Privacy
What IPO Radar stores, why, and how to get rid of it. Last updated 12 September 2026.
What we store
Your account
Created when you sign up, and deleted when you delete the account.
| What | Why | Kept until |
|---|---|---|
| E-mail address | Identifies the account and is the only way we could contact you about it. | Until you delete the account |
| Display name and avatar URL | Shown in the interface. Supplied by Google if you sign in with Google. | Until you delete the account |
| Password hash | Only if you set a password. Stored as a bcrypt hash — we never hold the password itself. | Until you delete the account |
| Google account identifier | A stable id from Google so that signing in again reaches the same account. It is not your e-mail and cannot be used to contact you. | Until you delete the account |
| Sign-in times and failed attempts | Detecting and slowing down password guessing. | Until you delete the account |
Signing in with Google gives us your e-mail address, name, profile picture URL and a Google account identifier. We request nothing else — no contacts, no calendar, no Drive, no access to anything in your Google account.
What we store
Your use of the product
| What | Why | Kept until |
|---|---|---|
| Watchlists, alert rules and saved research | They are the product. They belong to you and are visible only to you. | Until you delete them, or the account |
| Sessions | A hashed session token, your browser's user-agent string and the IP address you signed in from, so you can stay signed in and spot sessions you do not recognise. | Until the session expires or you sign out |
| Usage counters | Enforcing daily limits, such as how many research queries a plan includes. | Until you delete the account |
| Which pages you opened | Understanding which parts of the product get used. Attributed to your account, or to a random browser id if you are signed out. | Anonymised when you delete the account |
A deliberate choice
We do not keep a record of what you research
In a financial research product, a list of the companies you looked up is a list of what you are interested in. We decided not to hold one.
Search terms are counted in day-level totals with no link to any account — a term, a date and a number. There is no account id, no anonymous id and no per-search timestamp, so the records cannot be traced back to a person or put in order to reconstruct a session.
This is why your data export does not contain your searches: there is nothing to export. We also removed the per-person search records that earlier versions had kept, converting them to those same anonymous totals. That conversion is not reversible.
What we store
Payments
IPO Radar is paid for in USDC on Solana.
| What | Why | Kept until |
|---|---|---|
| What you bought and what it cost | A record of the transaction, and working out when your access ends. | Kept as a financial record after deletion, with your account link removed |
| The blockchain transaction and the wallet that paid | Confirming the payment against the public Solana blockchain, and stopping the same transaction being used twice. | Kept as a financial record after deletion, with your account link removed |
We never see your private keys or seed phrase, and we cannot move funds from your wallet. Your wallet signs the payment; we only read the result from the public blockchain.
Solana is a public ledger. A payment to us is visible to anyone looking at the blockchain, as is the wallet it came from. We do not publish the connection between a wallet and an account, and your wallet address is never shown to other users or included in analytics — but your own on-chain activity is public by the nature of the network, not by anything we do.
Who else is involved
Third parties
| What | Why | Kept until |
|---|---|---|
| Only if you choose to sign in with Google. Google tells us your e-mail, name, picture URL and account id. | Governed by Google's own privacy policy | |
| A Solana RPC provider | Reading the public blockchain to confirm payments. They see the blockchain queries we make, not your identity. | Governed by that provider's policy |
| Our hosting and database provider | Running the service and storing the data described above. | Under contract, on our instructions only |
Public sources we read about companies — SEC EDGAR filings, news feeds, market data — receive nothing about you. They are queried on behalf of the product, not on behalf of a user, and a search you run never becomes a request to them carrying your identity.
Your control
Seeing it and getting rid of it
Both are self-service. Neither needs you to ask us.
Export
Download everything held against your account as JSON, assembled live from the database rather than from a description of it.
Go to settingsDelete
Close the account. Your watchlists, alerts, saved research and sign-in details go immediately and are not recoverable.
Go to settingsWhat deletion keeps, and why
Saying “everything is deleted” would not be true, so here is exactly what is not:
- Payment records, with the account link removed. They are a record of money that actually moved, and each holds the guard that stops its blockchain transaction being reused against a later order.
- A one-way Early Access marker. It stops the same identity claiming a second free trial. It contains no e-mail, no name and no account id — only a value derived from your sign-in identity that cannot be turned back into it.
- Anonymous usage counts and audit entries, with the account link removed, so they become ordinary totals.
Nothing retained can be used to contact you or to establish who you were.
How it is protected
Security
- Passwords are stored as bcrypt hashes. The plaintext is never stored and never written to a log.
- Session cookies are HttpOnly and SameSite=Lax, so page scripts cannot read them, and every state-changing request carries a CSRF token.
- Credentials and API keys are read from server environment variables and are never sent to the browser.
- Entitlements are enforced on the server on every request. Hiding a control in the interface is never what stops access.
- No payment credential, private key or seed phrase is ever requested, handled or stored.
No system is perfectly secure, and we will not pretend otherwise. If you find a vulnerability, please report it before disclosing it publicly.
Housekeeping
Changes and contact
If this policy changes in a way that affects what we collect or why, the date at the top changes and the change is described here rather than applied quietly.
IPO Radar is operated from the contact address published on the deployment. For a privacy question, a data request, or to report a security issue, use that address.
See also the terms of service.