Privacy and cookie policy
Last updated: 24 October 2026
This policy explains what personal data oilprices.io processes, why, for how long, who receives it, and what rights you have. It applies to everyone who visits oilprices.io or contacts us about it. It is written to meet the EU General Data Protection Regulation (GDPR), the UK GDPR, the Swiss Federal Act on Data Protection, the Polish Electronic Communications Law (Prawo komunikacji elektronicznej), the California Consumer Privacy Act as amended by the CPRA (CCPA), the California Online Privacy Protection Act (CalOPPA) and similar US state laws.
1. Who is responsible for your data
The controller (in California terms, the business) is Nicholas Ralph, ul. Kolista 85, 43-300 Bielsko-Biała, Poland. Email: hello@oilprices.io.
We have not appointed a data protection officer because the law does not require one for this site. For any question about this policy or your data, email us at the address above.
2. What we process, why, and on what legal basis
This site has no accounts, sign-ups, comments, newsletters, forms or payments, and we do not use analytics. We do not ask for your name, address, phone number or payment details. Personal data is processed only in the four situations below.
a) Delivering the website
When you open the site, your browser sends technical data to our hosting provider, GitHub: your IP address, browser type, the page requested and the time. This is needed to deliver the page and to protect the service against abuse. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). GitHub processes these server logs under its own privacy statement, which also sets how long they are kept. We do not receive or see these logs.
b) Live prices and charts (TradingView)
The live prices and the price chart are widgets provided by TradingView, Inc. To show them, your browser loads them directly from TradingView's servers. TradingView receives your IP address, browser and device information, and the address of this page, and may use cookies or similar storage on its own domain to run the widgets. Legal basis: our legitimate interest in showing you the prices you came to the site for (Art. 6(1)(f) GDPR). For storage on your device, the basis is that it is needed to provide the content you asked for (art. 399(3) of the Polish Electronic Communications Law). TradingView handles this data under its own privacy policy and cookies policy.
c) Advertising (Google AdSense)
The site is funded by ads served by Google. Google and its advertising partners may store and read cookies and similar identifiers on your device. They may also process your IP address, device and browser information, approximate location derived from your IP address, and your activity on this site. They use this to show ads, measure ad performance, prevent fraud and, where allowed, personalise ads based on inferred interests.
In the EEA, the UK and Switzerland, advertising cookies are used only with your consent (Art. 6(1)(a) GDPR and art. 399 of the Polish Electronic Communications Law). If you do not consent, Google may still show non-personalised ads, using limited data to deliver them and prevent fraud. For visitors from US states, see section 9.
Google acts as an independent controller of this data. See how Google uses information from sites that use its services, its privacy policy, and the list of advertising partners shown in the consent message.
d) Emails you send us
If you write to us, we process your email address, your name if you give it, your message and any information you choose to include, so we can reply. Legal basis: our legitimate interest in answering you (Art. 6(1)(f) GDPR). Where the email is a request about your rights, the basis is our legal obligation to handle it (Art. 6(1)(c) GDPR). Mail to hello@oilprices.io is forwarded by our domain provider, Namecheap, to a mailbox provided by Google.
Please do not send us sensitive information, such as health or financial details, or personal data about other people.
Legitimate interests
Where we rely on legitimate interests, we have checked that they are not overridden by your interests, rights and freedoms. You can ask us for details of this assessment, and you can object at any time (section 8).
Automated decisions and profiling
We make no decisions about you by automated means. The only profiling is ad personalisation by Google and its partners, and only with your consent in the EEA, UK and Switzerland. It has no legal or similarly significant effect on you.
Use for other purposes
We use personal data only for the purposes above. If we ever need to use it for a new purpose, we will update this policy first and, where the law requires it, ask for your consent.
3. Cookies and similar technologies
We do not set any cookies of our own. Fonts and site files are served from our own domain, so the site does not use Google Fonts. The third parties your browser connects to are TradingView (section 2b) and, for ads, Google and its partners (section 2c). If you opt out of sale and sharing (section 9), we save that choice in your browser's local storage, only so we can respect it.
Visitors in the EEA, the UK and Switzerland see a consent message before any advertising cookies are set. You can accept, refuse or choose individual purposes and partners, and refusing does not limit your access to the site. Google's advertising cookies (for example IDE) last up to 13 months in these regions, and your consent choice is stored for up to 13 months.
You can change or withdraw your consent at any time using the Privacy and cookie settings link at the bottom of every page. Withdrawing consent does not affect processing that took place before.
