Privacy Policy
Last updated: July 30, 2026
1. What we collect
- Account data — your e-mail address (magic link) and, if you sign in with Google, your name and avatar as provided by Google.
- Subscription data — your plan, subscription status, and Stripe customer and subscription identifiers. Card numbers never touch our servers — payment data is handled entirely by Stripe.
- Technical logs — standard server logs (IP, user-agent, timestamps) kept briefly for security and debugging.
The public performance pages contain no personal data — only market metrics.
2. Cookies
We use authentication session cookies only. No advertising cookies, no third-party analytics trackers.
3. Processors
- Supabase (EU region, eu-west-1) — database and authentication.
- Stripe — payments and subscription management.
- Vercel — website hosting.
- Hetzner (Germany) — data-collection server.
4. Purpose and legal basis
We process your data to provide the service (contract), to secure it (legitimate interest), and to meet accounting obligations (legal obligation). We do not sell or share personal data for advertising.
5. Retention
Account data is kept while your account exists and deleted upon account deletion, except what invoicing law requires us to retain. Technical logs are short-lived.
6. Your rights
Where GDPR applies you may request access, rectification, erasure, portability, or restriction of your personal data, and object to processing. Write to contact@mispria.com — we answer within 30 days. You may also lodge a complaint with your local supervisory authority.
7. Controller
The data controller is GuideMyGuest OÜ (registry code 17284496), Sakala tn 7-2, Kesklinna linnaosa, 10141 Tallinn, Estonia — operator of the Mispria product. As an Estonian company we fall under the GDPR; the supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), and you may also complain to the authority of your own country of residence.
Contact for any data request: contact@mispria.com.
8. The terminal (mispria.com/terminal)
The terminal runs in your browser. Signed out, it reads public market feeds directly (Polymarket, Binance, Coinbase, Kraken, OKX, Bybit) and the model runs on your device; the only requests it makes to mispria.com fetch a market's reference price and carry no personal data. Signed in as a Pro subscriber, it opens one authenticated stream to our server using your session (Kalshi data is relayed through it): we use it to confirm the subscription and send the metrics, and we do not store the token. Display preferences (collapsed cards, chart sizes) stay in your browser's local storage. If you add the terminal to your home screen, the browser caches static files only — never market data. No ads, no analytics SDK, no tracking.