Legal
Privacy policy
What Wave Radar (waveradar.us) collects when you visit or use it, why, which services handle it, and how long it is kept. Last updated 25 October 2026.
Who we are and how to reach us
Wave Radar is a market-research website at waveradar.us, operated by LH Buyer Technology LLC. In this policy “we” means LH Buyer Technology LLC. For any question or request about your data, email [email protected] from the address on your account, or use the feedback form inside the app when you are signed in.
What we collect
Your account
- Your email address, display name and login handle.
- Your password, stored only as a salted PBKDF2-SHA256 hash. We cannot read it.
- If you sign in with Google, the verified email address and name Google gives us. No password is created.
- Your membership tier and plan dates, and the traffic source of your first visit (for example a campaign tag such as
?s=x, or the website that linked to us).
How you use the site
When you use charts, valuation, Ask AI, portfolio or checkout features, our server records the time, the feature and ticker you asked for, your IP address, the country Cloudflare reports for it, your account if you are signed in, and how this visit arrived. We do not record your browser's user agent.
What you save
Saved charts, your watchlist and its alerts, saved screener filters, display preferences, paper-trading portfolios and orders, and feedback you send us. Ask AI keeps your 10 most recent questions on your account as history.
Payments
Stripe takes payment on its own checkout page. We receive and keep your Stripe customer and subscription IDs, your plan, the amount and currency, and the date your membership runs to. We never see or store card numbers.
Notifications and email
- If you turn on browser notifications, we store the push subscription your browser gives us (a delivery address and keys), your language and the feeds you follow.
- We email sign-up and password-reset codes, reminders to finish an unfinished sign-up, and, for members who switch them on, daily alerts for saved filters.
Cookies and browser storage
| Name | What it does | How long |
|---|---|---|
wr_session | Keeps you signed in. HttpOnly, so page scripts cannot read it. | 30 days, or until you sign out |
wr-src cookie | Remembers how this visit arrived (campaign tag or referring site). | 30 days |
Browser storage (wr-src, wr-lang, wr-theme, chart settings and similar) | Your first traffic source, language, theme and display settings. Stays in your browser. | Until you clear site data |
_ga, _ga_* | Google Analytics, described below. In the EEA, UK and Switzerland, set only after you accept. | Up to 2 years |
wr-consent (browser storage) | Remembers whether you accepted or declined analytics cookies. | Until you clear site data |
| Cloudflare | Security and bot checks at the network edge and on the sign-up step (Turnstile). | Set by Cloudflare as needed |
Analytics
- Google Analytics. We use Google Analytics 4 to see which pages are used and how people find the site. It collects a pseudonymous identifier, device and browser details, approximate location and the pages you view. We do not send your name or email to Google Analytics, and we do not use it for advertising. Visitors in the EEA, the UK and Switzerland are asked first, and Google Analytics loads only if they accept. If your browser sends Global Privacy Control, the page does not load Google Analytics at all. You can change your choice at any time in Cookie settings, or install Google's opt-out add-on.
- Cloudflare Web Analytics counts visits without cookies.
- Our own usage log, described above, shows which features are used and which channels bring visitors.
Services that handle your data
- Cloudflare delivers the site to you and runs Turnstile and Web Analytics, so it processes your IP address and requests.
- Google provides Sign in with Google and Google Analytics, and our outgoing email is sent through Google's mail servers.
- Stripe processes payments.
- OpenRouter and the AI model providers it routes to write Ask AI answers. We turn your question into a structured request (its topic and tickers) and send that, with market data, to the model. Your account details are not sent.
- TradingView supplies some embedded charts. The widget loads from TradingView and is covered by TradingView's own policy.
- Browser push services (run by your browser's maker) deliver notifications you turned on.
We do not sell your personal information and do not share it for advertising.
