Last updated 19 Oct 2026
Privacy policy
What rasinbunlover keeps when you make an account, why, for how long, and who to ask about it.
You can read every page without an account. If you make one, we keep your name, your email and a scrambled version of your password so you can log in. We don't sell it, we don't send marketing unless you opt in, and deleting your account removes it.
Who we are
rasinbunlover runs rasinbunlover.com, a Singapore site that explains markets and personal finance. This policy explains how we handle personal data under Singapore's Personal Data Protection Act 2012 (PDPA).
What we collect for accounts
Nothing, until you create an account. When you do, we keep the following in a Cloudflare D1 database, along with the date you joined.
- Name
What you type when you sign up, or the name on your Google account.
Why: To show on your account page.
- Email address
Plus whether you have confirmed it.
Why: To log you in, check the address is yours and send password reset links.
- Password
Stored only as a one-way hash, never as you typed it. We can't see or recover it.
Why: To check it's you when you log in.
- Google profile
Only if you sign in with Google: your name, profile picture, Google account ID and the sign-in tokens Google issues.
Why: To link your Google account and log you in with it.
- Session details
Your IP address and browser user-agent, saved with each logged-in session.
Why: To keep you logged in, spot sign-ins that don't look like you, and log you out everywhere after a password reset.
We don't ask for payment details, NRIC numbers or what you own, and the site runs no analytics or advertising scripts.
What we use it for
Only to run your account: logging in, confirming your email, resetting your password and keeping the account secure. We don't sell your data, share it for advertising, or use it to tailor financial content to you.
Emails
Account emails are transactional only: the link to confirm your address and password reset links. A newsletter or any other marketing email would need a separate opt-in that you choose yourself. Making an account doesn't count as one.
How long we keep it
Until you delete your account at your account page. Deleting removes your details, your sessions and any linked Google sign-in straight away. Cloudflare's database restore history can hold a copy for up to 30 days before it ages out.
Confirmation and reset links stop working after an hour. A session ends when you log out, or after seven days without a visit.
Cookies and browser storage
No advertising or tracking cookies. Here is everything the site keeps in your browser.
- Session cookie
One httpOnly cookie, so scripts on the page can't read it. Set when you log in and cleared when you log out.
- Google sign-in check
A short-lived cookie during Google sign-in, to confirm the round trip to Google started here.
- Light or dark mode
Your choice from the header toggle, kept in your browser's localStorage.
- The Board watchlist
The tickers you add, kept in localStorage. It stays in your browser and is never sent to us.
- Signed-in hint
A localStorage flag so the header shows the right button before the page finishes loading. It says nothing about who you are.
Clearing this site's data in your browser removes all of it.
Who else handles it
These providers process data for us. Some of them may store it outside Singapore, under their own data protection terms.
- Cloudflare
Hosts the site and the D1 database. Every request, including your IP address, passes through its network.
- Resend
Will send account emails once email goes live. It sees your email address and the message.
Only if you choose Google sign-in. Google's own privacy policy covers what happens on its side.
Your choices
You can see your details and delete your account at your account page. To ask what we hold about you, correct something, or withdraw consent, email our Data Protection Officer. We aim to reply within 30 days.
Data Protection Officer
- Name
- [Data Protection Officer's name]
- [DPO email address]
Changes
When this policy changes, the date at the top changes with it. If a change affects how we use your account data, we'll tell account holders by email first.