Privacy Policy

1. Introduction and Who We Are

WhatsUpPrice (“we,” “us,” or “our”) operates the website www.whatsupprice.com(the “Site”) and related services (collectively, the “Service”). WhatsUpPrice is a free financial price-tracking platform that provides real-time and near-real-time data for US stocks, exchange-traded funds (ETFs), precious metals (gold, silver, platinum, palladium), and US retail fuel prices — together with free educational financial calculators.

This Privacy Policy (“Policy”) describes how we collect, use, disclose, retain, and protect information about you when you visit or use the Service. Please read this Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Policy. If you do not agree, please do not use the Service.

Privacy contact: privacy@whatsupprice.com

2. Scope of This Policy

This Policy applies to all visitors and users of www.whatsupprice.com regardless of where you are located. It covers:

• Personal information collected when you visit the Site;
• Information you voluntarily provide when signing up for price alerts;
• Data automatically collected through our infrastructure, analytics services, and cookies; and
• Your rights with respect to your personal information under applicable law.

This Policy does not apply to third-party websites or services linked from our Site. Those services are governed by their own privacy policies.

3. Personal Information We Collect

3.1 Information You Voluntarily Provide

We collect information you provide directly to us. Currently, the only way we collect personal information directly from you is through our price alert subscription feature:

• Email address — used solely to deliver the price alert notifications you request.
• Alert parameters — the asset ticker symbol, target price, and alert direction (above/below) you configure. These are operational data necessary to provide the alert service.

We do not create user accounts, collect passwords, store payment or financial account information, collect Social Security numbers or government identifiers, or collect sensitive personal information as defined under applicable law.

3.2 Automatically Collected Information

When you visit the Site, certain information is collected automatically by our infrastructure and analytics services.

(a) Google Analytics 4 (“GA4”)

We use Google Analytics 4, operated by Google LLC, to measure Site engagement and improve the Service. GA4 automatically collects and transmits to Google servers the following categories of data:

• Device & browser information — device category (desktop, mobile, tablet), operating system and version, browser type and version, screen resolution, and device language preference.
• Approximate geographic location — country, region (state/province), and city, inferred from your IP address. GA4 does not store your full IP address after geographic inference; the IP is used only to determine approximate location and is then discarded by Google.
• Session and navigation data — pages viewed, navigation paths within the Site, entry and exit pages, session duration, engagement time per page, and scroll depth.
• Referral and acquisition data — the URL of the website or search engine that referred you to our Site, and any UTM campaign parameters present in the URL.
• Interaction events — link clicks, button interactions, and other engagement events that GA4 tracks automatically.
• Visit history — first visit date, most recent visit date, and total session count.

GA4 uses cookies and client identifiers (described in Section 7) to attribute events to sessions. All GA4 data is subject to Google's Privacy Policy.

(b) Cloudflare Edge Network

Our Site is hosted and served through Cloudflare Workers, a cloud computing and CDN platform operated by Cloudflare, Inc. As a standard function of CDN routing, security, and DDoS mitigation, Cloudflare automatically logs:

• Your IP address and approximate geographic location derived therefrom.
• HTTP request data — the URL requested, HTTP method, and response status code.
• Request headers — User-Agent string (browser and device identifier), Accept-Language, and Referer header.
• Timestamp of each request.
• A Cloudflare-assigned Ray ID used for debugging and incident response.

Cloudflare logs are used for security, attack mitigation, and performance purposes. They are subject to Cloudflare's Privacy Policy.

3.3 Information We Do Not Collect

To be explicit, WhatsUpPrice does not:

• Create user accounts or collect passwords.
• Collect, process, or store payment card numbers, bank account information, or any financial account credentials.
• Collect government-issued identification numbers (Social Security Number, passport, or driver's license number).
• Collect health, medical, or biometric data.
• Collect precise real-time GPS coordinates.
• Build individual user behavioral profiles for our own cross-context advertising purposes.
• Purchase or receive personal information about you from third-party data brokers or data marketplaces.

4. How We Collect Your Information

We collect information through the following means:

• Directly from you — when you submit a price alert subscription form or contact us by email.
• Automatically via cookies and tracking technologies — when you visit the Site, our analytics service and advertising partners place cookies in your browser. See Section 7 for details.
• Automatically via server and edge logs — our hosting infrastructure (Cloudflare) records technical request data as a standard function of web delivery and security.
• From third-party services — if you arrive at our Site via a social sharing button or referral link, the referral source may be captured by analytics tools.

