Privacy Policy & Cookie Notice
1. Who we are
ReleaseRadar ("we", "us", "our") is a financial intelligence platform operated by Oscar Hildén, Finland. Data controller contact: admin@releaseradar.net. We process personal data solely to provide and improve the ReleaseRadar service.
2. What data we collect
We collect: (a) Account data — email address provided at registration; (b) Usage data — pages visited, signals viewed, search queries, session duration; (c) Payment data — billing information processed by Stripe (we never store card numbers); (d) Technical data — IP address, browser type, device type, timezone; (e) Communications — support emails and feedback you send us. We do not collect sensitive personal data such as health information, political opinions, or biometric data.
3. Why we collect it (legal basis)
Contract performance (Art. 6(1)(b)): to provide your subscription, process payments, and deliver signals. Legitimate interests (Art. 6(1)(f)): to improve the service, detect fraud, maintain security, and send product updates. Legal obligation (Art. 6(1)(c)): to comply with tax, accounting, and financial regulations. Consent (Art. 6(1)(a)): for optional email newsletters and marketing — you may withdraw at any time.
4. How long we keep it
Account data: retained for the duration of your subscription plus 3 years after closure. Payment records: 7 years (Finnish accounting law requirement). Usage logs: 90 days rolling. Support communications: 2 years. You may request deletion of your account at any time via account settings or by emailing admin@releaseradar.net.
5. Cookies & local storage
We use: (a) Essential cookies — authentication session tokens required for login (cannot be disabled); (b) Local storage — your feed preferences, recent searches, and UI settings stored locally in your browser (no server-side tracking); (c) No advertising cookies — we do not use any advertising, tracking, or third-party analytics cookies. We do not use Google Analytics, Meta Pixel, or any similar tracking technologies.
6. Who we share your data with
We share data only with: Supabase (database and authentication, EU servers, Frankfurt); Stripe (payment processing, EU data residency available); Resend (transactional email delivery); Vercel (hosting, EU region). We do not sell your data. We do not share your data with advertisers. All processors are GDPR-compliant with appropriate data processing agreements in place.
7. Your rights under GDPR
You have the right to: Access your personal data (Art. 15); Rectify inaccurate data (Art. 16); Erase your data ("right to be forgotten") (Art. 17); Restrict processing (Art. 18); Data portability (Art. 20); Object to processing (Art. 21); Withdraw consent at any time. To exercise any right, email admin@releaseradar.net. We will respond within 30 days. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
8. How we protect your data
We implement: TLS encryption for all data in transit; AES-256 encryption for data at rest; Row-level security on all database tables; Regular security audits; Access controls — only authorised personnel can access production data; No storage of payment card data (handled entirely by Stripe).
9. Children
ReleaseRadar is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact admin@releaseradar.net and we will delete it promptly.
10. Changes to this policy
We may update this policy as the service evolves. Material changes will be notified by email or in-app notice at least 14 days before taking effect. The current version is always available at releaseradar.net/privacy.
11. Contact & supervisory authority
Data controller: Oscar Hildén · admin@releaseradar.net · Finland. Supervisory authority: Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) · tietosuoja.fi · PO Box 800, FI-00531 Helsinki.