Privacy Policy

Last updated: September 26, 2026

1. Who we are

Merger Spreads ("we") provides an informational merger-arbitrage and spin-off tracker. For privacy questions contact support@dealdelta.app.

2. Account data we process

When you create an account we process:

• Email address — to identify you, send confirmation / password-reset messages, and pre-fill Stripe checkout.
• Password — stored only as a one-way hash. We never store or email your password in plain text.
• Age confirmation — you must confirm you are 18 or older.
• Subscription flag — whether this account has Merger Spreads Pro, so the same login unlocks Pro on any device.
• Session token — kept in your browser so you stay signed in.
• Billing ledger — email, account id, sign-up / login / last-seen times, Pro status, and payment events (date, amount, Stripe session or invoice id when we have it). We use this to answer refund and chargeback questions. We do not store card numbers.

The legal bases (GDPR) are contract (providing the account and Pro features you requested) and legitimate interests (securing the service). Confirmation emails are sent so we can verify that you control the address.

3. Information stored on your device

Merger Spreads also uses your browser's local storage, which is not uploaded as a profile to us:

• Theme preference (light or dark).
• A session token after you sign in.
• Pro desk data (watchlist, notes, saved screens, compare, book), keyed to your account id on that browser.

Until Netlify Identity is enabled on the live site, the password hash and session also stay in this browser so you can test accounts locally. After Identity is on, hashes live on Netlify and the same email works on every device.

You can clear this by signing out and/or clearing site data. We do not use advertising or cross-site tracking cookies.

4. Payments processed by Stripe

Pro checkout is hosted by Stripe, Inc. Stripe collects payment details (card number, billing address, email) as an independent controller under PCI-DSS and the Stripe Privacy Policy. Stripe's invoices are the legal payment record. We also keep our own ledger of payment dates and account activity so we can handle claims if Stripe's dashboard and a user story disagree. We do not store card numbers.

5. Processors

• Netlify — hosting, account authentication (Netlify Identity), the billing ledger (Netlify Blobs) and standard server logs (IP address, browser type) for security.
• Stripe — payments and invoices.
• Google Fonts — Inter and JetBrains Mono typefaces.
• Market-data providers (for example Finnhub or Yahoo Finance) — ticker quotes. They receive the requested symbol, not your account email.

6. Retention

We keep account data while your account exists. After you ask us to delete it, we erase the login and Pro flag within 30 days. Billing-ledger rows and Stripe invoices may be kept longer where we must defend a payment claim, tax enquiry or fraud investigation (typically up to 7 years, and on Stripe under Stripe's own policy).

7. Your rights

Depending on where you live (including the GDPR and the CCPA) you may have the right to access, correct, export or delete personal data, and to object to or restrict certain processing. Email support@dealdelta.app from the address on the account. You may also lodge a complaint with your local supervisory authority.

To close an account: sign in, email us with the subject "Delete my Merger Spreads account", and we will confirm deletion. Cancel any paid Pro period in Stripe if you do not want further charges.

8. Children

The Service is not directed at anyone under 18. We do not knowingly create accounts for children. If you believe a minor registered, contact us and we will delete the account.

9. International transfers

Our processors may store data in the United States or the EU. Where required, they rely on Standard Contractual Clauses or an equivalent safeguard.

10. Changes

We may update this policy. The "Last updated" date above is the current version. Material changes will be highlighted on this page.

11. Contact

Privacy questions or deletion requests: support@dealdelta.app.