What we store

Your email address — it's how you sign in (magic links, no passwords) and where alert emails would go if you enable them.

Your alert rules — the markets and conditions you ask us to watch.

Your Discord webhook URL (if you add one) — so we can deliver alerts to your channel. Shown back to you masked.

Your alert history — what fired, when, and whether it was delivered.

One cookie of ours — an HttpOnly session cookie that keeps you signed in for 30 days. It does nothing else. Google's advertising tag may set its own cookie; see Advertising below.

What we don't do

We don't sell or share your data, and we don't fingerprint you. We don't hold payment details (there's nothing to pay for yet). Market prices and volumes shown here are public exchange data from Kalshi and aren't about you.

We do advertise — see below — so there is one third-party tag on this site. That's a real change from earlier versions of this page, and it seemed worse to leave the old wording up.

Analytics

We use Cloudflare Web Analytics to see aggregate page views, referrers, and countries. It is cookieless and doesn't identify or track individual visitors.

Advertising

We run Google Ads to find people who might want this tool, and the site carries Google's conversion tag so we can tell whether an ad actually led to a signup. It sets a Google cookie and is cross-site tracking — Google may associate your visit here with your activity elsewhere. That's what the tag is for, and we'd rather say so than bury it.

If you're in the EEA or the UK, that tag is loaded with advertising and analytics storage denied by default via Google Consent Mode, because those regions require opt-in consent and we don't run a consent banner. In practice it should set no advertising cookies for you. Our ads target the United States.

To opt out anywhere: block third-party cookies or use any tracker blocker (the tag is `googletagmanager.com`), or turn off ad personalization at myadcenter.google.com. Nothing about the product depends on it — alerts work identically with the tag blocked.

We don't upload your email or any account data to Google, and we don't run remarketing audiences or any tag inside your signed-in account beyond the same site-wide conversion tag.

Email

We only send email you've asked for: sign-in links, and market alerts if you turn on email delivery. No newsletters, no marketing. Delivery runs through Resend.

Where your data lives

Our server and database run at Hetzner in Helsinki, Finland (EU). Processors we rely on: Resend (email delivery, US), Cloudflare (DNS and analytics, US), Google (advertising measurement, US) — all three participate in the EU-US Data Privacy Framework — and Hetzner (hosting, Germany/Finland).

Retention and deletion

Account data (email, rules, webhook, alert history) is kept while your account exists. Raw market tick data is unrelated to you and rolls off after about a week.

Want out? Email hello@kalshiscanner.app from your sign-up address and we'll delete your account and everything attached to it, normally within a few days.