Last updated 14 September 2026
This policy explains what information TraderPunk collects, why, and what you can do about it. We try to collect as little as the product needs to work. TraderPunk is operated by Clickable Company Limited, which is the controller responsible for the personal data described here.
Your account email address and sign-in credentials are stored and managed by Supabase, our authentication and database provider. If you sign in with Google instead of a password, Google confirms your identity to us and we receive your email address and basic profile information from them; we never receive your Google password. We store your watchlist — the tickers you have added — and your subscription status and billing metadata (plan tier, renewal date, and similar) via Stripe; card numbers and other payment instrument details never touch our servers and are handled entirely by Stripe. We also keep basic server logs (request timestamps, IP addresses, and error traces) for operating and debugging the Service.
If you record holdings on your portfolio page, we store the ticker, the number of shares, and, if you enter it, your average cost. That data is used only to render your own portfolio page — it is never aggregated, shared, or used to rank or recommend anything — and it is deleted with your account.
Subscribing to the daily brief requires a TraderPunk account — signing up for the account is what verifies the address, so there is no separate confirmation email to send or wait on. The unsubscribe link in every brief works on its own, without needing you to sign back in, and clicking it deletes your subscriber row outright rather than marking it inactive. Deleting your TraderPunk account removes it the same way, automatically.
We do not run advertising trackers or cross-site tracking of any kind. We measure traffic with Vercel Web Analytics, which sets no cookies: visitors are counted from a hash of the incoming request that is discarded after 24 hours, so nothing here follows you to another website, and we do not link any of it to your account. It records the page you viewed, including any campaign or attribution parameters in its address, the site that referred you, your browser and device type, and an approximate location down to city level. We also record four product events — reaching a paywall, starting signup, starting checkout, and completing a subscription — and the information we attach to them is which part of the site sent you to the paywall and which ticker you were viewing, which plan you chose, and whether you signed up with email or Google. The only cookies the Service itself sets are Supabase authentication session cookies, which exist solely to keep you signed in, and we store your light/dark theme preference in your browser's local storage. When you open the checkout page, Stripe loads its own payment form and sets its own cookies to detect fraud — those are described in Stripe's privacy policy.
We share data with a small number of processors, each scoped to what it needs to do its job. This is the complete list:
TraderPunk is operated from Thailand, but the processors above are not, so your data is processed outside Thailand. Our database is hosted in Singapore. Stripe, Vercel, Resend and Sentry process data in the United States and in the other countries where they run infrastructure, and Google operates globally. We engage each of them under their published data processing terms, which carry the cross-border transfer safeguards those providers offer their customers. If you want to know where a particular piece of your data sits, email support@traderpunk.app and we'll tell you.
We retain your account data for as long as your account exists. Deleting your account at /settings/delete immediately cancels any active subscription and removes your profile, watchlist, holdings, and subscription records; deletion cannot be undone, and any paid time remaining on the subscription is forfeited — see the Refunds section of our Terms of Service. Stripe independently retains transaction records for as long as applicable law requires, regardless of when you delete your TraderPunk account.
Server logs are the exception to that, because they are not tied to your account: they exist only to operate and debug the Service, they are never used to build a profile of you or shared with anyone outside the processors listed above, and they age out on our hosting and error-monitoring providers' retention schedules rather than being kept indefinitely.
You can access or delete your data at any time, self-service, from Settings. For a copy of the data we hold about you, a correction, or any request Settings doesn't cover, email support@traderpunk.app and we'll take care of it.
The controller of the personal data described in this policy is CLICKABLE COMPANY LIMITED (registration number 0105557070680), registered office 39, Room No. 201, 2nd Floor, Sukhumvit 71 Road, Phra Khanong Nuea Sub-district, Vadhana District, Bangkok, Thailand. Privacy requests reach us fastest at support@traderpunk.app.
If we make a material change to this policy, we'll announce it on this page with a new effective date. For any privacy question not answered here, email support@traderpunk.app.