Overview
Oversold is operated by TickerDB, LLC. This policy explains the limited information we use to operate the site, its API, and user accounts.
We do not use advertising trackers, build advertising profiles, or sell personal information.
Information we collect
- If you sign in by email, we collect your email address.
- If you sign in with Google, we receive your Google account identifier, verified email address, and any basic profile details Google makes available, such as your name or profile image.
- We store essential account information, roles, session records, API-key metadata, limited API usage timestamps, and authentication security events. API-key secrets are stored only as hashes.
- Cloudflare may process standard technical information such as IP address, browser details, request timestamps, and security signals to deliver and protect the service.
How we use information
We use this information only to authenticate users, maintain sessions, control access to account features, prevent abuse, operate and secure Oversold, respond to support requests, communicate important service, access, or pricing changes, and comply with legal obligations.
Cookies
Oversold uses essential cookies for sign-in sessions and the Google authentication flow. We do not use cookies for advertising or cross-site tracking.
Sharing
We share information only with service providers needed to run Oversold, including Cloudflare for infrastructure and Google when you choose Google sign-in. We may also disclose information when required by law or when reasonably necessary to protect users, Oversold, or the public.
We do not sell or rent personal information.
Retention and security
Authentication codes expire after 10 minutes and are stored only in hashed form. Sessions expire after 30 days unless ended sooner. API-key secrets are shown once when created and are not stored in readable form; you can revoke active keys from your dashboard. Account records are kept while needed to provide the service, meet legal obligations, resolve disputes, and protect the service.
We use reasonable safeguards, but no internet service can guarantee perfect security.
Your choices
You can revoke API keys, sign out, and stop using Oversold at any time.
Children
Oversold is not directed to children under 18, and we do not knowingly collect personal information from them.
Changes
We may update this policy as Oversold changes. The effective date above will show when the latest version took effect.