TickerTracker ("we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and services.

1. Information We Collect

We collect the following types of personal information:

  • Account information: Name and email address when you create an account.
  • Payment information: Payment details are processed securely by our payment partner, Stripe. We do not store your full payment information.
  • Analytics information: Usage data collected through our own native analytics tools and Google Analytics, including:
    • Page URLs visited and referrer
    • Approximate geographic location (country, region, city) derived from IP address
    • Device type, browser, and operating system
    • A persistent anonymous visitor identifier stored in your browser (localStorage)

    We collect this data solely for internal analytics to understand how our site is used. We do not sell, monetize, or share this information with third parties for advertising or marketing.

  • Error monitoring: We use Sentry for error monitoring and, for a percentage of sessions, session replay. Session replay records interactions (clicks, navigation) to help diagnose issues. All text content is masked, and personally identifiable information is redacted before transmission. When an error occurs, technical details (browser, OS, error message) may also be sent to Sentry.
  • Browser storage data: We use secure, HTTP-only cookies to maintain login sessions and browser storage (localStorage and sessionStorage) for UI preferences, application state (such as selected platform, filter settings, and dashboard configuration), session identifiers, and an anonymous visitor identifier for analytics.

2. How We Use Information

We use your information to:

  • Create and manage your account and subscriptions.
  • Process payments and fulfill transactions.
  • Monitor and improve our services through analytics.
  • Maintain the security and proper functioning of the website.

3. Google Account Data

Signing in with Google is optional; you may also create an account with an email address and password. If you choose to sign in with Google, this section describes exactly what we receive and how we treat it.

  • What we request: We request only Google's basic sign-in scopes — openid, email, and profile. We do not request access to your Gmail, Drive, Calendar, Contacts, or any other Google service.
  • What we receive and store: Your Google account identifier, email address, first and last name, and the URL of your Google profile picture. We also store the authentication token Google returns so the sign-in can be completed.
  • How we use it: Solely to create your TickerTracker account, verify your email address, authenticate you on return visits, and display your name and avatar inside the application. We do not use Google user data for advertising, and we do not use it to build profiles for any purpose unrelated to operating the Services.
  • Who we share it with: We never sell Google user data or transfer it for advertising. It is stored by the infrastructure providers listed in Section 4 — principally our database host — acting on our behalf and only to operate the Services. We may disclose it if required by law or to protect the security and integrity of our services.
  • How we protect it: It is transmitted over TLS, stored with restricted access controls, and your session is maintained through secure, HTTP-only cookies.
  • Retention and deletion: We retain this data for as long as your account is active. You may request deletion at any time by contacting support@ticker-tracker.com, and we will delete your account and the associated Google account data. You can separately revoke TickerTracker's access from your Google Account permissions page.

TickerTracker's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Sharing of Information

We do not sell or share your personal information with third parties for advertising or marketing purposes. We may share your data with the following service providers who help us operate our services:

  • Payment processing: Stripe
  • Website hosting and delivery: Cloudflare
  • Analytics: Google Analytics
  • Error monitoring: Sentry
  • Email delivery: Resend (processes email addresses for transactional emails)
  • Authentication: Google OAuth (processes name, email, and profile picture for sign-in)
  • Database hosting: Supabase (stores and processes all user and platform data)
  • Caching infrastructure: Upstash (Redis caching infrastructure)

These providers receive only the minimum data necessary to perform their function. We do not sell or share your data for advertising or marketing purposes. We may also disclose information if required by law or to protect the security and integrity of our services.

5. Browser Storage & Data

We use cookies and browser local storage as follows:

  • Authentication cookies: Secure, HTTP-only cookies for login sessions (access token, refresh token). A separate CSRF protection cookie, readable by our application code, to prevent cross-site request forgery. These are strictly functional and required for authentication.
  • OAuth state cookie: A short-lived cookie used during third-party login flows (e.g., Google sign-in) to prevent authentication attacks. This cookie is discarded once the sign-in flow completes.
  • Analytics cookies: Google Analytics is configured in cookieless mode — no _ga, _gid, or other Google Analytics cookies are set in your browser.
  • Browser storage (localStorage / sessionStorage): UI preferences, application state (such as selected platform, filter settings, and dashboard configuration), session identifiers, and an anonymous visitor identifier for internal analytics.

You can opt out of Google Analytics by installing Google's Analytics Opt-out Browser Add-on. You can clear local storage and cookies through your browser settings.

6. User Rights

Depending on where you live, you may have certain rights regarding your personal data:

European Union/United Kingdom (GDPR): Right to access, correct, or delete personal data; right to restrict or object to processing; right to data portability.

California (CCPA/CPRA): Right to know what categories of personal data we collect, right to request deletion, right to opt out of certain sharing, and right to non-discrimination for exercising your privacy rights.

To exercise your rights, please contact us at: support@ticker-tracker.com.

7. Children's Privacy

Our services are not directed at children under 13, and we do not knowingly collect personal data from children.

8. Data Security & Retention

We use SSL encryption, secure storage, and restricted access controls to protect your personal information.

  • Account data is retained until you request deletion.
  • Analytics data (page views, visitor activity) is retained for operational purposes and periodically reviewed.
  • IP addresses and device information are collected as part of session management, security logging, and authentication. This data is retained for security purposes and periodically reviewed.

9. International Data Transfers

If you access our services from outside the United States, your information may be transferred to and processed in the U.S. or other countries where our service providers are located.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Email: support@ticker-tracker.com