5. How We Use Your Information

We use the information we collect for the following purposes. For users subject to the GDPR, the applicable legal basis for each purpose is noted in brackets.

• To provide the Service — delivering price alert emails you request; operating, maintaining, and improving the Site. [Contract / Legitimate Interest]
• To analyze and improve the Service — using aggregated and de-identified analytics data to understand how visitors use the Site, identify popular features, and prioritize improvements. [Legitimate Interest]
• To serve advertising — displaying interest-based and contextual advertisements through Google AdSense and/or Mediavine. Advertising cookies may be used subject to your consent where required. [Consent / Legitimate Interest]
• To ensure security and prevent abuse — detecting, investigating, and preventing fraudulent activity, unauthorized access, and other illegal activities; protecting the rights and safety of users and the public. [Legitimate Interest]
• To comply with legal obligations — responding to lawful requests from courts, regulators, and law enforcement; fulfilling duties under applicable law. [Legal Obligation]
• For service communications — notifying price alert subscribers of material changes to this Policy or our Terms of Service. [Legitimate Interest / Contract]

We will not use your personal information for any purpose materially inconsistent with those described above without providing you with additional notice and, where required, obtaining your consent.

6. Disclosure and Sharing of Your Information

We do not sell, rent, trade, or otherwise disclose your personal information to third parties except in the following circumstances:

• Service providers (data processors) — We engage vendors who perform functions on our behalf (database hosting, email delivery, analytics). These processors are contractually obligated to process your data only as instructed and to implement appropriate security measures. See Section 9 for a complete list.
• Advertising partners — Our advertising networks (Google AdSense, Mediavine) may receive data about your visit via cookies and tracking pixels to display personalized or contextual advertisements. See Section 7.2 for opt-out options.
• Legal process and protection — We may disclose your information when required by law or in good-faith belief that such action is necessary to: (i) comply with a legal obligation, court order, or valid legal process; (ii) protect and defend our rights or property; (iii) investigate or prevent wrongdoing; or (iv) protect the personal safety of users of the Service or the public.
• Business transfers — If WhatsUpPrice undergoes a merger, acquisition, reorganization, or sale of all or substantially all assets, your information may be transferred as part of that transaction. We will notify you via a prominent notice on the Site at least 30 days before any such transfer and before any materially different privacy policy takes effect.
• With your consent — We may share your information for any other purpose with your prior explicit consent.

We do not sell, rent, or share your personal information with third parties for their own direct marketing purposes. We do not engage in the sale of personal information as that term is defined under the California Consumer Privacy Act (CCPA/CPRA) or similar state privacy laws.

7. Cookies and Tracking Technologies

We and our third-party service providers use cookies, web beacons, pixel tags, local storage objects, and similar technologies (collectively, “Cookies”) to operate and improve the Service and to deliver advertising.

7.1 Cookies We Use

7.2 Your Cookie Choices

• Browser settings — Most browsers allow you to refuse or delete cookies via browser settings. Disabling all cookies may impair some Site functionality.
• Google Analytics opt-out — You can prevent GA4 from collecting your data by installing the Google Analytics Opt-out Browser Add-on.
• Advertising opt-out — You may opt out of interest-based advertising via the Digital Advertising Alliance opt-out tool or the Network Advertising Initiative opt-out tool.

Under the GDPR and UK GDPR, non-essential cookies (analytics and advertising) require your explicit consent. If you are located in the EEA or the UK, a cookie consent mechanism will be presented on your first visit. You may withdraw consent at any time through your browser settings or by contacting us.

8. Calculator and Tool Data

WhatsUpPrice provides the following browser-based financial calculators: Junk Silver Calculator, Gold Gram Calculator, Stock Return Calculator, Gold/Silver Ratio Calculator, and Gas Savings Calculator.

All calculations are performed exclusively within your web browser. No input values (including quantities, prices, portfolio figures, or any other data you enter into a calculator or tool) and no calculation results are transmitted to our servers or stored in any database. This data never leaves your device. We have no access to and do not retain any calculation inputs or outputs.

9. Third-Party Service Providers

We engage the following third-party service providers in connection with operating the Service. Each is subject to its own privacy practices, linked below where applicable:

10. Data Security

We implement reasonable and appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction, including:

• Encryption in transit — all data transmitted between your browser and our servers is encrypted via TLS (HTTPS).
• Edge security — Cloudflare provides DDoS protection, web application firewall (WAF), and bot mitigation at the network edge.
• Encryption at rest — data stored in Supabase is encrypted at rest using industry-standard AES-256 encryption.
• Access controls — access to databases and systems holding personal data is restricted to authorized personnel on a need-to-know basis and protected by multi-factor authentication.
• Data minimization — we collect only the personal information necessary to provide the Service.

