marketsbubbles.com is built to know as little about you as possible. There are no accounts and no passwords, we do not use Google Analytics or analytics cookies, and almost everything you configure stays on your own device. Below is the complete list of what the site stores and who processes what.
What stays in your browser
All of your settings, watchlists and saved views are stored only in your browser's localStorage. They never leave your device and our servers never see them. You can export them as a JSON file and import that file into another browser whenever you like. Clearing your browser's site data removes them completely.
The one cookie we set
We set a single functional cookie, mb_sess, and only after a successful Pro checkout. It is a signed session token (HttpOnly, Secure) whose sole purpose is to recognise your Pro subscription in that browser, for up to 35 days. Without a subscription, we set no cookies.
Payments — what Stripe processes
Payments are processed entirely by Stripe. We never see or store your card number. After checkout, Stripe shares with us only three things: your subscription status, your Stripe customer ID, and the email address you used at checkout. We store these in Cloudflare KV solely to validate your subscription.
Price-alert data (Pro)
If you turn on price alerts, we store your browser's push subscription (the notification endpoint and its encryption keys), your alert rules, and your checkout email in Cloudflare KV, keyed to that browser. This is used only to send you the notifications you asked for. Deleting all of an asset's alerts removes the stored record.
Third-party requests your browser makes
- Google Fonts (fonts.googleapis.com / fonts.gstatic.com) — to load the site's typefaces.
- open.er-api.com — exchange-rate lookups, only if you choose a non-USD display currency.
- Public CDNs — asset logo images.
Each of these providers sees your IP address as a normal part of serving the request. Market data itself comes from MEXC, CoinGecko, Nasdaq and Yahoo Finance, but it is fetched through the site's own API — your browser does not contact those providers directly.
Hosting
The site is hosted on Cloudflare. Cloudflare may process IP addresses and request logs as our processor in order to serve and secure the site.
What we do NOT do
- No Google Analytics or analytics consent popup.
- No advertising cookies or ad-tech.
- No accounts, passwords or user profiles.
- We never sell or share your data.
Your rights and deleting your data
You can remove most data yourself: deleting your alerts in the app removes the server-side alert record, and clearing your browser's site data removes everything stored locally plus the mb_sess cookie. To have your subscription record (subscription status, Stripe customer ID, checkout email) corrected or deleted, or to ask what we hold about you, email [CONTACT_EMAIL].
The site is operated from Canada and this policy is written to comply with PIPEDA. For residents of Quebec, the person in charge of the protection of personal information under Law 25 is [OPERATOR_NAME], reachable at [CONTACT_EMAIL].
Changes to this policy
If this policy changes, the new version will be posted here with an updated "Last updated" date. See also the Terms of Service and the Refund policy.