Privacy Policy
Last updated September 2026
Smart Terminal Gex is a small, free tool run by one person. This page says plainly what is collected, why, and for how long — no legal filler.
What we collect
| Data | Source | Why | Retention |
|---|---|---|---|
| Discord user ID, username, avatar hash | Discord OAuth2, when you connect | To check you're a member of the gating server and show your name/avatar in the terminal | Stored only in your signed session cookie — never written to a database. Gone when the cookie expires or you log out. |
| Session cookie | Set after a successful Discord login | Keeps you logged in; the whole terminal is behind this one cookie | 30 days, or until you log out |
| OAuth state cookie | Set right before redirecting you to Discord | CSRF protection for the login flow — a standard OAuth safeguard | 10 minutes |
| Daily page-view counts (a count per day, per page) | Server-side, on page load | To see whether the site gets any traffic at all | Indefinitely, but it's just numbers — no visitor ID, no IP address, no user agent stored with it |
What we don't do
- No advertising, no ad networks, no ad cookies.
- No third-party analytics or tracking scripts (no Google Analytics, no Meta Pixel).
- No selling, renting, or sharing your data with anyone.
- No email address is collected — login is Discord-only.
- No payment information is collected — the product is free.
Third parties involved
Two, both necessary for the product to function:
- Discord — handles the login itself. We receive your user ID, username and avatar hash after you approve the connection; we never see your Discord password. See Discord's own privacy policy.
- Market data providers (Cboe delayed quotes, and Yahoo Finance / London Strategic Edge for historical candles) — used server-side to compute the levels shown. No personal data is sent to them; these are public market-data reads, not user data leaving the app.
Cookies
Every cookie this site sets is strictly necessary — the session that keeps you logged in, and a short-lived one for the OAuth handshake. Neither is a tracking or advertising cookie, which is why there's no cookie-consent gate on this site: there's nothing optional to consent to.
Your rights
Log out at any time (/auth/logout) to clear your session
immediately. Because nothing about your Discord identity is stored server-side
beyond the signed cookie in your own browser, there's no separate account
record to request deletion of — logging out and revoking the app's access
from your Discord authorized-apps settings removes everything.
Changes
If this policy changes in a way that matters, the "last updated" date above will move and, for a material change, we'll say so on the Discord server.
Contact
Questions about this policy: reach out on the Discord server.