Privacy Policy

If you sign in with Google: your Google account identifier, email address, name and profile picture — nothing else from your Google account, and we never receive your Google password. If you sign in by email link: just the address. Usage events: which pages and companies were viewed, so we can understand what the product is used for. Visitors: instead of storing IP addresses we store a salted one-way hash, which counts distinct visitors and detects abuse but cannot be turned back into an address.

We do not sell or share your personal data with anyone. We run no advertising and no third-party tracking scripts. Cookies: the one that keeps you signed in (essential) and one remembering your choice in the privacy dialog. Anonymous analytics run only if you allowed them there — and none run at all today; your choice is stored for when they do. We do not have, and never ask for, your brokerage credentials.

Signing in can use Google. Sign-in emails are delivered by Resend. Price charts are provided by TradingView and load from their servers inside a frame, so TradingView receives the request for the chart. The site is served through Cloudflare and hosted with Hetzner in Germany (EU). Each of these has its own privacy policy.

Sign-in sessions expire after 30 days. Account records are kept until you ask us to delete them. Usage events are retained for up to 24 months.

You can ask us at any time to show you what we hold about you, correct it, or delete your account and its data. Email the address below and we will act on it. If you are in the EU or UK, this is your right under the GDPR.

Traffic is encrypted in transit. Sign-in tokens are stored only as irreversible hashes, so a copy of our database would not let anyone into your account. We do not store passwords at all.

WaveMan is not directed at children under 16 and we do not knowingly collect their data.

If this policy changes materially we will update the date in the sidebar and, for registered users, say so in the product.