How long we keep it
| Data | Kept for |
|---|---|
| Your account and what you save | Until your account is deleted |
| Sign-in sessions | 30 days |
| Unfinished sign-ups | Deleted after 33 days |
| Sign-up and reset codes | 10 minutes |
| Usage log | 90 days. After that only daily visit counts by country are kept, with no IP address or account. |
| Ask AI history | Your 10 most recent questions |
| Payment records | As long as accounting and tax rules require |
| Google Analytics event data | The retention period set in our Analytics property (currently Google's default of 2 months) |
Your choices and rights
- See, correct, export or delete your data. Email [email protected] from the address on your account. We reply within 30 days. Deleting your account removes your account and what you saved (charts, watchlist, filters, preferences, paper trading, Ask AI history and notification subscriptions). Payment records we must keep for accounting stay.
- Stop notifications at any time in the app or in your browser's site settings.
- Limit analytics with Cookie settings, Global Privacy Control, Google's opt-out add-on, or by blocking cookies. The site works without analytics cookies.
- EEA and UK visitors. We rely on performing our contract with you (your account and membership), our legitimate interests (keeping the service secure and working and understanding how it is used), and your consent where the law requires it. You may object to processing based on legitimate interests and complain to your data protection authority.
- California residents. You can ask what we hold about you and ask us to delete it. We do not sell or share personal information as the CCPA defines those terms, and we will not treat you differently for using these rights.
Security
Passwords are stored only as salted hashes, the session cookie is HttpOnly and every page is served over HTTPS. No system is perfectly secure, so please use a password you do not use elsewhere.
Children
Wave Radar is not meant for children under 13, and we do not knowingly collect their data. If you believe a child has given us information, email us and we will delete it.
Changes
When this policy changes we update the date at the top. For a significant change we will also note it on the site.
隐私政策（中文）
说明你访问或使用 Wave Radar（waveradar.us）时我们收集哪些信息、用途、由哪些服务处理、保存多久。最后更新：2026 年 10 月 25 日。如中英文有出入，以英文版为准。
我们是谁、如何联系
Wave Radar 是位于 waveradar.us 的市场研究网站，由 LH Buyer Technology LLC 运营，本政策中的“我们”即指 LH Buyer Technology LLC。关于你的数据的任何问题或请求，请用账号绑定的邮箱写信到 [email protected]，或登录后在应用内的反馈表单留言。
