Privacy Policy

We collect the minimum needed to run an account-based alerts product: your email, your settings, and standard product analytics. We don't see your payment card, we don't sell data, and the trading data we show is already public on-chain. Deleting your account deletes your personal data.

• Account data — your email address and, if you sign in with Google, the basic profile Google shares (name, email, avatar). Authentication is handled by Supabase.
• Product data — your watchlist, alert rules, and notification history: the state the product needs to work.
• Telegram pairing — if you connect Telegram, we store your chat ID so our bot can message you. We never see your Telegram password or contacts.
• Billing data — paid subscriptions are processed by our payment provider as merchant of record. They send us your subscription status and a customer reference; your card number never touches our servers.
• Usage & diagnostics — product analytics via PostHog (pages used, features clicked) and error reports via Sentry (stack traces, browser info) so we can fix what breaks.

Wallet addresses, trades, and scores shown in the product are derived from public Polymarket / blockchain data and are not personal data we collect from you.

Running the service (accounts, alerts, billing), improving it (aggregate analytics, error fixing), and talking to you about it (service emails such as magic links; product updates you can opt out of). We do not sell or rent personal data, and we do not use it for third-party advertising.

Infrastructure and subprocessors: Supabase (database & auth), Cloudflare (hosting & CDN), our payment provider (subscription billing), Telegram (alert delivery you opt into), PostHog (analytics), Sentry (error reporting), and our transactional email provider (login emails). Each receives only what its job requires. Some are located in other countries; where required, transfers rely on standard contractual safeguards.

We use first-party cookies for one thing that matters: keeping you signed in (Supabase session). Analytics runs without third-party advertising cookies. Blocking cookies will break login but not the public pages.

Account and product data are kept while your account exists. Delete your account (or email us) and personal data is removed within 30 days, except records we must keep for accounting or legal reasons. Analytics and error logs age out on their providers' standard retention windows.

Subject to where you live (including applicable data protection laws and, where it applies, the GDPR), you can ask for a copy of your data, correction, deletion, or restriction of processing. Write to support@sharkradar.app and we'll handle it — no forms, no runaround.

Data lives in access-controlled managed services with row-level security separating users; secrets are never stored in the codebase. No internet service can promise perfect security — if we learn of a breach affecting your data, we will notify you as the law requires.

Shark Radar is not directed at children and may not be used by anyone under 18. We do not knowingly collect data from minors.

We may update this policy as the product evolves; the date above tells you when. Material changes will be announced in the app or by email. Questions or requests: support@sharkradar.app. See also our terms of service and disclaimer.