No method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable protections, we cannot guarantee absolute security. If you believe your personal information may have been compromised, please contact us immediately at privacy@whatsupprice.com.

11. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this Policy, or as required by applicable law:

• Price alert email addresses and parameters — retained until you unsubscribe or submit a deletion request. Upon a verified request, we will delete your data within 30 days.
• Google Analytics data— retained for 14 months from the date of collection, per Google's default retention settings. You may request deletion via Google's opt-out tools or by contacting us.
• Cloudflare edge logs — retained for up to 30 days by Cloudflare as part of standard CDN operations, after which they are automatically purged.
• Email correspondence — emails you send us are retained for up to 3 years for record-keeping and legal purposes.

When retention periods expire, we securely delete or anonymize personal information such that it can no longer be linked to an identifiable individual.

12. No Sale of Personal Information

WhatsUpPrice does notsell, rent, trade, or otherwise transfer your personal information to third parties for monetary or other valuable consideration. We do not engage in the “selling” or “sharing” of personal information as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA) or any other applicable state privacy law.

We do not share your personal information with third parties for the purpose of cross-context behavioral advertising, except solely through advertising cookies deployed by Google AdSense and/or Mediavine — which you may opt out of at any time as described in Section 7.2.

13. Age Restrictions — Service Not Available to Minors

The Service is intended solely for users who are 18 years of age or older (or the applicable age of majority in your jurisdiction, if higher). The Service is not directed to, and may not be used by, any individual under the age of 18.

By using the Service, you represent and warrant that you are at least 18 years old. We do not knowingly collect, use, or disclose personal information from individuals under 18 years of age. If we learn that we have inadvertently collected personal information from a person under 18, we will promptly delete that information from our records.

If you are a parent or legal guardian and believe your child under 18 has provided us with personal information without your consent, please contact us immediately at privacy@whatsupprice.com. We comply with the Children's Online Privacy Protection Act (COPPA) with respect to users under 13, and additionally extend our age restriction to all users under 18, as financial information services are not appropriate for minors.

14. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

• Right to Access / Know — Request a copy of the personal information we hold about you, including categories of data, purposes of use, and third parties with whom it is shared.
• Right to Correction / Rectification — Request correction of inaccurate or incomplete personal information.
• Right to Deletion / Erasure — Request deletion of your personal information, subject to legal retention obligations.
• Right to Restrict Processing — Request that we limit the ways we use your personal information in certain circumstances.
• Right to Data Portability — Where technically feasible, request a copy of your personal information in a structured, machine-readable format.
• Right to Withdraw Consent — Where processing is based on your consent, withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Opt-Out of Sale/Sharing — As noted in Section 12, we do not sell personal information. To opt out of advertising cookies, see Section 7.2.
• Right to Non-Discrimination — We will not discriminate against you for exercising any privacy right.

To exercise any of these rights, submit a request to privacy@whatsupprice.com with the subject line “Privacy Rights Request.” We will respond to verified requests within the timeframes required by applicable law (generally 30–45 days). We may ask you to verify your identity before processing your request.

15. United States — State Privacy Rights

15.1 California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you the following rights:

• Right to Know — Right to know the categories and specific pieces of personal information we have collected, the sources, our business or commercial purposes, and third parties with whom we share information.
• Right to Delete — Right to request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct — Right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing— We do not sell personal information. To opt out of advertising cookies that may constitute “sharing” under CPRA, see Section 7.2.
• Right to Limit Use of Sensitive Personal Information — We do not collect sensitive personal information as defined under CPRA.
• Right to Non-Discrimination — We will not deny service, charge higher prices, or provide a lower quality of service because you exercised a CCPA/CPRA right.

To submit a CCPA/CPRA request, contact privacy@whatsupprice.com with subject line “California Privacy Request.” We respond within 45 days (extendable by 45 days with notice). Authorized agent requests require a signed written authorization.

15.2 Virginia, Colorado, Connecticut, and Texas Residents

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Texas (TDPSA) have rights substantially similar to those described in Section 14, including the rights to access, correct, delete, opt-out of targeted advertising, and data portability. To exercise these rights, contact privacy@whatsupprice.com. If we deny your request, you may appeal in writing to the same address; we will respond within 60 days of receipt.

