← Back to home

Privacy Policy

Last updated: April 2026

1. Introduction

Optixa ("we", "our", "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our options analytics platform.

2. Information We Collect

When you sign in with Google, we receive:

  • Name — your Google account display name
  • Email address — your Google account email
  • Profile picture — your Google account avatar URL

We do not collect passwords, financial information, trading account details, or any data beyond what Google provides during the OAuth sign-in flow.

3. How We Use Your Information

We use your information solely to:

  • Authenticate your identity and maintain your session
  • Display your name and avatar in the application
  • Enforce rate limits and prevent abuse

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Data Storage

Your session is managed using a JSON Web Token (JWT) stored in an HTTP-only cookie in your browser. We do not store your personal information in any database. Your watchlist preferences are stored locally in your browser's localStorage and are not transmitted to our servers.

5. Cookies

We use the following cookies:

  • Session cookie — an HTTP-only, secure cookie containing your encrypted JWT session token. This is essential for authentication and expires after 24 hours.
  • CSRF token — a security cookie used to prevent cross-site request forgery attacks.

We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

6. Third-Party Services

We use the following third-party services:

  • Google OAuth— for authentication. Google's privacy policy applies to the data they process.
  • Vercel — for hosting. Vercel may collect standard server logs (IP addresses, request timestamps).

7. Data Security

We implement industry-standard security measures including HTTPS encryption, HTTP-only cookies, Content Security Policy headers, and rate limiting. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

You have the right to:

  • Access — request a copy of the personal data we hold about you
  • Deletion— request deletion of your data by signing out (since we don't store data server-side, signing out and clearing cookies removes all your data)
  • Revoke access— revoke Optixa's access to your Google account at any time via your Google Account settings

9. Children's Privacy

Optixa is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the "Last updated" date at the top of this page.

11. Contact

For questions about this Privacy Policy, please contact us at privacy@optixa.com.