Privacy Policy

Last updated: September 30, 2026

Stock Alerts ("we", "us", "our") operates the Stock Alerts mobile application (the "App") and the website at stockalerts.live (the "Website"). This Privacy Policy explains how we collect, use, store, and share information when you use the App or Website.

Privacy contact: For privacy requests and questions about how we handle personal data, email privacy@stockalerts.live.

1. Information We Collect

1.1 Information You Provide

• Account information: Name, email address, and password when you create an App account
• Social login data: Email and name from Google, Apple, GitHub, or Microsoft when using social authentication
• Watchlists and alerts: Stock symbols, alert configurations, and preferences you create
• Affiliate program: If you enroll, login credentials and PayPal email for payouts
• Support communications: Messages you send to our support team (including mailto from the Website)

1.2 Information Collected Automatically

• Device information: Device type, operating system, and app version
• Usage data: Features accessed, screens viewed, and interaction patterns in the App
• Log data: Error logs and performance metrics for reliability
• Website preferences: Theme preference stored in your browser (localStorage key sa-theme)
• Referral link: If you open a link with a referral code, the site stores that code and the click time in your browser (sa_affiliate_ref) for 90 days. The server also logs the code and click time, and deletes that log after 90 days. It does not store your IP address for this.
• Website consent choice: Your analytics/advertising preferences stored locally (sa_consent_v1)
• Website analytics (optional): If you consent, Google Analytics 4 / Firebase Analytics may collect page views and similar aggregate metrics
• Website advertising (optional): If you consent, Google AdSense may use cookies or advertising identifiers on pages that show ads

1.3 Information We Do NOT Collect

• Brokerage credentials or trading account details
• Financial account numbers or payment card details (handled by App Store / Google Play)
• Precise location data
• Contacts, photos, or other personal device data

2. How We Use Your Information

3. Data Storage and Security

We take the security of your data seriously:

• Passwords are salted and hashed using bcrypt (12 rounds) — we never store plain text passwords
• Authentication tokens are stored in device-encrypted storage (expo-secure-store) when available
• API communications use HTTPS encryption in transit
• Database access is restricted to authenticated server components only
• Rate limiting is applied to prevent brute-force attacks

4. Data Sharing

We do not sell your personal information. We share data only in these limited circumstances:

• Third-party data providers: We send stock symbols (not your identity) to financial data APIs to retrieve market data.
• Authentication providers: When using social login, we exchange tokens with Google, Apple, GitHub, or Microsoft to verify your identity.
• Google (Firebase / Analytics / AdMob / AdSense): Used for push messaging, analytics, and advertising as described in this policy and subject to your Website consent choices for analytics and AdSense.
• Hosting: The Website is hosted on Cloudflare Pages; traffic may be processed by Cloudflare as our processor.
• PayPal: If you are an affiliate, payout destination details you provide are used for payments.
• Legal requirements: We may disclose information if required by law, legal process, or government request.

5. Your Rights

You have the right to:

• Access: View your personal data through the App's profile screen
• Correct: Update your name and email in the App's settings
• Delete: Delete your account in the App's settings. Deletion removes your user account (including embedded watchlists, alerts, and preferences) and affiliate profile / referral row linked to your user id. It does not by itself erase Google Analytics or AdSense data held by Google, or affiliate payout ledger rows retained for finance/compliance pending a documented retention policy. Ask privacy@stockalerts.live for assistance with third-party deletion requests.
• Export: Signed-in App users can export account JSON via the App (authenticated GET /api/auth/export). You may also email privacy@stockalerts.live.
• Website consent: Use Cookie settings to accept, reject, or change analytics and advertising preferences. Essential site features remain available after rejection.

6. Data Retention

• Active accounts: Retained while your account is active
• Deleted accounts: User document and linked affiliate profile/referral row are deleted when you delete your account in the App
• Affiliate payout ledgers: May be retained after account deletion until a finance retention policy is published
• Password reset codes: Expire and are purged after 15 minutes
• Server logs: Operational logs retained only as needed for debugging and reliability
• Website consent & theme: Stored in your browser until you clear site data or change preferences

7. Children's Privacy

Stock Alerts provides informational market content. We do not knowingly target children under 13. Parents or guardians who believe a child has provided personal information may contact privacy@stockalerts.live. Subscription purchases must be authorized by a parent or legal guardian where the purchaser is a minor.

8. Third-Party Services

The App and Website may use:

• Financial data APIs (prices, earnings, dividends) and logo providers
• SEC EDGAR (public SEC filings) and public STOCK Act disclosure sources
• OAuth providers (Google, Apple, GitHub, Microsoft)
• App Store / Google Play for subscription billing
• Firebase (Google) for push notifications and product analytics
• Google Analytics 4 for Website measurement (consent-gated)
• Google AdMob in the free App; Google AdSense on consented Website pages
• Cloudflare for Website hosting and edge delivery
• Google Fonts for typography delivery

Each service operates under its own privacy policy.

9. Cookies and Similar Technologies

On the Website:

• Essential: Theme preference and security/basic operation. These do not require advertising/analytics consent.
• Analytics (optional): Google Analytics 4 only after you accept analytics (or Accept all).
• Advertising (optional): Your advertising preference is stored when you accept advertising (or Accept all). Google AdSense scripts and ads load only after that preference is set and the site’s certified Google Privacy & messaging integration is enabled. Until then, AdSense remains disabled.

Until you choose, analytics tags are not loaded. You can reopen preferences anytime via Cookie settings. For visitors in the EEA, UK, or Switzerland, personalized ads require Google’s certified Privacy & messaging / IAB TCF consent experience in addition to this Website preference UI. Consent Mode defaults alone are not a certified CMP. AdSense console configuration is documented in the internal remediation status and is not fully controlled by this Website repository.

The free App may show Google AdMob ads. Plus and Pro subscribers do not see App ads. Where required for App ads (for example in the EEA, UK, or Switzerland), we present Google’s consent form before personalized ads are requested. On iOS you can also decline App Tracking.

Learn more in Google’s privacy policy.

10. International Users

If you access the App or Website from outside the United States, your information may be processed in the United States where our servers and processors operate. Contact us if you need more detail about transfer safeguards applicable to your situation.

11. California Privacy Rights (CCPA)

California residents may have additional rights under the California Consumer Privacy Act, including the right to know, delete, and opt out of certain data sales or shares. We do not sell personal information for money. Depending on configuration, advertising technologies may involve “sharing” for cross-context behavioral advertising under California law — use Cookie settings to reject advertising cookies on the Website, and contact us for assistance.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the App or via email when appropriate. The "Last updated" date reflects the most recent revision.

13. Contact Us

Questions about this Privacy Policy: privacy@stockalerts.live