What we keep, and for how long:
What you typed, and where you were. Your title and
text, the tab or screen you sent it from, and the area of the app you
chose. A problem report also carries the diagnostic bundle listed under
“What we collect”. Nothing else on your screen is captured.
A checkbox you leave unticked by default lets you add the names (only
the names, never the messages) of the last few errors this app logged.
Screenshots you attach (optional). On a problem report
you may attach up to five screenshots (PNG, JPEG or WebP, up to 5 MB
each). Nothing is attached unless you choose it. A screenshot is seen
only by the person who reads and answers your report. It is never shown
on the public ideas board and never copied into an issue tracker. It is
stored privately (see “Cloudflare” under “Who we share
data with”) and deleted with the report. It goes
when you delete your account or when the report is deleted, whichever
comes first. If you attach a screenshot and then remove it, or close the
form without sending, it is deleted straight away, or within two days
at the latest.
Our issue tracker and AI assistant. We may copy your
feedback into our issue tracker on GitHub and use an AI assistant
(Anthropic’s Claude) to help us sort and summarize it. Both act
only as our service providers, to support you and improve the app. If
an issue is ever tracked somewhere public, we first remove your name,
email and anything else that identifies you. Screenshots are never
copied to either. A copy in our issue tracker is not deleted with your
report; it stays until we close or remove it.
Who sent it. If you are signed in, your feedback is
linked to your account unless you choose to send it anonymously, in
which case nothing identifying is stored at all — not hidden, not
stored. If you are signed out, ideas and notes are always anonymous; a
problem report asks for an email address so a person can answer you,
and that address is used for nothing else.
What is public. Nothing you type is ever shown to
other people. If we put your idea on the public ideas board, we write
our own card describing it, in our words, with no name attached — and
if we have your address we show you the card first and give you 72
hours to say no.
Votes. You can vote for ideas on the board whether or
not you are signed in. A signed-out vote is remembered with a
first-party cookie (see “Cookies”) that identifies the
browser, not you; it holds no name, address or account. Signing in
later does not move those votes to your account.
Your conversation with us. If you are signed in, our
replies to something you sent, and anything you write back, appear on
its page in the app. The conversation is kept with the report and
deleted with it — and on an idea, when your name and address are
removed from it.
Email about your feedback. If we have your address, we
acknowledge what you sent, tell you when its status changes, and tell
you when we reply. They come from support@kearsargestudios.com, and a
reply to one reaches a person there. These
are service messages, not marketing; every one carries a one-click
unsubscribe, and you can stop all feedback email from Settings.
If you answer one of our emails by email instead of in the app, your
message goes to our support mailbox (Zoho Mail) and is kept there
separately; ask us and we’ll delete it.
How long. The diagnostic bundle on a problem report is
removed after 90 days. Private problem reports, notes
and questions are deleted 400 days after they are
closed, together with any screenshots attached to them. The identity on
a closed idea is removed after 18 months. Our own
public cards stay while they are published.
If you delete your account, we delete your votes,
your subscriptions, your private reports and notes, every screenshot
attached to them, your conversations with us, and the address we kept
for feedback email.
An idea you submitted stays, with your name and address
removed, because other people have voted on it and the public
card is our own writing about our roadmap. Any screenshot on it is
deleted. A copy in our issue tracker stays until we close or remove
it (see “Our issue tracker and AI assistant” above).
Cookies
We use a small number of cookies and similar technologies:
First-party session cookie (strictly necessary). When
you sign in or connect a brokerage account, your browser holds a
same-origin session cookie. This is the boundary that keeps brokerage
access tokens server-side — the cookie identifies your session; the
tokens themselves never reach the browser. This cookie is required for
sign-in and cloud sync to work and is not used for advertising.
Feedback device cookie (strictly necessary, 12 months).
The first time you vote for an idea on the feedback board while signed
out, your browser receives a signed first-party cookie
(go_fb_device) so the vote counts once and stays yours on
this device. It is set only when you vote — never on page load — holds
no name, address or account, is not used for advertising or analytics,
and expires after twelve months.
Third-party advertising cookies (web, free tier). Google
AdSense sets advertising cookies to serve and measure ads, as described
in "Advertising on the web" above. You can opt out via
Google Ad Settings.
These cookies are not set for Pro subscribers.
