Privacy Policy
Last updated: November 2026
This Privacy Policy explains what information option-graph.com collects when you use the Service, and how it is used.
Information we collect
Account information: your email address and password, managed through Supabase, our authentication provider, when you create an account.
Subscription and billing status: your plan, trial dates, and subscription status (for example, trial, active or cancelled), so the Service can determine your access.
Strategies you create: the option strategies and positions you build and choose to save are stored against your account so you can return to them later.
Technical information: limited technical information needed to operate and secure the Service, such as session identifiers.
No-signup trial: if you try option-graph.com without signing up, your browser creates a random identifier, kept in its local storage. Our servers keep only a one-way, keyed hash of that identifier, for up to 30 days, so that during that time the same browser returns to the trial hour it already used instead of starting a new one. After that time, or if the browser's data is cleared, the identifier is no longer recognised. We also keep a daily count of trial sessions. The position you build during the trial stays in your browser. If you sign up from the trial, a copy of that position is kept on our servers for up to 2 hours, together with the email address you signed up with, so that the browser in which you open the verification link can offer to bring it back; it is deleted as soon as it is restored. option-graph.com doesn't store IP addresses for the trial.
Website usage: we use Google Analytics to see how the website is used, such as which pages are viewed, the type of device and browser, and approximate location. Google Analytics loads only if you accept analytics cookies; it then also uses cookies to recognise repeat visits. Until you accept, and if you decline, nothing is sent to Google Analytics. We don't send Google your name, email address, saved strategies or position data.
Visit statistics: we use Vercel Web Analytics, from our hosting provider Vercel, to count page views. For each page view the site sends Vercel the page address (without anything after “#” and without sign-in tokens), the page's route, the referring website when you arrive from another site, and the analytics version. Vercel determines general details such as browser, operating system, device type and country from the request itself. Vercel Web Analytics doesn't use cookies or local storage, and it runs regardless of your Google Analytics choice.
How we use this information
- To provide and operate the Service, including authenticating you and giving you access to the features you're entitled to
- To manage your subscription and billing status
- To save and retrieve strategies you choose to save
- To maintain the security and reliability of the Service
- To understand how the website is used and improve it (Google Analytics and Vercel Web Analytics)
- To run the no-signup trial, limit how often the same browser can start it, and help reduce automated use of it
Service providers
We use Supabase to manage accounts and authentication, and to store your account and application data.
We use Lemon Squeezy as our payment processor and merchant of record for subscriptions.
We use Google Analytics, a service of Google, to measure how the website is used. Google processes this information under its own privacy policy. Google signals and ad personalisation are turned off.
We use Vercel to host the website, and its Web Analytics service for visit statistics. Vercel processes this information under its own privacy policy.
We use Cloudflare Turnstile to help reduce automated use of the no-signup trial. It loads only when you click “Try without signing up”. Your browser then sends Cloudflare technical signals, such as your IP address, browser (user agent) and connection characteristics, which Cloudflare uses to assess whether the request is automated. Cloudflare processes this information under its Turnstile Privacy Addendum and its own privacy policy. option-graph.com receives only the result of the check.
Account emails, such as sign-up confirmation and password reset, are sent through our email delivery provider, Resend, which processes your email address and the message content to send and deliver these account messages, under its own privacy policy.
Payment information
Payment details you provide at checkout (such as card information) are collected and processed directly by Lemon Squeezy, not by option-graph.com. option-graph.com does not store your full payment card details. Lemon Squeezy processes this information according to its own privacy and security practices.
Cookies and local storage
option-graph.com uses a small, non-sensitive cookie to remember whether you're signed in, so you're taken to the right page on your next visit. Your session itself is managed and stored by Supabase using your browser's local storage. We don't use these technologies for advertising or for tracking you across other websites.
During the no-signup trial, your browser's local storage also holds the trial's random identifier, its session and the position you build. Cloudflare's check runs in a separate frame operated by Cloudflare, under Cloudflare's own terms. None of this is used for advertising or for tracking you across other websites.
Analytics cookies: Google Analytics loads, and sets its own cookies (such as _ga), only if you accept them in the banner. Your choice is saved in your browser. You can change it at any time here or with “Cookie settings” at the bottom of the site's pages; if you withdraw consent, Google Analytics stops and its cookies are removed. Vercel Web Analytics sets no cookies, and your Google Analytics choice doesn't turn it off.
Analytics is not active on this address.
Data retention
We retain account and strategy data for as long as your account remains active, or as needed to provide the Service and meet our legal obligations.
No-signup trial: the hashed browser identifier is kept for up to 30 days, the daily count of trial sessions for up to 2 days, and a trial position kept for after signup for up to 2 hours.
Security
We rely on the security practices of our service providers (including Supabase and Lemon Squeezy) and take reasonable measures to protect your information. No method of transmission or storage is completely secure.
Your choices
You can update your account information, delete saved strategies, and manage or cancel your subscription directly within option-graph.com.
You can accept or decline analytics cookies, and change your choice at any time in the Cookies and local storage section of this page or with “Cookie settings” at the bottom of the site's pages.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date at the top of this page.
Contact
For subscription and billing matters, manage your subscription through the subscription-management portal available inside option-graph.com.