Privacy Policy
Last updated: February 2026
1. What We Collect
We collect the minimum data necessary to operate the Service:
- Email address — provided at sign-up, used for authentication and email notifications
- Notification preferences — your email and push notification toggle states
- ntfy.sh topic name — if you configure push notifications
- Subscription status — plan tier, account status, and billing period dates
We do not collect names, addresses, phone numbers, or any demographic information.
2. What We Do Not Collect
- We do not use analytics or tracking cookies
- We do not use third-party tracking scripts
- We do not store payment card details (these are held entirely by Stripe)
- We do not collect browsing behaviour or device fingerprints
3. How We Use Your Data
Your data is used solely to operate the Service:
- Sending magic link verification codes for authentication
- Delivering market health email notifications
- Sending push notifications to your configured ntfy.sh topic
- Managing your subscription and billing status
4. Third-Party Services
We use the following third-party services to operate Market Canary:
- Stripe — payment processing. Stripe receives your payment details directly. See Stripe's privacy policy.
- Amazon SES — email delivery. Your email address is transmitted to AWS for sending notifications. See AWS's privacy policy.
- ntfy.sh — push notification delivery. Your topic name (not email) is used to route notifications. See ntfy.sh's privacy policy.
We do not sell, rent, or share your personal data with any other third parties.
5. Data Storage and Security
Your data is stored in an encrypted database hosted on our infrastructure. Authentication uses email-based magic links with short-lived, single-use tokens. We do not store passwords.
Session cookies are used to maintain your login state. These are HTTP-only, secure cookies and contain no personal information.
6. Data Retention
We retain your data for as long as your account is active. When you delete your account:
- All personal data is permanently deleted
- Any active Stripe subscription is cancelled
- This action is immediate and irreversible
Expired authentication tokens are automatically purged on a recurring basis.
7. Your Rights
You can at any time:
- View your account data from the Account tab
- Update your notification preferences
- Delete your account and all associated data
For any data-related requests, contact us at the email address listed on marketcanary.co.
8. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email to active subscribers. The "last updated" date at the top of this page reflects the most recent revision.