Privacy & your data

What sign-in shares

Signing in with Google gives Wheats your Google account identifier, verified email address and display name. We use these to create and recognise your Wheats account. We also record when your account was created and when you last signed in. We do not receive your Google password or request access to Gmail, Google Drive or your contacts.

How your account is stored

Account information and login sessions are stored using Cloudflare D1. Google verifies your identity; Cloudflare hosts Wheats and processes requests to deliver and protect the service. The account database is configured with a Western Europe location preference. This is a hosting preference, not a guarantee that all service processing stays in that region.

We do not sell your Google account data or use it for advertising. Paid subscriptions and email delivery are not open yet. Membership status and your explicitly chosen email preferences are stored with your account.

Cookies and browser storage

Wheats uses an essential, secure session cookie to keep you signed in for up to seven days, plus a short-lived sign-in cookie lasting up to ten minutes. These cookies cannot be read by page scripts. Google’s sign-in service loads when you open the sign-in dialog and operates under Google’s privacy policy.

Your saved market watchlist is stored with your account. Previous versions stored selections only in browser storage; those older selections are not uploaded automatically. Scenario assumptions reset when the page reloads.

Email, membership and support

Signing in does not subscribe you to email. If you opt in, we store the selected editions, time of consent and delivery status. When email delivery launches, your account email and briefing content will be processed by Resend to send the editions you chose. Each message includes an unsubscribe link. Unsubscribe tokens only turn email off and cannot sign in to your account.

Support requests store your account reference, topic, message and submission time. Please avoid sensitive information. If paid subscriptions open later, payment handling, the provider, pricing and relevant data processing will be explained before checkout. Card details will not be stored by Wheats.

Retention and deletion

Your profile and preferences stay in Wheats until you delete your account. Email delivery content is cleared after sending; delivery records remain for up to 90 days. Support messages are kept for up to 180 days for follow-up and are detached from your account when it is deleted. Open Account → Delete account to remove your profile and revoke all Wheats login sessions. For security, deletion requires a sign-in within the previous ten minutes. Cloudflare recovery backups may retain deleted data for a limited period under its retention settings.

Signing out revokes the current session immediately. Expired session and sign-in records are removed during subsequent sign-in activity. Short-lived, hashed network identifiers help limit repeated authentication attempts. Cloudflare may also retain technical request logs under its service settings. We do not log Google identity tokens or session cookies.

Your choices

You can browse the atlas without an account, sign out at any time, manage your saved markets and email preferences, or delete your Wheats account. For privacy requests, use the contact form. You can also remove Wheats from your Google account’s third-party connections. Revoking that connection does not automatically delete an existing Wheats profile or active session; use the account controls above for that.

Manage Google connections · Google privacy policy · Cloudflare privacy policy