The short version
- The basic dashboard works without an account and without signup.
- We do not sell your personal data.
- We use a small set of established subprocessors for authentication, payments, hosting, error monitoring, and AI analysis — listed in full below.
- You can request access to, export of, or deletion of your account data at any time.
Information we collect
Account information. If you create an account or upgrade to Pro, our authentication provider (Clerk) processes your email address, name, and login credentials. We store account identifiers and your plan/entitlement state in our database (Convex). Payment information. Subscriptions are processed by Dodo Payments, which acts as the merchant of record. Your full card details are entered with and held by the payment processor — World Monitor never receives or stores your full card number. We receive limited billing metadata (such as plan, status, country, and the last four digits) needed to manage your subscription. When you subscribe, we also attach how you first reached World Monitor (see thewm-acq cookie below) to the subscription, so we can see which channels lead to paid plans.
Usage and diagnostics. To keep the Service reliable we collect:
- Error and crash diagnostics via Sentry (e.g. error messages, stack traces, browser and device type).
- Privacy-oriented product analytics via Vercel Web Analytics, Cloudflare, and our self-hosted Umami instance (
abacus.worldmonitor.app) — used to understand traffic patterns. These are designed to avoid cross-site tracking, and where configured are cookieless. For signed-in users, Umami events also carry your account identifier, plan, and subscription status, so we can see how each plan uses the product. - Page-performance monitoring (RUM) via DebugBear on a 10% sample of page loads. It receives the page path, viewport and device pixel ratio, navigation and web-vitals timings, and the user agent, along with the IP address inherent in any web request, plus any browser errors raised on a sampled page (error messages, stack traces, and source URLs). URL query parameters are not part of its page data — the dashboard state your address bar carries (map view, time range, selected layers) is not stored with page views. A browser error report can still include the page address with its query string, so that dashboard state may appear in error data. DebugBear does not load while the address carries sign-in tokens, checkout or referral codes, or email parameters. It is used to find slow and unstable pages, not to identify or track you.
- Server and request logs via Axiom and our hosting/CDN providers (Vercel, Cloudflare), including IP address, user agent, and request metadata, retained for security and debugging.
Cookies and local storage
- Essential — authentication sessions (Clerk) and security use cookies or equivalent storage that are required for signed-in features to work.
- Preferences — dashboard settings are stored locally in your browser.
- Analytics — our analytics are designed to be privacy-friendly and, where configured, do not use tracking cookies.
- Acquisition source — one first-party cookie,
wm-acq, kept for 90 days onworldmonitor.app, records how you first arrived: the campaign tags in the link (utm_source,utm_medium,utm_campaign), the domain of the referring site (not the page), the type of page you landed on, and the date. It is sent with a checkout so the subscription records the channel. It is not shared with advertisers or used on other sites.
Data Processing Addendum
If you use the Service to process personal data and need a processor agreement, the Data Processing Addendum applies automatically — no signature required — and incorporates the EU standard contractual clauses and the UK addendum for international transfers. A countersigned copy is available on request.Subprocessors
We share personal data only with the service providers below, which process it on our behalf to run the Service. Each row says what personal data reaches that provider. The table also names the one analytics collector we host ourselves, so it can be reconciled against anything you see in a network log.
We give at least 30 days’ notice before a new subprocessor starts processing personal data, as set out in section 8 of the Data Processing Addendum.
Where your alerts go
If you connect an alert or digest channel, we transmit the alert content you asked for to the destination you chose: Telegram, Slack, Discord, a webhook URL of yours, email, or a browser push endpoint. To do that we store the identifiers that channel needs — a chat or channel id, a webhook URL, or the OAuth token you granted us — and nothing more. Those destinations are not our subprocessors: they receive your alerts because you directed them to, and what they do with the content is governed by your own relationship with them. Disconnecting a channel deletes the identifiers we hold for it.How we use information
We use the information above to operate and secure the Service, authenticate users, process subscriptions, generate AI analysis you request, communicate with you about your account, and improve reliability and performance. We rely on legitimate interests, contract performance, and — where applicable — your consent as the legal bases for this processing.Data retention
We keep account and subscription data for as long as your account is active and as needed to meet legal, tax, and security obligations. Diagnostic and log data is retained on a rolling basis for a limited period. When you delete your account, we delete or anonymize associated personal data, except where we must retain it by law.Your rights
Depending on where you live (including under the EU/UK GDPR and the California CCPA/CPRA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Signed-in users can delete their World Monitor account from Avatar → Plan & billing → Delete account by typingDELETE; see Accounts. If you cannot sign in, write from the account email to support@worldmonitor.app so we can confirm the Clerk user id. Anonymous dashboard use has no server account — clear local site data instead. To exercise any of these rights, contact us at support@worldmonitor.app. You also have the right to complain to your local data protection authority.