Privacy Policy
Last updated October 29, 2026
BigWaves.Club (“we”, “us”) runs the website bigwaves.club. This policy explains what we collect when you visit or use an account, why, who helps us process it, and the choices you have. We keep it short and specific. Questions: [email protected].
What we collect
When you create an account
- Your email address and the username you choose.
- Your password, stored only as a one-way hash; we cannot read it.
- If you sign in with Google: your email address and display name from Google. We do not receive your Google password.
- An optional profile picture, if you upload one.
- Your membership level, and short-lived tokens used to verify your email or reset your password.
When you use the site while signed in
- What you choose to post: community posts, comments, likes and links you share.
- Your saved items: bookmarks, saved tickers and watchlists, and alert settings.
When you visit any page
- Basic usage statistics: the page visited, the referring site or campaign (for example a link from X or Threads), approximate country, device type and browser language. We identify repeat visits with a one-way hash of your IP address and browser; we do not store your IP address itself. If you are signed in, the visit is linked to your account.
- Google Analytics measurement, as described under Cookies below.
We do not collect payment card details. We do not knowingly collect information from children under 13.
Why we use it
- To run your account: sign-in, email verification, password resets, and showing your saved items.
- To show the community features you use, including your posts to other members.
- To understand which pages and features are useful and how people find us, so we can improve the site.
- To keep the site secure and prevent abuse, for example rate-limiting sign-in attempts.
- To send emails you need for your account. We do not send marketing email without your consent.
We do not sell your personal information, and we do not share it for others’ advertising.
Cookies and similar storage
- Essential: your browser keeps your sign-in session, your theme and a few display preferences in local storage. These are needed for the site to work and stay on your device.
- Analytics: we use Google Analytics to measure visits. It runs unless you choose “Decline” in the cookie banner, which turns its cookies off.
- Advertising: Google Ads measurement stays off unless you choose “Accept All” in the cookie banner.
You can change your choice at any time by clearing this site’s data in your browser, which brings the banner back.
Who processes data for us
We use a small number of service providers, only to run the site:
- Cloudflare: network, security and delivery of the site, and receiving email sent to our domain.
- Google: Google sign-in (if you use it), Google Analytics and, if you accept, Google Ads measurement, and Gmail for sending account emails.
- X (Twitter): when a community post links to an X post, its preview and images are loaded from X.
Our servers are in the United States. We may disclose information if required by law, or to protect the rights and safety of our users and the site.
How long we keep it
- Account information and your saved items: for as long as your account exists.
- Posts and comments: until you delete them or your account is deleted.
- Usage statistics: kept to see trends over time; they do not contain your IP address.
Your choices and rights
- You can update your profile picture, and delete your own posts and comments, from the site.
- You can ask us to send you a copy of your data, correct it, or delete your account and the data linked to it. Email [email protected] from the address on your account; we will respond within 30 days.
- Depending on where you live (for example California or the European Economic Area), you may have further rights under local law. We honor these requests the same way, and will not treat you differently for making them.
Security
Passwords are hashed, the site is served only over HTTPS, and access to our systems is restricted. No service can promise perfect security. If we learn of a breach that affects you, we will tell you.
Changes
If we change this policy, we will update the date above, and for significant changes we will notify account holders by email or on the site.