Privacy policy

The short version

• You can read the public pages without an account. We keep only anonymous visit counts and a day of server logs then, unless you request a coin.
• With an account, we keep what runs it: your email, your alerts, your Telegram chat with our bot, and your subscription's state.
• Card details never reach us. Link, the Stripe service that sells Sparsity Analyst for us, keeps them.
• We don't sell your data, and there are no ad trackers.
• Download your data or delete your account at any time on your account page.

Who we are

Sparsity Data LLC runs sparsitydata.com and decides what happens to the data described here. Write to us at support@sparsitydata.com.

What we keep, and why

Your account

• Your email, and how you sign in: a code we email you, or Google.
• With Google, also the name and photo Google sends each time you sign in. Our sign-in service, Supabase Auth, keeps them; we don't copy them anywhere else.
• Your time zone, from your browser when you sign in, so a daily digest of alerts arrives at your hour.
• When you made the account and last signed in, and the look you picked for your Sparsity Analyst card.
• Supabase Auth also logs each sign-in with the IP address and browser it came from, to keep accounts safe.

We keep these to sign you in and run your account.

Telegram

If you connect Telegram: your chat with our alert bot (its id), your @handle if you have one, when you linked it, and whether alerts are paused and why. The one-time code that links your chat is kept only as a hash. We don't keep the messages you send the bot. We keep these to send you your alerts.

Alerts

Your alerts: the coin, what to watch, its settings, whether it's paused, and when you want to hear (as soon as the day's readings land, or a daily digest at an hour you pick). For each alert that fires: the day, and whether it was sent, skipped or failed. While an alert waits for your digest hour, we also keep what its message will say, the public readings it prints, and clear it once it's sent.

Your subscription

Stripe's ids for you as a customer and for your subscription, its status (such as active or cancelled), when the period you paid for ends, and when a cancelled one stops. This is how paid pages and alerts know you subscribe. Your card details, billing address, receipts and tax details stay with Stripe and Link and never reach us.

Coin requests

If you use Request a coin: the coin, and the note and contact you choose to add. To count each person once per coin, we keep a keyed hash of your IP address, never the address itself. A request isn't tied to an account.

Visits

• Vercel Web Analytics counts page views: the page, the site you came from, your country and city, and your browser, system and kind of device. It sets no cookies and tells visitors apart with a hash of the request that is thrown away after 24 hours, so the counts are anonymous.
• Vercel, which hosts the site, logs each request with its IP address, browser and page, and keeps these logs for a day.

When you write to us

Emails to support@sparsitydata.com are kept in our Google Workspace mailbox, so we can answer and follow up.

Cookies and storage in your browser

• Sign-in cookies keep you signed in. They're set only when you sign in, and cleared when you sign out.
• When the sign-in page shows Google's button, a cookie holds a one-time number for Google's check, for up to 30 minutes.
• Your browser's own storage keeps the theme you picked, whether this browser has seen the account menu before (so the top of the page doesn't shift), and on the holder strength page, the category and chain you last picked. This stays on your device.
• No ad trackers, and nothing that follows you to other sites.
• Some parts load from other companies, under their own policies: Google's sign-in button on the sign-in page, an X post on a coin page once you tap to show it, and Stripe's checkout and billing pages.

Who processes it for us

• Supabase: our database and sign-in service (Supabase Auth). Your account data is stored in the US (East).
• Vercel: hosts and runs the site, counts visits and keeps request logs.
• Resend: sends the sign-in code emails, from the EU (Ireland).
• Stripe and Link: payments. Link is the seller, and keeps what the sale, tax and receipts need under its own privacy policy.
• Telegram: delivers your alerts.
• GitHub: our private issue tracker. When we look into a requested coin, its notes are copied there, without contacts.
• Google: signs you in, if you choose Google, and holds our support mailbox.

Your data is processed in the US, and sign-in emails are sent from the EU. We don't sell or rent it to anyone, and we share it only with these processors, to run the service, or when the law requires.

How long we keep it

• Your account, Telegram link, alerts and subscription's state: until you delete your account, when they're deleted at once.
• The record of which alerts fired: 90 days.
• What a waiting alert will say: until it's sent, usually within a day.
• Telegram link codes: they work for 10 minutes and are cleared out a day after they run out, the next time anyone connects.
• Coin requests, with their note, contact and hashed IP: we haven't set an end yet, and nothing deletes them today. Notes copied to our issue tracker stay there with the coin's review.
• Supabase Auth's log of sign-ins: nothing of ours deletes it yet, and it isn't deleted with the account.
• Vercel's request logs: a day. Its analytics hash: 24 hours.
• Resend's record of each sign-in email (the address, and whether it arrived): 30 days.
• Emails to support@sparsitydata.com: in our mailbox until we delete them.
• Stripe and Link: when you delete your account we ask Stripe to delete your customer record, but Link keeps its records of a sale as long as tax law requires.

Your choices and rights

• Download your data on your account page: one file with your account, your alerts and the record of those that fired, your Telegram link and your subscription's state.
• Delete account on your account page: the account and everything in it go at once, and Sparsity Analyst is cancelled.
• For anything else, such as correcting something, asking what we hold that isn't in the download, or objecting to how we use it, write to support@sparsitydata.com. We answer within 30 days.

Depending on where you live, such as the EU, the UK or California, the law may give you more rights, including complaining to your data protection authority. We use your data to provide the service you asked for, to keep it safe and working, and to meet legal duties.

Children

Sparsity isn't for children. You need to be at least 18 to make an account.

Changes

When we change this policy, we update this page and the date at the top. For a change that matters, we also email everyone with an account before it applies.

Contact