Privacy Policy

We collect only what we need to run AllTop and make it better.

Account information

• Email address, required for account creation and sign-in.
• Display name, if you choose to set one.
• Password hash, when you sign up with email and password. We never see or store your plaintext password.
• OAuth identifier if you sign in with Google. We do not receive your Google password.

Usage information

• Topics and sources you follow, and articles you save, hide, or dislike.
• Custom RSS feeds you add.
• Market watchlists, alerts, arbitrage scanner preferences, and other AllTop market-context settings you choose to save.
• Pages you visit within AllTop and interactions such as clicks, scrolls, and time on page.
• Device and browser information: user agent, approximate location from IP, screen size, referrer, and timestamps.

Information we do not collect

• Payment or financial data. AllTop is currently free.
• Sensitive categories of personal data such as health data, precise location, or biometrics.

• Provide core functionality: authenticate you, show followed topics and sources, keep your feed in sync, and save your market watchlists or alerts.
• Send transactional email such as email verification, password resets, and, if you opt in, daily or weekly digests. You can unsubscribe from digests at any time.
• Improve ranking quality, market matching, and product usability by analyzing aggregate behavior.
• Detect abuse, fraud, and security incidents.
• Comply with legal obligations.

AllTop may use third-party analytics tools. Each sets its own cookies and collects information governed by its own privacy policy.

• Google Tag Manager loads and configures analytics tools. Google Tag Manager itself does not collect personal data, but the tags it loads may. Google Privacy Policy.
• Google Analytics (GA4) helps us understand aggregate page views, retention, and traffic sources. We do not enable Google Signals or ad-personalization features.
• Microsoft Clarity may record anonymized session replays and heatmaps so we can see where the interface is confusing. Input fields such as email and password fields are masked by default.
• Essential cookies keep you signed in, remember your theme preference, and verify your session. These cannot be turned off without breaking the site.

Your choices. You can block analytics cookies in your browser or use an extension such as uBlock Origin or the Google Analytics Opt-out add-on. AllTop honors the Global Privacy Control signal and Do Not Track by disabling optional analytics where supported.

We do not sell your personal information. We share it only with:

• Cloudflare for CDN, edge compute, and DDoS protection. Cloudflare sees request metadata necessary to route and secure traffic.
• Google for Analytics, Tag Manager, and OAuth, as described above.
• Microsoft for Clarity, as described above.
• Email providers to deliver account and digest emails.
• Market data providers and venues only as needed to load public market data or connect saved market-context features. We do not sell your personal data to these providers.
• AI model providers when we send article headlines and short summaries to generate editorial headlines and story clusters. We do not intentionally send your personal data to these providers.
• Law enforcement if compelled by valid legal process. We will try to notify you first unless prohibited by law.
• Successors if AllTop or Pacific Tide Media is acquired, your data may transfer to the new owner, subject to this policy.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated data.
• Export your data in a portable format.
• Object to or restrict certain processing.
• Opt out of sale or sharing of personal information. We do not sell or share for cross-context behavioral advertising, but you may submit a request anyway.

To exercise any right, email [email protected] from the address associated with your account.

You can delete your AllTop account at any time, for any reason, at no cost. Go to Settings and use the Delete account option, or email [email protected] from the address associated with your account. We honor deletion requests within 30 days.

Deletion permanently removes your email, display name, password hash, follows, saved items, custom RSS feeds, market watchlists, alerts, and other data that can identify you. It is irreversible.

• Account data is kept while your account is active, then deleted within 30 days of account deletion.
• Aggregate analytics are retained for up to 14 months in Google Analytics and up to 13 months in Microsoft Clarity, after which they are deleted or anonymized by those providers.
• Backups may persist for up to 30 additional days before being overwritten.
• Security and abuse logs are retained for up to 12 months.

Our providers are primarily located in the United States. If you access AllTop from outside the U.S., your information will be transferred to and processed in the U.S. We rely on Standard Contractual Clauses and equivalent safeguards where required.

AllTop is not directed to children under 13, or under 16 in the EU/EEA, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.

We encrypt data in transit and restrict access to user data to authenticated, authorized requests. No system is perfectly secure, however, and we cannot guarantee absolute security.

We may update this policy from time to time. If we make material changes we will notify you by email or a prominent notice on the site before the changes take effect. The Last updated date above indicates the most recent revision.

Questions? Email [email protected] or write to Pacific Tide Media, Attn: Privacy, San Diego, CA, USA.