Privacy Policy

Last updated: April 20, 2026

bondpb ("we", "us", "the Service") provides StockNews — a market alerts product accessed at stocknews.bondpb.com. This page explains what we collect, why we collect it, who we share it with, and what your choices are. We try to keep it short and concrete.

1. What we collect

When you use StockNews, we collect:

• Account details — your email address, a chosen username, and a bcrypt hash of your password (we never store the plain password). If you sign in with Google, we receive your email, name, and a stable Google account identifier.
• Notification topic — a unique ntfy topic string we generate so we can deliver your push alerts.
• Alert configuration — the tickers, FRED series, signal monitor rules, watchlists, and ticker tape settings you create.
• Alert history — every notification we've sent you, with timestamps and delivery status, so you can see your history.
• Payment metadata — if you subscribe to Premium, Stripe handles your card details directly. We only store a Stripe customer reference and the resulting plan + transaction records on our side.
• Usage logs — standard server logs (IP address, user-agent, request paths, timestamps), retained for operational purposes.

2. How we use it

• To run the Service: send you the alerts you've configured, surface them in your dashboard and history, and keep your account working.
• To process payments and manage your subscription via Stripe.
• To send transactional emails (verification codes, password resets) via Resend.
• To debug, monitor, and improve the Service.

We do not sell your personal data to anyone. We do not run third-party advertising or behavioral tracking on the Service.

3. Third parties we use

Running StockNews involves a small set of third parties. We share with each only what they need to do their job:

• Stripe — payment processing for Premium subscriptions. Stripe's privacy policy.
• Resend — transactional email delivery (verification codes, password resets). Resend's privacy policy.
• Google — only when you choose to "Continue with Google". Google's privacy policy.
• ntfy.sh — push notification delivery to your device. Your alerts pass through ntfy.sh; topics are random and do not contain personal information. ntfy's privacy notes.
• Yahoo Finance / FRED / yfinance — public market and macro data sources we query on your behalf. We send no personal data to these providers.
• Fly.io — our hosting provider. Fly.io's privacy policy.
• Cloudflare — DNS and edge proxy for bondpb.com. Cloudflare's privacy policy.

4. Cookies

We use a single signed session cookie (named stocknews_session) to keep you logged in. It contains your user ID, signed with our session secret. It expires after 30 days if you check "Remember me", or 1 day otherwise. We do not use cookies for analytics or advertising.

5. Data retention

• Account data stays as long as your account exists.
• Alert history persists until you delete it (manually, per row, or via "Clear all" on the History page) or until your account is deleted.
• Server logs are kept for ~30 days for operational debugging.
• If you delete your account from Account settings → Delete account, we permanently erase your account, preferences, watchlists, signal monitors, alert history, and Stripe customer reference within 7 days.

6. Your choices

• You can edit or delete any ticker, watchlist, signal monitor, or alert at any time from within the app.
• You can clear your alert history from /history → Clear all.
• You can delete your entire account from Account settings → Delete account.
• You can request a copy of your data or exercise other rights granted under your local privacy laws (GDPR, CCPA, etc.) by emailing support@bondpb.com.

7. Children

StockNews is not directed at children under 13, and we do not knowingly collect personal data from anyone under 13. If you believe a child has signed up, contact us and we'll delete the account.

8. Security

We use HTTPS for all traffic, bcrypt for password hashing, and signed cookies for sessions. Card details never touch our servers — Stripe handles them directly. We take reasonable steps to protect your information, but no online service can promise perfect security.

9. Changes

We may update this policy as the Service evolves. The "Last updated" date at the top reflects the most recent change. Material changes will be communicated via the app or email when meaningful.

10. Contact

Questions about this policy or your data? Email support@bondpb.com.