15.3 Other US State Laws

Additional US state privacy laws are taking effect on an ongoing basis. We endeavor to comply with all applicable state privacy laws. If you are a resident of a US state not listed above and believe you have privacy rights under your state's law, please contact privacy@whatsupprice.com and we will review your request.

16. European Union / EEA — GDPR Rights

If you are located in the European Economic Area (EEA), the United Kingdom (“UK”), or Switzerland, the General Data Protection Regulation (GDPR) — or equivalent local legislation — applies to our processing of your personal data.

16.1 Lawful Bases for Processing

• Contract (Art. 6(1)(b)) — Processing your email address to deliver price alerts you have requested.
• Legitimate Interests (Art. 6(1)(f)) — Processing anonymized analytics data to improve the Service and ensure network security, where such interests are not overridden by your fundamental rights.
• Consent (Art. 6(1)(a)) — Placing non-essential cookies (analytics, advertising) on your device. You may withdraw consent at any time.
• Legal Obligation (Art. 6(1)(c)) — Processing required to comply with applicable EU or Member State law.

16.2 Your GDPR Rights

• Right of access (Art. 15);
• Right to rectification (Art. 16);
• Right to erasure (“right to be forgotten”) (Art. 17);
• Right to restriction of processing (Art. 18);
• Right to data portability (Art. 20);
• Right to object (Art. 21) — including to processing based on legitimate interests;
• Right not to be subject to solely automated decision-making (Art. 22). We do not engage in automated decision-making with legal or similarly significant effects.
• Right to lodge a complaint with your national supervisory authority (e.g., your national Data Protection Authority).

16.3 International Data Transfers (EEA)

Your personal data may be transferred to and processed in the United States, which the European Commission has not recognized as providing an adequate level of data protection equivalent to the EEA. Where we transfer personal data outside the EEA, we rely on:

• EU Standard Contractual Clauses (SCCs) — approved by the European Commission — incorporated in our agreements with Supabase, Inc. and Cloudflare, Inc.
• Adequacy decisions — where applicable, where the relevant country has been granted an adequacy determination by the European Commission.

To request a copy of the applicable transfer safeguards, contact privacy@whatsupprice.com.

17. Canadian Residents — PIPEDA

If you are a resident of Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) — or applicable provincial privacy legislation — governs our handling of your personal information.

Under PIPEDA, you have the right to:

• Access the personal information we hold about you and receive an explanation of how it has been used or disclosed;
• Correct inaccuracies in your personal information;
• Withdraw consent to the collection, use, or disclosure of your personal information (subject to legal and contractual restrictions and reasonable notice); and
• Lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca.

We collect, use, and disclose personal information only with your knowledge and consent, except where otherwise permitted or required by law. Our lawful basis for collecting your email address for price alerts is your express consent at the time of subscription. To exercise your PIPEDA rights, contact privacy@whatsupprice.com with subject line “Canadian Privacy Request.” We respond within 30 days.

18. International Data Transfers

WhatsUpPrice is based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored in, and processed in the United States and in other jurisdictions where our service providers operate, including within the European Union via Cloudflare's and Supabase's global data center network.

The data protection laws of the United States and other jurisdictions may differ from those in your country. By using the Service, you consent to the transfer of your information to these countries in accordance with this Policy. Residents of the EEA and Canada should refer to Sections 16 and 17 respectively for applicable transfer safeguards and rights.

19. Third-Party Links and Websites

The Service may contain links to third-party websites, platforms, or services not owned or controlled by WhatsUpPrice. This Policy applies only to our Service. We have no control over, and assume no responsibility for, the content, privacy policies, data practices, or security of any third-party site or service. We encourage you to review the privacy policy of any third-party site you visit before providing personal information.

20. Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons. When we make material changes, we will:

• Update the “Last Updated” date at the top of this page;
• Notify price alert subscribers by email at least 15 days before the revised Policy becomes effective, for material changes; and
• Post a notice on the Site.

Your continued use of the Service after the effective date of the revised Policy constitutes your acceptance of the changes. If you do not agree, you must discontinue use of the Service and, if applicable, unsubscribe from price alerts.

21. Contact Us

For privacy-related requests, questions, concerns, or complaints regarding this Policy or our data practices, please contact us:

This Privacy Policy was last reviewed and updated on April 19, 2026. Nothing in this Privacy Policy constitutes legal advice. We recommend consulting a qualified data privacy attorney for jurisdiction-specific compliance guidance.