ThetaStreak

Privacy Policy

Last updated: July 9, 2026 · Effective: July 9, 2026

The short version: we collect your email, the trades you log, and — only if you connect a broker — read-only position data. We never see your broker password, never store your card number, and never sell your data.

1. Who we are

ThetaStreak ("we," "us," "our") operates thetastreak.com (the "Service"). This policy explains what personal data we collect, why, and the choices you have. The fastest way to reach us about privacy is privacy@thetastreak.com — we respond to every request there, including formal data-rights requests.

2. Data we collect

Account data. Email address, username, and avatar when you sign up. Authentication is handled by our infrastructure provider, Supabase, and every record is isolated per user with row-level security.

Trading data you enter. Positions, legs, roll events, trades, notes, tags, and goals you log in the app. This is your data; we process it only to run the Service.

Broker data (optional). If you connect a brokerage through SnapTrade, we receive read-only account holdings, balances, orders, and transaction data. We never receive or store your brokerage username, password, or other credentials — the connection is made directly between you and SnapTrade through its secure portal, and the SnapTrade user secret we use to refresh data is encrypted before storage and used only from server-side code. You can revoke access at any time by disconnecting the broker in Settings; we then stop syncing, and you can ask us to delete previously synced data.

Payment data. Subscriptions are processed by Stripe. We store your subscription status and Stripe customer ID — never your card number.

Usage data. Standard logs (IP address, browser type, pages viewed) used for security and to improve the Service.

3. How we use it

To provide and improve the Service: displaying your positions and analytics, syncing broker activity, processing subscriptions, and sending service emails (delivered via Resend from hello@thetastreak.com; we don't send marketing email without consent), preventing abuse, and complying with law. We do not sell or rent your personal data, and we do not use your trading data for advertising.

4. Sharing

We share data only with service providers who process it on our behalf under contract: Supabase (hosting, PostgreSQL database, and authentication), Stripe (payments and subscriptions), SnapTrade (optional read-only brokerage connectivity), and Resend (transactional email delivery). If you enable optional features, data flows where you point it: Discord alerts post the trade details you choose to your own user-provided webhook; the Leaderboard shows your username with aggregate stats only — never individual positions or account values. We may disclose data if required by law, and if ThetaStreak is ever acquired or merged, your data may transfer with the business — this policy (or one at least as protective) would continue to apply and we would notify you.

5. Cookies & tracking

We use only the cookies needed to run the Service: keeping you signed in, remembering preferences (like theme), and security. No ad networks, no cross-site trackers, and no sale of browsing data — ever. We do not currently run any third-party analytics or advertising tooling. Because there is no accepted standard, we do not respond to browser Do-Not-Track signals — but since we don't track you across sites, there is nothing to opt out of.

6. Retention & deletion

We keep your data while your account is active. You can export your data (CSV/JSON) at any time from Settings, and you can delete your account from Settings or by emailing privacy@thetastreak.com — deletion removes your personal data within 30 days, except records we must keep for legal or accounting reasons.

7. Your rights

Depending on where you live (e.g. GDPR in the EU/UK, CCPA/CPRA in California), you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to opt out of "sale" or "sharing" (we do neither). Exercise them via privacy@thetastreak.com; we respond within the legally required window and won't discriminate against you for asking.

8. Security, children & changes

Data is encrypted in transit and at rest; access is limited to what's needed to operate the Service. No system is perfectly secure — if a breach affects you, we'll notify you as required by law. The Service is for adults 18+; we don't knowingly collect data from children. If we change this policy materially, we'll notify you by email or in-app before the change takes effect.