PRIVACY POLICY

What Sonar stores and what it does not.

Information we process

We process your signed-in email address, subscription status, Stripe customer and subscription identifiers, account and policy-acceptance timestamps, and limited technical logs needed to secure and operate Sonar. When you sign in or use a protected area, Sonar records the server-observed IP address when verified by Cloudflare, browser and device information, country code, Cloudflare request identifier, timestamps, access category, and one-way correlation fingerprints. Full network details are encrypted at rest. These records enforce the one-active-session limit and help document delivery of the digital service. Chart drawings and interface preferences may be stored locally on your device.

Payments

Stripe processes weekly and monthly subscriptions and one-time lifetime-access purchases. Sonar stores limited Stripe identifiers, plan status, and weekly-offer eligibility needed to provide access, prevent repeat use of a one-time offer, and apply an eligible upgrade credit. Sonar does not receive or store your full payment-card number. Stripe’s own privacy terms apply to payment information processed by Stripe.

Learning and your journal

When you save an exercise, chart snapshot or recorded trade to your journal, Sonar stores it with your account, including your plan, notes, review, timestamps and any copied entry, exit and profit or loss details. Your journal is private to your account in the member interface; it is not automatically posted to the community. Infrastructure providers and authorized operators may process stored records to run, secure and support the service. You can remove an entry from your journal. Account journals are limited to 1,000 entries, 24 MiB total and 48 KiB per stored entry. Practice outcomes and copied records are not guarantees of future performance.

Community profiles and shared trades

If you use Social, other eligible members can see your chosen display name, profile, preset avatar and color, messages and any trade card you explicitly choose to share. Trade cards can reveal your direction, entry, exit, size and recorded net result. Check the preview before posting. We keep the private mapping between your account and profile to enforce membership and moderation. Your account email, Discord ID, API credentials, balance and unshared journal notes are not part of a public profile or trade card. Members can copy or capture content they can see; a private room cannot prevent that.

Reports and moderation records are stored for the owner’s review. Removing a community message hides its content from the normal member feed; it does not immediately erase the original stored record. We have not set an automatic deletion period for journal, community, report or linked-account records. Contact support to request eligible correction or deletion; security, dispute and legal requirements may limit deletion. See the community rules before posting.

Optional Discord connection

When enabled, connecting Discord lets Sonar read your Discord ID and username and associate them with your Sonar membership. The connection requests identity access, not your Discord messages or email. Sonar stores the link, relevant server, role and room identifiers, and synchronization status. The bot can grant or remove the dedicated member role and disconnect an ineligible member from the configured member voice room. OAuth tokens are used for the connection flow and are not saved in the membership database. Discord handles its own account, server and voice data under its privacy terms.

You can request Disconnect in Sonar even after your paid access ends. The link and removal target are retained until role removal and the required voice check succeed. Expiry and disconnect are not instantaneous: outages, rate limits and pending checks can delay them. Removing Sonar in Discord’s Authorized Apps is not the same as requesting Disconnect in Sonar and does not currently trigger automatic role removal.

Optional Prometheus connection

Where account-connected trading is available, connecting a Kalshi API key permits the configured execution service to read the account data allowed by that key and, if trading permission is granted, submit the manual orders and protective exits you request. Connection and order records may include a key identifier, account scope, balances, positions, orders, fills, fees, acknowledgements and failures. Private keys must be entered only in the dedicated connection form, never in Social, journal notes or support messages. They are not displayed to other members or included in shared trade cards.

The connection screen identifies the environment and whether the service is a local preview or hosted connection. A local preview is not evidence that unattended protection works after your computer closes. Disconnecting a service does not itself cancel every exchange order or close positions; check Kalshi directly. You can revoke a key at Kalshi. Broker privacy terms also apply to information processed there. Connecting an account does not automatically share its trades in Social or add them to your journal.

How information is used

Information is used to provide access, confirm billing status, prevent account sharing and abuse, support customers, maintain security, troubleshoot the service, investigate fraud, and prepare evidence for payment disputes or legal obligations. Sonar does not sell personal information. Raw IP addresses are not shown to customers or affiliates and are available only through an explicit owner-only evidence export.

Sharing and retention

Information may be shared with infrastructure, authentication, analytics, support, payment providers, card networks, banks, or professional advisers only as needed to operate the service, answer a payment dispute, or comply with law. Detailed network and protected-access logs are normally deleted after 180 days. Relevant records may be preserved longer when tied to an active dispute, fraud investigation, accounting requirement, or legal obligation.

Your choices

You may cancel billing through Stripe and request correction or deletion of eligible account information through the support contact on your receipt. You can change your password and end other device sessions from the account page. Some records may be retained when required for fraud prevention, accounting, disputes, or legal compliance.

Security and changes

Reasonable safeguards are used, but no online system is perfectly secure. Material policy changes will be posted here with a new effective date.