Privacy & your data
What Breacer keeps about you, why, for how long, and who touches it. Written for the product as it runs today, not as a template.
What we keep
- Email address and session: the sign-in at accounts.breacer.com and the cookie that keeps you signed in for thirty days. Sessions can be revoked one by one on the account page.
- Display name and picture: only if you set them yourself.
- Your alerts: the sentence you typed, the condition derived from it, the last reading, and the history of readings the alert needs to judge a change.
- Channels: a Telegram chat id, a push subscription, or the webhook, Slack, Discord or ntfy address you added. Each one is there because you connected it.
- Delivery history: which alert fired when and whether it arrived, so your dashboard can show it. Kept for a year.
- Positions, measurements and sources: only if you use Wealth. Secrets for your own sources are stored encrypted and never shown again.
- Feedback and support mail: what you wrote, with your address if you gave one. Kept for a year.
- IP address, briefly: for rate limiting and to name the device in your session list. Not linked to your alerts.
Why
Solely to run Breacer Notify: checking your alerts and reaching you the moment one fires. There is no advertising, no selling of data, and no sharing beyond the processors below.
The sentence you type
A sentence on the front page goes to an AI model to be turned into an alert. It travels without your account, address or name attached; only the words. A sentence that could not be understood is kept for six months so the product can learn what people ask for.
Who processes it
- Supabase (EU): the database with everything above.
- Vercel: the servers that run the product; request logs live for one day.
- Resend: outgoing email, and the bounces and complaints that come back.
- Anthropic: the AI model that reads your sentence. Never your account.
- Stripe: payments and subscriptions. Card details never reach us.
- Telegram: only when you connect it.
- Price and data sources (CoinGecko, Coinbase, Kraken, Finnhub, frankfurter.dev, Open-Meteo and the other public sources): they see the symbol or address an alert watches, never who owns the alert.
How long
Your account and alerts stay until you delete them. Delivery history and feedback: one year. Rate-limit records: one day. Browser error reports: thirty days. Sentences that could not be understood: six months.
Your rights
Everything above is yours to take or remove, without asking anyone. The account page has a button that downloads it all as one JSON file, and a button that deletes the account with every alert, channel and record behind it. Questions and requests that the buttons do not cover go to notify@breacer.com, and a real person answers.
Security
Sessions are signed cookies that only work on breacer.com, secrets are stored as hashes or encrypted, and every address you give us is checked before we fetch or deliver to it. Reports go to security@breacer.com; the details are in security.txt.