Privacy policy

PRISM Forecasting collects what it needs to run accounts, payments (through PayPal), contact messages and its own visit statistics, and Google services on the site (reCAPTCHA, Analytics, fonts and advertising where shown) set their own cookies. It does not sell personal data, and you can ask for a copy, a correction or deletion of your data through the contact form.

Last updated:

Who is responsible

This website, prismforecasting.com, is run by PRISM Forecasting. For anything about your personal data, use the contact form.

What we collect and why

When you create an account

Your name, email address and password (stored only as a one-way hash — we cannot read it), your plan, the markets you choose, your billing period, the dates your demo or plan start and end, whether you confirmed your email, and the IP address you registered from. The IP address is used to give one free demo per person and to stop abuse. We use your email to activate the account, reset a forgotten password, send receipts and plan reminders, and — if you switch them on — price-level alerts.

When you pay

Payments are handled by PayPal (including card payments made through PayPal). We receive the order or transaction ID, the amount, the plan and the payment status, and keep them as our record of the purchase. We never see or store your card number or PayPal password. PayPal's own privacy statement applies to the data you give PayPal.

When you contact us

The contact, indicator and API request forms send us your name, email, subject and message. We keep them so we can answer and follow up.

When you browse

Our own visit counter records the page you open, the time, your IP address, your browser's user-agent string, a random visitor ID kept in a cookie, a short heartbeat every 30 seconds while the page is visible (to measure time on the site), and your account name if you are signed in. We use this only for our own statistics and to spot abuse. These logs are kept until we clear them. Our hosting provider also keeps standard server logs.

Optional features

Cookies and similar storage

NameSet byPurposeKept for
PHPSESSIDthis sitekeeps you signed in and holds a checkout in progressuntil you close the browser or sign out
prism_sidthis siterandom visitor ID for our own visit statistics1 year
local storagethis siteremembers whether you dismissed the app-install prompt, and how many ads a plan with advertising has shown todayuntil you clear it
_ga, _ga_*Google Analyticsmeasures how the site is used (pages, sessions, rough location from the IP address)up to 2 years
reCAPTCHA cookiesGoogletells people from bots on the sign-in, registration and contact formsset by Google
advertising cookiesGoogle and other ad vendorsonly on pages that show ads — see belowset by the vendor

Advertising

Some plans and pages show advertising. Today the ads on the site are our own messages; when we use Google AdSense, the following applies:

Who else processes data for us

We do not sell personal data and do not share it for anyone else's marketing. Links to Facebook, Instagram and YouTube are plain links; those sites' own policies apply once you are there.

Email

Service email — activation, password resets, receipts, plan reminders and alerts you switched on — is part of the service. Occasional announcements carry a one-click unsubscribe link, and unsubscribing stops them for good without affecting service email.

How long we keep data

Account data is kept while your account exists. Purchase records are kept as long as we need them for accounting and tax. Contact messages are kept while they are useful for answering you. Visit logs: see “When you browse” above.

Android app

The consumption-only Android app uses your existing PRISM account and access. It does not offer purchases or include advertising or third-party analytics scripts. Account sessions and the website's own operational visit logs still apply. Community chat and browser push notifications are not available in this release; email alerts you have enabled remain available. The app requests no microphone, camera, location or contacts permissions.

Account deletion

Use Request account deletion from the app or any browser, even if you cannot sign in or have forgotten your password. We verify requests through the registered email before removing the account and associated personal data. We address any active renewal before completing deletion. Records needed for accounting, security or legal obligations may be retained as described above.

Your choices and rights

You can ask us for a copy of your data, to correct it or to delete your account and its data through the contact form. Depending on where you live — for example in the EU, the UK or California — you may have further rights, such as to object to processing, to restrict it, or to complain to your data-protection authority. You can block or delete cookies in your browser; the site still works, but you will have to sign in again.

Children

The site is meant for adults. It is not directed at children under 18, and we do not knowingly collect their data.

Changes

When this policy changes, the date at the top changes with it. See also the terms of use.

Questions? Contact us