Privacy notice
Accounts and Pine scripts on ByStock.
What we process
If you create an account: your email address (email / Google / Apple sign-in — with Apple, the address Apple shares, which may be a private relay address) and the name Apple shares on first sign-in, or your wallet address (legacy wallet sign-in); the text, settings and version history of the Pine scripts you save; while signed in, your chart preferences (indicators, layouts, drawings, paper account, watchlist) to sync them across your devices; creation/update times; if you connect Telegram, your Telegram chat ID and username. Without an account your scripts stay only in your browser and never reach us.
Why
To create your account and keep you signed in; to sync your scripts across devices; to share them by link when you ask. Your data is not sold or used for advertising.
Where code runs
Pine scripts run in your browser and are stored on the server as text. The only exception is Telegram alerts you turn on: if you enable “Also send to Telegram” for a script, that script runs on our server at each bar close solely to check its alert conditions. Turning the option off stops it.
Telegram alerts
If you connect Telegram, your Telegram chat ID and (if any) username are linked to your account; only the alert messages you set up are sent. Unlink on the site or by sending /stop to the bot; deleting your account also deletes the link and alerts.
Where it is stored
Account and script data are stored on Supabase infrastructure; access rules ensure each user can reach only their own scripts. The provider's servers may be located outside your country.
Sharing
If you share a script by link, anyone with the link can see its name and code and take a copy; your account details are not shown. You can stop sharing at any time. If you create a “shareable link” for a chart snapshot, the image (chart only; no e-mail or account details) is uploaded to our servers and anyone with the link can see it; deleting your account deletes your images too.
Retention
Until you delete your account. “Delete my account” permanently removes your account and all scripts.
In your browser
Your session key and local script copies are kept in your browser's local storage. Signing out ends the session.
Usage measurement
To improve the site we run simple, cookie-free measurement on our own server: a random per-tab-session ID, the page opened, exchange links clicked, events such as creating an account or an alert, and the name of the source that referred you (e.g. a utm tag in an ad link, or “x”, “google”). Your IP address, email and account ID are not written to this record; the source name is kept in your browser for 30 days and records are deleted after 180 days. If “Do Not Track” is on in your browser, nothing is sent.
Your rights
You can access, correct, delete and object to the processing of your data. Delete it yourself from the account menu or write to info@bystock.fun.
Delete your account
Website and ByStock App: account menu → “Delete my account”. Without the app or if you can't sign in: account deletion page.
Last updated: 17 October 2026 (Sign in with Apple, account deletion page)