Privacy Policy

What we collect

• Account info. When you create an account, we store your email address and name (or your Google account's public profile info if you sign in with Google) via Supabase Auth. Your password is hashed by Supabase and never visible to us.
• Saved alerts. Gas thresholds you save are kept in your browser's local storage. They do not leave your device unless you trigger a confirmation email, in which case the email address and threshold are sent to our server and immediately handed to our email provider.
• Anonymous usage events. We log lightweight in-app events (page views, button clicks like “Create Alert” or “Copy widget code”) so we can understand which surfaces are useful. These do not include your email or any personally identifying detail.
• Server logs. Standard request logs (timestamp, request path, response code, the recipient's email domain only when an alert email is sent). We deliberately redact the local part of email addresses before logging.

How we use it

• To authenticate you and keep you signed in across visits.
• To send transactional emails you ask for — e.g., a confirmation when you save an alert, or a password-reset link when you request one.
• To diagnose outages and improve the product based on aggregate usage patterns.

We do not sell your data. We do not show ads. We do not share your information with third parties for marketing purposes.

Third-party services

We rely on a small set of providers to operate the product. Each one only sees the minimum data required for its job:

• Supabase — authentication, session storage, optional gas-price history.
• Resend — transactional email (confirmations, password resets, alert notifications).
• CoinGecko, Etherscan, public Ethereum RPC endpoints — read-only public market and chain data. These providers receive only the requests our servers make on your behalf; they do not receive any account information.
• Google — only if you choose to sign in with Google. Standard OAuth applies; we receive your name, email, and Google account ID.

Cookies and local storage

We set a small number of cookies, all functional:

• Supabase session cookies for keeping you signed in.
• A short-lived auth_success cookie used briefly during the OAuth callback flow.

Saved alerts live in your browser's localStorage under gfp_saved_alerts_v1. Clearing your browser data removes them.

Your rights

• Access. Sign in to view your account email and saved alerts.
• Correction. Update your account info via Google profile settings or by contacting us.
• Deletion. Email us to request account deletion. Saved alerts can be removed at any time directly from the Alerts page.
• Opt-out of email. Stop saving alerts (or delete existing ones) and we'll stop emailing you.

Data retention

Account records persist until you ask us to delete them. Aggregate usage events are kept for up to 90 days. Server access logs are typically rotated within 30 days.

Children

Gas Fee Predictor is not directed at children under 13, and we do not knowingly collect information from them.

Changes to this policy

We may update this policy as the product evolves. The “Last updated” date at the top will reflect any change. Material changes that affect how we handle your data will be highlighted in-app or by email.

Contact

Questions, requests, or concerns: reach out via the contact page.