FinalPrivacy Policy
1. What we collect
| Data | Why |
|---|---|
| Username & email address | To create and identify your account, send account-related email (verification, password reset, renewal notices). |
| Password | Stored only as a secure one-way hash — we cannot see or recover your actual password. |
| IP address | Logged briefly around login attempts, used only to detect and slow down brute-force login attacks. |
| Stripe customer & subscription ID | Links your account to your subscription status so we know what plan you're on. Your card details are never sent to or stored on our servers — Stripe handles those directly. |
| Discord webhook URL (optional) | Only if you turn on Discord notifications yourself. It's a URL you provide, used solely to deliver the alerts you configure. |
2. What we don't do
- We don't run advertising trackers, analytics pixels, or third-party marketing scripts on the site.
- We don't sell, rent, or share your personal data with data brokers or advertisers.
- We don't have access to your Kalshi account, trading history, or funds — FinalCandle only displays signals; it never connects to your brokerage.
3. Payments
All payments are processed by Stripe. When you enter card details, they go directly to Stripe — our servers never receive or store your full card number. We only receive a reference ID from Stripe telling us your subscription status.
4. Cookies
We use a single functional session cookie to keep you signed in. It's required for the site to work and isn't used for advertising or tracking across other sites.
5. Data retention & deletion
We keep account data for as long as your account is active, plus a reasonable period afterward for billing records and fraud prevention. You can request deletion of your account and associated data at any time through our Discord; we'll confirm once it's done, minus anything we're legally required to retain (e.g. billing records).
6. Security
Passwords are stored as salted hashes, never in plain text. Login attempts are rate-limited to slow down automated attacks. Application data is backed up regularly. No system is perfectly secure, but we take reasonable, ongoing steps to protect your information.
7. Children's privacy
FinalCandle is not directed at, and may not be used by, anyone under 18.
8. Changes to this policy
We may update this policy from time to time. Material changes will be reflected here with an updated date above.
9. Contact
Questions about this policy, or a data deletion request, can be sent through our Discord.