Privacy Policy
Last updated: September 28, 2026
Who we are
SwingTradeScanner ("we", "us", "our") operates the website at swingtradescanner.com. This policy explains what personal information we collect, why we collect it, and how you can control it.
Information we collect
We collect only what is necessary to provide the service:
- Account information. Your email address and display name. If you sign up with a password, we store a cryptographic hash of it (scrypt with a per-account salt) — we never store your password in plain text.
- Social sign-in data. If you sign in with Google or Facebook, we receive your name, email address, and a provider-specific account identifier. We do not receive or store your social media password.
- Watchlist and preferences. The stock symbols and notes you save, and your display preferences (such as light or dark theme).
- Billing information. Payment processing is handled entirely by Stripe. We store only your Stripe customer identifier and subscription status — never your card number, expiration date, or CVC.
- Session cookie. One first-party, HttpOnly, secure cookie that identifies your session. It is strictly necessary for authentication and contains no tracking identifier.
- Analytics cookies (only with your consent). If you click Accept on the cookie banner, Google Analytics sets cookies that record which pages you visit, how you arrived, and general device and location information (country or city level). We use this only to understand which pages are useful. If you decline or ignore the banner, Google Analytics is not loaded at all.
- Server logs. Standard web server logs (IP address, browser user-agent, pages requested, timestamps). These are used for security monitoring and debugging, and are retained for up to 90 days.
Facebook Login
When you choose to sign in with Facebook, we request access to the following permissions:
- public_profile — your name and Facebook user ID, so we can create your account and address you by name.
- email — your email address, so we can identify your account and send you essential service messages (such as email confirmations).
We do not post to your Facebook timeline, access your friends list, or read any other Facebook data. Your Facebook access token is used once during sign-in to retrieve your profile and is not stored.
You can revoke our access at any time by visiting Facebook Settings > Apps and Websites and removing SwingTradeScanner from the list of connected apps.
Google Sign-In
When you choose to sign in with Google, we request your name and email address through the OpenID Connect protocol. We do not access your Google Drive, Gmail, contacts, or any other Google service. You can revoke access at Google Account > Security > Third-party apps.
How we use your information
We use your personal information to:
- Create and maintain your account
- Authenticate your identity when you sign in
- Send you essential service emails (account confirmation, password reset)
- Process your subscription payments through Stripe
- Provide and improve the stock scanning and analysis features
- Monitor for abuse and protect the security of our systems
We do not sell your personal information. We do not use it for advertising. We do not build behavioral profiles of our users.
Who we share data with
We share your information only with the services necessary to operate:
- Stripe — for payment processing. Stripe receives your email and payment details directly. Stripe Privacy Policy
- Email provider (Resend) — for sending transactional emails such as account confirmation. Resend Privacy Policy
- Google and Facebook — only during the OAuth sign-in flow, when you choose to use social login.
- Market data providers — we query stock tickers and market data. These requests contain only ticker symbols and do not include any user information.
- Google Analytics — only if you accept analytics cookies. Google processes usage data on our behalf to produce aggregate traffic reports. We have not enabled advertising features or data sharing for ads. Google Privacy Policy
We do not share your data with any other third parties or advertising networks.
Cookies and your choices
The session cookie is strictly necessary and is set only when you sign in. Analytics cookies are optional and are set only after you accept them. You can change your choice at any time; clearing your browser’s site data also resets it.
Data retention
We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal information within 30 days. Server logs are retained for up to 90 days and then deleted automatically.
Data deletion
You can request deletion of your account and all associated data at any time by emailing privacy@swingtradescanner.com. Include the email address associated with your account. We will process your request within 30 days and confirm when deletion is complete.
If you signed in with Facebook, you can also initiate data deletion through Facebook by removing SwingTradeScanner from your connected apps (see the Facebook Login section above). We will receive and process the deletion callback from Facebook.
Security
We protect your data with:
- TLS encryption for all connections (HTTPS enforced site-wide)
- Passwords hashed with scrypt using a unique salt per account
- HttpOnly, Secure, SameSite session cookies
- Rate limiting on authentication endpoints
- CSRF protection on all state-changing actions
- OAuth tokens used transiently and never stored
Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate information
- Delete your account and personal data
- Export your data in a portable format
- Object to certain types of processing
To exercise any of these rights, contact us at privacy@swingtradescanner.com.
Children
SwingTradeScanner is not intended for anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the "last updated" date at the top. If we make significant changes, we will notify you by email or through a notice on the site.