我们收集的信息
- 账号：邮箱、显示名称、登录用户名；密码只以加盐的 PBKDF2-SHA256 哈希保存，我们无法读取。用 Google 登录时，我们取得 Google 提供的已验证邮箱和姓名，不设密码。另有会员等级、套餐日期，以及你第一次访问的来源（如推广标记
?s=x或链接过来的网站）。 - 使用记录：你使用图表、估值、Ask AI、组合或付款功能时，服务器记录时间、所用功能和股票代码、IP 地址、Cloudflare 判断的国家、登录时的账号，以及本次访问的来源。我们不记录浏览器的 User-Agent。
- 你保存的内容：保存的图表、自选股及提醒、保存的筛选条件、显示偏好、模拟交易组合和委托、你发来的反馈。Ask AI 在你的账号下保留最近 10 个问题作为历史。
- 付款：付款在 Stripe 自己的结账页面完成。我们只保存 Stripe 的客户和订阅编号、套餐、金额、币种和会员到期日，从不接触或保存卡号。
- 通知和邮件：开启浏览器通知时，我们保存浏览器提供的推送订阅（投递地址和密钥）、语言和你关注的推送类别。我们会发送注册和重置密码验证码、提醒你完成未完成的注册，以及会员自行开启的筛选条件每日提醒。
Cookie 和浏览器存储
wr_session：保持登录（HttpOnly，页面脚本无法读取），30 天或直到退出登录。wr-srcCookie：记录本次访问的来源，30 天。- 浏览器本地存储（
wr-src、wr-lang、wr-theme、图表设置等）：首次来源、语言、主题和显示设置，只存在你的浏览器里，直到你清除网站数据。 _ga、_ga_*：Google Analytics，最长 2 年；在欧洲经济区、英国和瑞士只有你同意后才会设置。wr-consent（浏览器本地存储）：记住你是否同意统计 Cookie，直到你清除网站数据。- Cloudflare：网络边缘和注册步骤（Turnstile）的安全与防机器人检查，按需设置。
统计分析
- Google Analytics：用来了解哪些页面被使用、访客从哪里来。它收集一个假名化标识、设备和浏览器信息、大致位置和你浏览的页面。我们不会把你的姓名或邮箱发给 Google Analytics，也不用于广告。来自欧洲经济区、英国和瑞士的访客会先看到同意提示，同意后才加载 Google Analytics。浏览器发送 Global Privacy Control（全局隐私控制）信号时，页面完全不加载 Google Analytics。你可以随时在 Cookie 设置 中更改选择，也可以安装 Google 的停用插件。中国大陆通常无法连接 Google Analytics。
- Cloudflare Web Analytics：不使用 Cookie 统计访问量。
- 我们自己的使用记录：见上文，用来了解功能使用情况和各推广渠道带来的访客。
处理你数据的服务
- Cloudflare：向你传送网站，并运行 Turnstile 和 Web Analytics，因此会处理你的 IP 地址和请求。
- Google：提供 Google 登录和 Google Analytics；我们的外发邮件也经由 Google 的邮件服务器发送。
- Stripe：处理付款。
- OpenRouter 及其调用的 AI 模型服务商：生成 Ask AI 的回答。我们把你的问题转换为结构化请求（主题和股票代码），连同市场数据发给模型，不发送你的账号信息。
- TradingView：部分嵌入式图表由 TradingView 提供，适用 TradingView 自己的政策。
- 浏览器推送服务（由浏览器厂商运营）：投递你开启的通知。
我们不出售你的个人信息，也不为广告目的共享。
保存期限
- 账号及你保存的内容：保留到账号删除。
- 登录会话：30 天。未完成的注册：33 天后删除。验证码：10 分钟。
- 使用记录：90 天；之后只保留按国家统计的每日访问数，不含 IP 和账号。
- Ask AI 历史：最近 10 个问题。
- 付款记录：按会计和税务要求保存。
- Google Analytics 事件数据：按我们 Analytics 属性的保留设置（目前为 Google 默认的 2 个月）。
你的选择和权利
- 查看、更正、导出或删除你的数据：用账号邮箱写信到 [email protected]，我们会在 30 天内回复。删除账号会一并删除你保存的内容（图表、自选股、筛选条件、偏好、模拟交易、Ask AI 历史和通知订阅）；依法须保留的付款记录除外。
- 关闭通知：随时在应用内或浏览器的网站设置中关闭。
- 限制统计：使用 Cookie 设置、Global Privacy Control、Google 停用插件或屏蔽 Cookie；不接受统计 Cookie 也能正常使用网站。
- 欧洲经济区和英国访客：我们的处理依据是履行与你的合同（账号和会员）、我们的正当利益（保障安全、维持服务运行、了解使用情况），以及法律要求时你的同意。你可以反对基于正当利益的处理，并向当地数据保护机构投诉。
- 加州居民：你可以要求了解或删除我们持有的你的信息。我们不按 CCPA 的定义出售或共享个人信息，也不会因你行使这些权利而区别对待你。
安全
密码只以加盐哈希保存，会话 Cookie 为 HttpOnly，所有页面均通过 HTTPS 传输。没有绝对安全的系统，请不要使用在别处用过的密码。
儿童
Wave Radar 不面向 13 岁以下儿童，我们不会有意收集他们的信息。如果你认为有儿童向我们提供了信息，请来信，我们会删除。
变更
本政策变更时，我们会更新顶部的日期；重大变更还会在网站上提示。