Privacy Policy

State of the Option Market ("SOTOM", "we", "us", or "our") provides charts and analytics derived from options market data. This Privacy Policy explains what information we collect when you use our website and services (the "Service"), how we use it, and the choices you have.

By using the Service, you agree to the collection and use of information as described in this policy.

Information We Collect

We collect the following categories of information:

• Account information: your email address and password (stored as a salted hash, never in plain text) when you sign up for an account.
• Session and device information: session tokens, device identifiers, IP address, and browser/user-agent details, used to keep you signed in and to detect suspicious activity.
• Billing information: if you subscribe to a paid plan, payments are processed by Stripe. We do not store your full card number; we retain limited billing metadata (such as subscription status and Stripe customer/subscription IDs) needed to manage your subscription.
• Brokerage account data: if you choose to connect a brokerage account through SnapTrade, we receive account holdings, positions, quantities, and prices from your linked account so we can display your portfolio's net delta and theta exposure. We do not receive or store your brokerage username or password; authentication happens directly between you and SnapTrade/your brokerage.
• Preferences and usage data: settings such as price or ratio alerts you configure, and general usage of the Service's pages and tools.
• Cookies and similar technologies: we use cookies to maintain your login session and to support analytics and advertising features described below.
• Analytics and advertising data: we use Vercel Analytics, Google Ads (gtag), and, where enabled, the Reddit Pixel to understand aggregate usage of the Service and measure the effectiveness of advertising campaigns.

How We Use Your Information

• To create and maintain your account and authenticate you.
• To process subscription payments and manage billing through Stripe.
• To send transactional emails, such as password reset links and alert notifications.
• To operate features you opt into, such as price and ratio alerts.
• To display your connected brokerage positions and calculate your portfolio's net delta and theta, if you choose to connect a brokerage account through SnapTrade.
• To monitor, secure, and improve the Service, including detecting fraud and abuse.
• To measure and improve advertising performance through analytics and advertising partners.
• To comply with legal obligations.

How We Share Information

We do not sell your personal information. We share information only with the following types of third parties, solely to operate the Service:

• Payment processing: Stripe, to process subscription payments and manage billing.
• Email delivery: Resend, to send transactional emails such as password resets and alerts.
• Brokerage connections: SnapTrade, to securely link your brokerage account and retrieve your account positions on your behalf, if you opt into this feature.
• Analytics and advertising: Vercel Analytics, Google, and Reddit, to measure usage and advertising performance.
• Legal and safety: when required by law, or to protect the rights, property, or safety of SOTOM, our users, or others.

Brokerage Account Connections (SnapTrade)

The optional "My Portfolio" feature lets you connect a brokerage account through SnapTrade, a third-party account aggregation provider. If you choose to connect an account:

• You are redirected to SnapTrade's Connection Portal to log in to your brokerage directly; we never see or store your brokerage username or password.
• SnapTrade issues us a credential (a "user secret") that lets our server retrieve your linked account's positions on your behalf. This credential is stored server-side only, is never sent to your browser, and is never shared with any party other than SnapTrade.
• We retrieve your account holdings, quantities, and prices to calculate net delta and theta exposure shown on the Portfolio page. We match option positions against our own historical options dataset to estimate greeks; SnapTrade does not provide greeks directly.
• You can disconnect your brokerage account at any time from the Portfolio page, which deletes your SnapTrade user and removes our local record of the connection.
• Your use of SnapTrade and any connected brokerage is also subject to SnapTrade's own privacy policy and terms, and those of your brokerage.

Data Retention

We retain account and billing information for as long as your account is active, and for a reasonable period afterward to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Session tokens and password reset tokens are time-limited and expire automatically.

Data Security

We use industry-standard measures to protect your information, including password hashing, encrypted connections (HTTPS), and access controls on our databases. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Choices and Rights

• You can review and update your account information from the Account page.
• You can cancel your subscription at any time through the billing portal linked from the Account page.
• You can disable or delete price and ratio alerts you have configured.
• You can disconnect any brokerage account linked through SnapTrade at any time from the Portfolio page.
• You can request deletion of your account and associated personal data by contacting us, subject to any records we are required to retain by law.
• You can control cookies through your browser settings, though disabling cookies may prevent you from staying signed in.

Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us through the account page or the details provided at signup.