Analytics cookies (web). Google Analytics uses
first-party cookies (_ga, _ga_<id>) to
distinguish sessions. Whether they are set depends on your choice and
your location: in the EEA, the UK, Switzerland and Quebec they are not
set unless you choose Allow; elsewhere, including the United States,
they are set until you choose Decline. Choosing Decline anywhere stops
them on that device (see “Analytics” above). These
cookies are used for measurement only — they are not used for advertising,
and their data is not made available to Google for ad personalization.
When native iOS and Android apps ship, no analytics cookie will be set in
them.
California Residents (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act, as
amended by the CPRA, gives you certain rights regarding your personal
information.
Categories collected. Identifiers (email and account id
if you sign in; analytics identifiers such as Google Analytics cookie ids
on the web tier), internet/network activity (ad-interaction and
usage-analytics data on the free web tier), and commercial information
(subscription tier). We do not collect financial-account credentials —
brokerage tokens stay server-side.
No sale. We do not sell your personal information for
money.
“Sharing” for cross-context advertising. For
every visitor, in every location, we set Google's advertising consent
signals — advertising storage, advertising user data, and ad
personalization — to denied, which instructs Google not to use an
advertising identifier from this site for personalized, cross-context
behavioral advertising. We do not sell your personal information for
money. If we ever enable personalized advertising, we will update this
policy before doing so and provide a “Do Not Sell or Share My
Personal Information” control at that time.
How to opt out / your rights. You can opt out of
personalized ads via
Google Ad Settings, or
upgrade to Pro (which serves no ads). You can turn Google Analytics off
on a device under Privacy choices, and a Global Privacy Control signal
from your browser does the same automatically (see
“Analytics” above). You also have the right to know,
access, correct, and delete your personal information, and the right not
to be discriminated against for exercising these rights. To exercise any
right, contact us at the address below.
EEA/UK Users (GDPR)
Controller. Kearsarge Studios LLC, a New Hampshire, USA
limited liability company, is the controller of personal data processed by
GotOptions. Contact:
privacy@kearsargestudios.com.
Legal bases. We process personal data on these bases:
Contract — to provide sign-in, cloud sync, and
subscription features you request.
Legitimate interests — to operate, secure, and improve
the Service, to resolve billing disputes, and to prevent repeated free
trials on the same account.
Consent — where required by applicable law; you may
withdraw consent at any time.
Your rights (Arts. 13–22). You have the right to access,
rectify, erase, restrict, and port your personal data, to object to
processing, and to lodge a complaint with your local supervisory authority
(for example, your national Data Protection Authority).
Advertising in the EEA/UK. GotOptions does not operate a
Consent Management Platform (CMP) meeting the IAB TCF requirements for
personalized advertising, and the analytics notice described under
“Analytics” is not one: it asks about analytics only and
offers no choice about advertising. We do not serve personalized
advertising to EEA/UK visitors, and we do not ask them for advertising
consent. A compliant CMP would be required before that could change, and
we would update this policy before doing so. The strictly necessary
session cookie described above is unaffected.
Analytics in the EEA/UK. Google Analytics is loaded under
Consent Mode v2 with region-scoped defaults that deny analytics storage for
visitors in the EEA, the United Kingdom, Switzerland and Quebec. We ask
on your first visit and, if you choose Decline, not again for 180 days.
No analytics cookie or
persistent identifier is set until you choose Allow, and none is set if
you choose Decline, after which the app sends nothing further to Google
Analytics from that device. While you have not answered, Google Analytics
operates in a cookieless mode. You can change your answer at any time
under Privacy choices. Advertising storage, advertising user data and ad
personalization are denied for these visitors as well, as described under
“Advertising in the EEA/UK” above.
What we do not do
We do not sell your personal data.
We do not collect your data when you use the app anonymously, beyond what
is technically necessary to serve the app and (on the free web tier) to
display ads.
Data retention & deletion
We keep personal data only as long as needed for the purpose it was
collected:
Account & cloud-sync data (email, account id, saved
filters, color rules, history snapshots): retained while your account is
active and deleted immediately when you delete your
account in the app. If you instead ask us to delete it by email, we
verify the request first and complete the same deletion within
30 days. See
Deleting your account below.
