Privacy policy

Last updated 16 September 2026. This page describes what Which Strike (https://whichstrike.com) collects, what it is used for, and who else handles it. The short version: an account needs an email address, a subscription needs a payment card that Stripe holds and we never see, and usage is measured with two analytics services. Nothing is sold or shared for advertising.

What is collected

Account data. Signing in creates an account with Clerk. Clerk stores your email address, the sign-in method you chose (an email code or a third-party login), and session tokens. We store your Clerk user id and, once you subscribe, your Stripe customer and subscription ids alongside it.
Payment data. Subscriptions are processed by Stripe. Your card number never reaches our servers; Stripe sends us the subscription's status and the email you entered at checkout. Visitors in India are quoted in rupees so Stripe can offer UPI.
Usage data. Vercel Web Analytics and PostHog record page views and product events such as which ticker was looked up, which filters were toggled and whether a report loaded. Anonymous visitors stay anonymous; once you sign in, events are tied to your Clerk user id so retention can be measured.
Request data. Like every web server, ours logs the requesting IP address, user agent and path for a short time to enforce rate limits and diagnose errors. Vercel derives your country from the IP address to choose a currency.

What it is used for

Signing you in, delivering the reports you pay for, billing, rate limiting, and understanding which parts of the product are used so it can be improved. There is no advertising, no profiling for third parties, and no sale of personal data.

Cookies and local storage

Clerk sets session cookies so you stay signed in. PostHog sets a cookie carrying an anonymous id. The site itself keeps a few preferences in your browser's local storage, such as which indicator sources you have hidden. No advertising cookies are set.

Who processes data

Clerk (authentication), Stripe (payments), Vercel (hosting, analytics and logs), PostHog (product analytics), Massive and Finnhub (market data; they receive only the ticker symbols requested, never who asked). Each is bound by its own privacy policy and processes data in the United States.

Retention and deletion

Account data is kept while the account exists. Analytics events are kept for the period each provider retains them, currently up to 12 months in PostHog. To delete your account and everything tied to it, message @blauyourmind on X from a channel that lets us confirm you own the email; the account, its Stripe customer record and its PostHog person are removed within 30 days. Cancelling a subscription does not delete the account.

Your rights

Depending on where you live you may have the right to access, correct, export or erase your personal data, or to object to its processing. Any of these can be exercised through the contact page.

Changes

Material changes to this policy are noted here with a new date. Continued use after a change means you accept it.