Third-Party Data Disclosure

Last updated: March 6, 2026

This page explains exactly what data each third-party service stores when you use Stonkistan. We believe in radical transparency. There are no surprises here.

Our Data Minimization Commitment

Stonkistan deliberately collects the absolute minimum data required to operate your account. We do not build advertising profiles, we do not sell data, and we do not store anything beyond what is functionally necessary. Less data stored = less risk to you if our systems were ever compromised.

Clerk (Authentication) + Google OAuth

Used when you sign in with Google

What Google Sends to Clerk When You Sign In:

→ Your Google account email address
→ Your Google account display name
→ Your Google account profile photo URL (used only for display)
✗ NOT sent: your password, phone number, contacts, calendar, or any other Google data

What Clerk Stores on Stonkistan's Behalf:

→ A unique Clerk User ID (e.g., user_abc123)
→ Your email address (for login verification)
→ Session tokens (expire automatically)
✗ NOT stored by Clerk: payment information, browsing history, location

What Stonkistan's Database Stores (Keyed to Your Clerk ID):

✓ Clerk User ID
✓ Email address
✓ Display nickname (if you set one)
✓ Your watchlist (list of asset symbols)
✓ Your selected badge key
✓ Pro subscription status (boolean: yes/no)
✓ Comments submitted (auto-deleted after 7 days)
✓ Stripe Customer ID (if Pro subscriber)

Clerk's full privacy practices: clerk.com/privacy · Google's OAuth practices: policies.google.com/privacy

Stripe (Payments — Pro Citizens Only)

Only applies if you subscribe to Pro Citizenship

What Stripe Stores:

→ Your billing email address
→ Your billing name and address (required for payment processing)
→ A tokenized payment method (card last 4 digits + expiry only — never the full card number)
→ Transaction history for your subscription
✗ Stonkistan never sees your full card number. Stripe handles all payment data directly.

What Stonkistan Stores from Stripe:

✓ Your Stripe Customer ID (e.g., cus_abc123)
✓ Subscription status (active/cancelled)
✗ No card details, no billing address, no transaction amounts

Stripe's full privacy practices: stripe.com/privacy

Vercel (Hosting) + Neon (Database)

Infrastructure providers

Vercel hosts the website and may log standard server access logs (IP address, request path, timestamp) for up to 30 days for security and debugging purposes. Vercel does not receive personal account data. Vercel Privacy Policy →

Neon is our PostgreSQL database provider hosting the application database. Your account data is stored in Neon's US-East-1 region. Neon's infrastructure is SOC 2 certified. Neon Privacy Policy →

Google AdSense (Advertising)

Only with advertising cookie consent

Stonkistan displays ads via Google AdSense to fund free access to the platform. AdSense may set cookies to personalize ads based on your browsing behavior across the web. This only occurs if you consented to advertising cookies in the cookie consent banner. If you declined, you will still see ads but they will not be personalized.

Stonkistan does not receive personally identifiable information from Google AdSense. We receive only aggregate revenue reporting.

Manage Google ad settings: adssettings.google.com

Deleting Your Data

Your right to erasure

To delete all data Stonkistan holds about you, email freedom@stonkistan.com with subject line “Data Deletion Request”. We will delete all records associated with your account within 30 days and confirm.

For data held by Clerk or Stripe, you must contact those services directly using the links above. We cannot delete data from their systems on your behalf.

Automatic deletions already in place: comments (7 days), article interactions (7 days).

Related policies: