Privacy Policy

• Your account. Your email address; your password, if you set one, stored only as a one-way hash (bcrypt), never in readable form; when you created the account; and which version of the Terms of Service you accepted, and when.
• Sign-in records. A token for each device you are signed in on, which is how we keep you signed in and limit how many devices can be at once. Signing out deletes that device's token.
• Your preferences. Settings you choose in the dashboard, such as light or dark theme, chart options, and the products you last viewed or compared, so they are there next time.
• Days you use Hedgebook. For each account, the dates on which it had the site open while signed in, so we can see how actively accounts are used. Only the date is kept, not which pages you opened, when, or from where.
• Billing. If you subscribe, the identifiers Stripe gives your customer record and subscription, the subscription's status, its renewal or end date, and whether you have used your free trial. We never see or store your card details; you enter them on Stripe's own page.
• Discord, if you connect it. Your Discord user ID and display name, so we can give your Discord account the Member role while you have access and remove it after. Disconnecting from your Account page deletes both.
• The Hedgebook Charts bot. If you add it to a Discord server, we keep the IDs of the server and channel it posts to and of the chart message it updates there. It does not read messages or collect anything about the people in that server.
• Server logs. Like any website, our hosting provider records technical details of requests, such as IP address, time and the page requested. We use these to keep the service running and secure.
• Visit counts. To see how many people visit and how far into the site they go, we record which pages are opened, on which day, whether the visitor was signed in, and the website that linked to us. Each visitor is represented by a random code that changes every day and cannot be traced back to you: we do not store your IP address or browser details with it, and we use no cookie for it.

We count visits on our own servers and do not use advertising or third-party analytics or tracking services, and we do not record what you do inside the charts.

While you have a dashboard open, our administrators can see that your account is connected and which products it is showing, so that we can run and support the service. This is kept in memory only for as long as you are connected, and is not stored as a history.

We use cookies only to keep you signed in: a session cookie, and, if you stay signed in, a cookie that lasts up to 14 days. Your browser also stores your theme and your text-size choice on the documentation page, which never leave your device. We set no advertising or third-party tracking cookies. Stripe sets its own cookies on its checkout and billing pages, under Stripe's privacy policy.

To provide the service and your account; to sign you in and keep your account secure; to take payment and manage your subscription; to send you the emails the service depends on, such as sign-in links and billing notices; to answer you when you write to us; and to meet legal and tax obligations. We do not send marketing email without asking you first.

Only the service providers who run parts of Hedgebook for us, each limited to what that job needs:

• Stripe processes payments and subscriptions, and sends receipts and failed-payment notices.
• Resend delivers our sign-in and account emails.
• Fly.io hosts the service and its database, in the United States.
• Discord hosts our community server. It is optional; what you post there is handled by Discord under its own privacy policy.

We do not sell your personal information or share it for advertising. We may disclose it if the law requires us to, or to protect the service, our users or the public, and it would pass to a successor if the service were sold or transferred.

Account information is kept while your account exists. When you ask us to delete your account, we delete it, your preferences and the days it was used. We keep billing records for as long as tax and accounting law requires, and Stripe keeps its own records under its policies. Server logs are kept only for a short time. Visit counts are kept for about 13 months, and the days an account was used for 30 days.

You can change your email address and password yourself under Sign-in settings, and cancel a subscription at any time from your Account page. To get a copy of your information, correct it, or delete your account, write to support@hedgebook.io from the address on the account. We will respond within 30 days. Depending on where you live, you may have further rights under local law; we will honor them, and you will not be treated differently for using them.

Connections to Hedgebook are encrypted, passwords are stored only as hashes, sign-in links expire quickly and work once, and card details never reach our servers. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.

Hedgebook is not for anyone under 18, and we do not knowingly collect information from them.

If we change this policy, we will update the date at the top. If a change is material, we will tell you before it takes effect.

Questions about privacy can go to support@hedgebook.io. Hedgebook is operated by Archetyp Mobility LLC, Connecticut, USA.