Privacy

No account, no sign-in, and no personal data collected. Page views are counted in aggregate by Vercel Analytics and Vercel Speed Insights, which measure traffic and page performance without cookies and without building a profile of you across sites.

Standard server logs (IP address, user agent, requested URL) are generated by the host as part of serving the page and are retained by Vercel under their own policy.

Signing in is optional and exists for one reason: leaving comments on research posts. Sign-in is handled by Google OAuth through Supabase. The Market Shack never sees or stores your Google password.

What is stored when you sign in:

• Your display name and profile picture URL, as supplied by Google.
• An account identifier and the email address associated with the account, held by Supabase Auth.
• The text of any comment you post, the post it belongs to, and when you posted it.

Comments are public: your display name, picture and comment text are visible to anyone reading that page. Please do not put anything private in one.

When I email someone directly, the link to this site in my signature carries a short random code (the ?r= part of the address). If you open that link, the site records the code, the time, your IP address and your browser's user agent, so I can see that the email was useful enough to click. Some test emails also contain a tiny image that records the same details when it loads.

The code is random. The site never receives your name or email address; only my own computer knows which code went to whom. These records sit in Upstash ↗, are capped at the most recent few thousand, and expire after 60 days without new activity. To avoid them, type the address in instead of clicking, or turn off images in your email app.

Data is stored with Supabase ↗ (database and authentication) and the site is served by Vercel ↗ (hosting and analytics). Upstash ↗ holds the email-link records above and rate limits for comments. Sign-in involves Google ↗. That is the complete list.

Nothing is sold, rented, or shared with advertisers, and there is no advertising or third-party tracking on this site. The email-link records above are first-party and used only by me.

Ask, and your account and comments are deleted. There is no retention requirement here and no reason to keep them. Email shivanshforcollege@gmail.com and say which account to remove. Deletion removes the profile record and the comments; aggregate analytics counts contain nothing that identifies you and are not affected.

If this page changes materially, the revision date above changes with it. This is a personal project run by one person; if something here is unclear or looks wrong, please ask rather than assume.