Privacy policy
Last updated October 2026
PRISM is a small, free tool run by one person. This page says plainly what is collected, why, and for how long.
What we collect
| Data | Source | Why | Retention |
|---|---|---|---|
| Discord user ID, username, avatar hash | Discord, when you sign in | To check you're a member of the server that gives access, and show your name in PRISM | Kept in your signed session cookie. Written to the database only with an extension key you create (below). |
| Session cookie | Set after a successful Discord sign-in | Keeps you signed in; all of PRISM sits behind this one cookie | 30 days, or until you sign out |
| Sign-in state cookie | Set right before you go to Discord | Protects the sign-in against forgery, a standard OAuth safeguard | 10 minutes |
| Language cookie | Set when you choose English or French | Shows the site in your language | 1 year |
| Extension keys, only if you create one | PRISM, Tools, Extension keys | Lets the TradingView extension fetch your levels, and lets you see and revoke your keys. Stored with your Discord user ID and username, the key's name, a SHA-256 fingerprint (never the key itself) and its dates. | The key works 90 days or until you revoke it; its record (without the key) stays after that |
| Daily page-view counts | Server-side, on page load | To see whether the site gets any traffic: a count per day, per page and per kind of source (search, social, direct) | Indefinitely, but it's only numbers: no visitor ID, no IP address, no user agent |
Held briefly, never stored
Your IP address is read to limit sign-in attempts and requests to the public page's numbers. It is held in memory for about a minute and never written to disk.
PRISM keeps your display choices (horizons, alerts and their log, the module you were on) in your own browser's storage. They never leave your browser.
What we don't do
- No advertising, no ad networks, no ad cookies.
- No third-party analytics or tracking scripts (no Google Analytics, no Meta Pixel).
- No selling, renting or sharing your data with anyone.
- No email address is collected: sign-in is through Discord only.
- No payment information is collected: PRISM is free.
Third parties involved
Two, both necessary for PRISM to work:
- Discord handles the sign-in itself. We receive your user ID, username and avatar hash after you approve the connection; we never see your Discord password. See Discord's own privacy policy.
- Market data providers (Cboe delayed quotes; Yahoo Finance and London Strategic Edge for historical prices and economic releases) are read server-side to compute the levels. No personal data is sent to them.
Cookies
Every cookie this site sets is either strictly necessary (the session that keeps you signed in, a short-lived one for the Discord sign-in) or remembers a choice you made (the language). None tracks you or serves advertising, which is why there's no consent banner: there's nothing optional to accept.
Your rights
Sign out at any time (/auth/logout) to clear your session at once. Revoke your extension keys in PRISM, Tools, Extension keys; to have their records deleted as well, ask on the Discord server. Revoking PRISM's access in your Discord authorized apps settings stops any further sign-in.
Changes
If this policy changes in a way that matters, the date above moves and, for a material change, we say so on the Discord server.
Contact
Questions about this policy: ask on the Discord server.