Privacy Policy

Who we are

SideRadar is operated by Pull House LLC, doing business as SideRadar, the controller of the personal information described here. You can reach us at support@pull.house.

What we collect

• Account. Your email address and account identifiers, handled through Firebase Authentication.
• What you do in the product. Niches you save or hide, your notes, your answers to the “For you” questions and the ranking weights that come from them, which updates you have seen, your email alert preference, and any “Something off?” feedback you send about a niche.
• Billing status. From Polar we receive your plan, subscription status and the end of the current period. We never receive or store card details; Polar processes payment data under its own privacy policy.
• Technical data. Server logs kept by Google Cloud, including IP address, browser user agent and timestamps.
• Analytics. Only if you accept analytics cookies, Google Analytics for Firebase records pages viewed and events such as signing up, saving a niche or starting checkout. Google Analytics 4 does not store IP addresses.
• Email. Sign-in links are sent from sideradar.com through our email delivery provider, Resend, or by Firebase if Resend is unavailable. So that sign-in links cannot be used to flood an inbox, we keep the times links were sent to an address for one hour, filed under a one-way hash of the address rather than the address itself. Change alerts about your saved niches are sent through Resend only to Pro accounts that keep alerts on. Every alert has a one-click unsubscribe link, and replies reach our support inbox.
• Complimentary access. If we give you Pro without payment, for example as a tester, we keep your email address with that access and its end date until it ends or is withdrawn.

Why we use it

• To provide the service you signed up for (performance of a contract): signing you in, keeping your saves, notes and ranking, applying your plan and sending alerts you asked for.
• To keep the service secure and working (legitimate interests): server logs, preventing abuse and fixing problems.
• To understand how the product is used (consent): analytics, only after you accept analytics cookies.
• To meet legal obligations, such as tax records kept by Polar.

Who processes it

We share personal information only with the providers that run the service for us:

• Google: Firebase Authentication, Cloud Firestore, Firebase App Hosting and Google Analytics for Firebase.
• Polar: payments, as Merchant of Record.
• Resend: delivery of sign-in links and alert emails.

We may also disclose information when the law requires it.

International transfers

Your data is stored in the United States (Cloud Firestore, nam5 multi-region). Where the law requires it, transfers are covered by standard contractual clauses or an equivalent safeguard offered by our providers.

How long we keep it

• Account data, including feedback you sent, is kept while your account exists and deleted when you delete the account.
• Sign-in link times are kept for one hour.
• Polar keeps invoices and payment records for as long as tax law requires.
• Server logs follow Google Cloud’s default retention, about 30 days.

Cookies and local storage

• __session is essential. It is an httpOnly cookie that keeps you signed in, for up to 14 days.
• _ga and _ga_* are analytics cookies, set only if you accept analytics.
• Local storage in your browser holds your email address while you finish signing in, the scroll position of the niche list, and your cookie choice.

You can change your choice any time with “Cookie settings” at the bottom of every page.

Your rights

Depending on where you live (for example under the GDPR, UK GDPR, KVKK or CCPA), you can ask to:

• Access the personal information we hold about you.
• Correct it if it is wrong.
• Delete it.
• Receive a copy in a portable format.
• Object to processing based on legitimate interests.
• Withdraw consent, such as for analytics, at any time.

Email support@pull.house and we will respond within the time the law allows. You can also complain to your local data protection supervisory authority.

We do not sell or share personal information for cross-context behavioral advertising.

Deleting your account

On the Account page, Delete account removes your account, saves, notes, “For you” profile and updates immediately, and ends any active subscription. Invoices kept by Polar for tax purposes are not affected.

Children

SideRadar is not meant for anyone under 16, and we do not knowingly collect their information. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy. If a change is significant, we will tell you by email or in the product before it takes effect. The effective date at the top shows the latest version. See also the Terms of Service.

Contact

Privacy questions and requests: support@pull.house.