Privacy Policy

Effective 17 June 2026

Controller

The data controller is Three Pundits OÜ (registry code 16714078), Estonia. Contact: hello@threepundits.com.

What we collect

Account data — email, display name, and a hashed password (or OAuth identifier if you sign in with Google/X/Discord).
Wallet address — only if you connect a crypto wallet to sign in (where supported).
Payment data — handled by our processors (Whop, NOWPayments). We receive a subscription/membership identifier and status; we do not store card numbers or crypto keys.
Notification data — your alert preferences and, if you link it, your Telegram chat ID.
Technical data — IP address, device/browser info, and essential cookies used to keep you signed in.

Why we use it (legal bases)

Performance of a contract — to run your account and subscription.
Legitimate interests — security, fraud prevention, and improving the Service.
Consent — for optional notifications and any future marketing; you can withdraw consent at any time.
Legal obligation — accounting and tax record-keeping.

Processors & sharing

We share data only with service providers acting on our instructions:

Neon (database hosting, EU region) and Cloudflare (hosting, CDN & privacy-first web analytics).
Whop (card payments / merchant of record) and NOWPayments (crypto payments).
Resend (transactional email) and Telegram (notifications, if you link it).

Where a provider processes data outside the EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses. We do not sell your personal data.

Retention

We keep account data while your account is active and for as long as needed to meet legal (e.g. accounting) obligations, after which it is deleted or anonymised.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to processing. You can:

Export your data or delete your account directly from your account page.
Email hello@threepundits.com for any other request.

You may also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee), or your local supervisory authority.

Cookies & analytics

We use strictly necessary cookies to keep you signed in and to process payments. We do not use advertising cookies.

To measure traffic we use Cloudflare Web Analytics, a privacy-first tool that reports only aggregate metrics — page views, referrers, and country. It sets no cookies, stores nothing on your device, and does not fingerprint you, track you across other sites, or build a profile of you. Because it cannot identify you, it does not require consent under the ePrivacy Directive.

Children

The Service is for adults (18+). We do not knowingly collect data from minors.

Changes

We may update this policy; material changes will be notified through the Service.