Feedback: see “Feedback” above — the
diagnostic bundle on a problem report goes after 90 days, private
reports and notes (with any screenshots attached to them) 400 days after
they are closed, the identity on a closed idea after 18 months; an idea
you submitted survives account deletion with your name and address
removed, and without any screenshot or our conversation with you
about it; the conversation on a report goes with the report.
Entitlement grant records: when an administrator grants,
extends or revokes a Pro entitlement, we keep a record of that action so
that an administrator cannot change an account's access and then erase
the evidence. While your account exists, that record is linked to your
account identifier. When you delete your account, we sever that
link: the account identifier is replaced with a random code that
we cannot trace back to you, and the remaining record — what was done, by
which administrator, and on what date — is kept for up to
24 months from the action, then deleted automatically.
See what we delete and retain.
Free-trial eligibility: the Pro free trial is offered
once per person. When a trial starts, we record that the email address
used has had one — as a one-way coded value that we cannot turn back into
an address — together with the date it started.
This record is not deleted when you delete your account:
deleting and signing up again with the same address does not start a
second trial. It is erased automatically 24 months
after the trial started. It contains no name, no readable email address,
no account identifier, and nothing about how you used the app, we use it
for nothing except deciding whether a sign-in qualifies for a trial, and
we do not attempt to re-identify it. If you believe an address has this
record in error — for example, it was reassigned to you — write to
privacy@kearsargestudios.com
and we will clear it.
Email records: the record of which trial and account
emails we sent you, and whether each was delivered, clicked,
unsubscribed, or marked as spam, is deleted from your account
immediately when you delete your account, and is in
any case reduced to counts that identify no one after
13 months. If you had unsubscribed or marked a message
as spam, we keep a scrambled version of your address so we never email
you again. This is not deleted when you delete your account;
it is a one-way coded value we do not turn back into an address, it is
used for nothing except making sure we do not email you, and it is
kept indefinitely because that is what your request requires.
Session cookies: expire on sign-out or within
30 days of issuance, whichever comes first.
Advertising data: handled by Google per the Google
retention policies linked above; we do not retain a separate copy.
Operational/security logs: retained no longer than
90 days.
Backups: we keep encrypted backups of our databases for
disaster recovery only. Deleted data can persist in a backup until that
backup expires, which is no more than 60 days. Backups
are never used to answer a question about you or to restore an individual
account, and if we ever have to restore from one, we re-run every account
deletion that happened after that backup was taken. To be able to do
that, we keep a short list of which accounts were deleted and when, for
90 days. It holds an account identifier and nothing
else — no name, no email address, and nothing about how you used
the app — it is used for nothing except re-running deletions after
a restore, and it is deleted automatically.
Deleting your account
The fastest way to delete your account is in the app itself:
open the account menu (tap your account icon or the
“Sign in” button in the header or sidebar) and choose
Delete account. After you
type DELETE to confirm, we immediately delete your
synced data — saved filters, color rules, positions, and history
snapshots — from our servers, cancel any active web subscription, revoke
and delete any linked Schwab brokerage tokens, and sign you out. We also
pass the deletion to the Kearsarge Studios system that sends trial and
account email, which deletes your address and your email history there;
if you had unsubscribed or marked a message as spam, it keeps only the
scrambled version of your address described under
“Email about your account and trial”, so we never email you
again. Paddle,
our payment processor, retains your transaction records after account
deletion, which is legally required for tax and accounting purposes; we
do not retain a separate copy of your synced data beyond the account
deletion described above. Feedback you sent is handled as described under
“Feedback” above: your votes, subscriptions, private reports
and the address we kept for feedback email are deleted; an idea you
submitted stays with your name and address removed; a copy in our
private issue tracker stays until we close or remove it. We also keep an administrative record of any Pro
entitlement we granted or revoked, for up to 24 months from the action —
but when you delete your account we replace your account identifier in that
record with a random code we cannot trace back to you. The
account-deletion page describes it in full.
Deleting your account does not reset your free-trial eligibility: if the
free trial has already been used on your email address, signing up again
will not start another one.
If you can't access the app, email us at the address below and we will
process a verified deletion request within 30 days —
the in-app flow is faster because it doesn't require manual
verification.
Full details — the step-by-step in-app path, the email fallback, and a
table of exactly what is deleted, what is retained and why, and when —
are on our dedicated
account-deletion page.