Privacy Policy

This policy explains what OptionScout collects when you use the platform, how that information is used, and the choices you have. We try to keep it concrete: every field named here maps to a real form input or a real server log.

Short version

We do not collect personal information via any form on the site today — there is no signup flow, no login form on the marketing page, and no end-user-identifying data is requested from you.
We never collect brokerage credentials, account numbers, or real positions — the platform is simulation-only and does not connect to a broker.
In stub mode (the default) we make no third-party calls. In polygon mode we send only public ticker symbols to Polygon.io; no email, no IP, no name, no user identifier is forwarded.
If we ever hold personal information about you (for example, content in a support email you sent us), you can ask us to delete it by emailing the address at the bottom of this page.

1. Information we collect

Server logs only — the public side of the platform collects no personal information today.

We do not collect personal information through forms, signups, or account creation on the public side of the platform today. The application collects standard server logs (request URL, status code, hashed request fingerprint, source IP) as part of normal web-server operation.

What we never collect

Brokerage credentials, API keys, or account numbers of any kind. The platform does not connect to a broker and does not ask for them.
Real positions, open orders, or portfolio data. All screener activity runs against simulated positions and public reference data.
Payment information. OptionScout does not currently charge fees; we have no payment form on the site.

2. Market data — third-party processing (Polygon)

Only public ticker symbols leave the platform; the upstream API key stays server-side.

When the deployment environment sets MARKET_DATA_PROVIDER=polygon, the screener queries Polygon.io server-side to pull option-chain snapshots, last-traded prices, and other public market-reference data for US-equity ticker symbols that you enter or that we scan.

The credentials that authenticate these calls live in the server-only env variable MARKET_DATA_KEY. The token is never embedded in the public bundle and is never transmitted to or from your browser; it is read only inside src/app/api/screener and used to sign outbound calls to Polygon.

What is sent to Polygon. Only public US-equity ticker symbols (e.g. AAPL, MSFT) and the request timestamp implied by our outbound HTTPS connection. No email, no IP address, no name, no user identifier of any kind is forwarded to Polygon.

What Polygon sees. Polygon receives the request from our server infrastructure, so its logs will contain the source IP of our outbound proxy rather than yours, along with standard HTTP headers it may record under its own policy. For the details of what Polygon collects and retains please see polygon.io/privacy.

Default mode is offline. When MARKET_DATA_PROVIDER is unset or set to stub (the default), the screener returns simulated data and no third-party calls are made.

3. Email channels

No transactional or marketing mail is sent from the platform today.

The platform does not currently send email of any kind to visitors or end users — there are no signup confirmations, welcome messages, alerts, or product-update newsletters going out. If email channels go live in the future, this section will be updated to describe the sender, the supported message categories, and how to opt out; until then, the third-party mail-vendor credentials that the surrounding systems require are not configured, so any inadvertent transaction simply will not send.

4. Cookies, analytics, and logs

Minimum honest disclosure: there is no end-user analytics wired in today.

The production build of OptionScoutdoes not set tracking cookies and does not run a third-party analytics script in your browser. The light/dark theme preference is stored in your browser's localStorage and never leaves your device.

Standard server logs are generated by our hosting provider when you load a page or call an API route. These logs contain typical web-server metadata (request URL, response code, hashed request fingerprint) and may include your IP address and user agent as part of normal infrastructure logging. They are retained by the hosting provider for a short operational window and are used for security, abuse mitigation, and reliability; we do not sell or share them.

5. How we use the information we collect

For the market-data processor, log handling, and responses to your messages only.

To operate the screener when the Polygon provider is enabled: look up public ticker data according to Section 2.
To keep the platform healthy: read server logs, debug issues, investigate abuse.
To respond to you when you contact us about your data, your account, or a question about these policies.

We do not sell, rent, lease, or otherwise commercially share your personal information with third parties. We do not use your information for automated decision-making with legal or similarly significant effects.

6. Data retention

No personal information persists in the application database today.

We do not persist personal information to the application database today. Standard server logs are retained for a short operational window by our hosting provider.

7. Your rights and how to exercise them

If we hold any information about you, you can confirm, correct, or delete it.

If we hold any information about you, you can ask us to confirm what we hold, correct it, or delete it; email the address below. We respond during normal business hours, Monday through Friday.

Local law may grant additional rights (for example access, portability, objection, or restriction of processing). We will honour any such rights consistent with the applicable law and against whatever data exists.

8. Children

The platform is not intended for anyone under 18.

OptionScout is intended for adults learning about options investing. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted information to us, please contact the address below and we will delete it.

9. Changes to this policy

Material updates will be reflected on this page with a revised effective date.

We may revise this Privacy Policy from time to time. Material updates will be reflected on this page with a revised "Effective date" at the top. Continued use of OptionScout after a posted update constitutes acceptance of the revised policy.

10. Contact

Questions about this policy can be sent to the address below.

For any question about this Privacy Policy or about how we handle your information, contact us at optionscout-2@polsia.app. We respond during normal business hours, Monday through Friday.