You can also block or delete cookies in your browser settings. The help pages of Chrome, Firefox, Safari and Edge explain how. The prices and chart keep working, but blocking TradingView's content would stop them from loading.
For more control over interest-based ads, you can use Google's ad settings, Your Online Choices (EU), the Network Advertising Initiative opt-out and the Digital Advertising Alliance opt-out (US).
4. Who receives your data
- GitHub, Inc.: website hosting
- TradingView, Inc.: live prices and charts
- Google Ireland Limited and Google LLC: advertising, and our email mailbox
- Namecheap, Inc.: domain and email forwarding
- Advertising partners you allow in the consent message
We do not sell personal data for money. We will also disclose personal data:
- when the law requires it, for example to a court or public authority with a valid legal request
- when it is needed to establish, exercise or defend legal claims
- to a new owner if the site is sold or transferred, who must then follow this policy or tell you about any changes
5. Transfers outside the European Economic Area
GitHub, TradingView, Google and Namecheap may process data in the United States. These transfers rely on the EU–US Data Privacy Framework (and its UK and Swiss extensions) where the recipient is certified under it, or on the European Commission's standard contractual clauses. You can ask us for more information about these safeguards.
6. How long we keep data
- Server logs: as set by GitHub; we do not keep them.
- TradingView and Google data: as set out in their policies; Google's ad cookies last up to 13 months in the EEA, UK and Switzerland.
- Your consent choice: up to 13 months, then you are asked again.
- Your opt-out choice in local storage: until you clear your browser data or opt back in.
- Emails: up to 12 months after the conversation ends, or longer only if needed for legal claims or to show how we handled a rights request.
7. Security
The site is served only over HTTPS. We hold no user accounts or databases, and we keep no personal data on our own systems except emails you send us, which sit in a mailbox protected by two-step verification. No system is completely secure. If a data breach is likely to put your rights at risk, we will tell the data protection authority and, where required, you.
8. Your rights in the EEA, UK and Switzerland
You have the right to:
- be told whether we process your personal data, and get access to it and a copy of it
- have it corrected if it is wrong or incomplete
- have it deleted
- restrict how it is processed
- receive it in a portable format, where processing is based on consent or a contract
- object at any time to processing based on our legitimate interest
- withdraw consent at any time, without affecting earlier processing
To use these rights, email hello@oilprices.io. It is free. We may charge a reasonable fee or refuse only if a request is clearly unfounded or excessive. We may ask for information to confirm it is you. We reply within one month; if a request is complex, we may extend this by up to two more months and will tell you why.
We hold almost no data that identifies you directly. For advertising data held by Google or data held by TradingView, those companies can also act on your request through their own tools.
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or to the authority in the EU country where you live or work. In the UK, that is the Information Commissioner's Office. In Switzerland, it is the Federal Data Protection and Information Commissioner.
9. California and other US state privacy rights
This section is the notice at collection and privacy policy required by the CCPA. It also covers residents of other US states with similar laws.
Personal information we collect
In the last 12 months we have collected the following categories, all directly from your browser or device, or from you if you email us:
- Identifiers: IP address, cookie and device identifiers, and your email address if you write to us
- Internet or network activity: pages viewed and interactions with ads and widgets on this site
- Approximate geolocation: city or region derived from your IP address
- Inferences: ad interests that Google may infer to personalise ads
We do not collect sensitive personal information. We use these categories to deliver and secure the site, show live prices, show and measure ads, prevent fraud and reply to messages. Retention is described in section 6. The categories of third parties that receive them are our hosting provider, our live-price provider, our email provider, and Google and its advertising partners.
Sale and sharing
We do not sell personal information for money. However, letting Google and its partners use cookies for personalised advertising can count as "sharing" (cross-context behavioural advertising), and possibly "selling", under the CCPA. In the last 12 months, identifiers, internet activity and inferences may have been shared with advertising partners in this way.
For visitors from US states with privacy laws, we have instructed Google to apply restricted data processing, so only non-personalised ads are served and Google does not build ad profiles from your visit. You can also opt out yourself:
Checking your opt-out status…
Your choice is stored in this browser only. If you clear your browser data or use another browser, opt out again there, or turn on Global Privacy Control.
Global Privacy Control and Do Not Track
We treat a Global Privacy Control (GPC) signal from your browser as a valid request to opt out of the sale and sharing of personal information. When we detect it, we request only non-personalised ads and show "Opt-out request honored" at the bottom of the page. Browsers' older "Do Not Track" setting has no common standard, so we do not respond to it separately; use GPC instead. Unless you opt out, Google and its advertising partners may collect information about your activity across websites over time when you visit this site.
Your rights
Depending on your state, you have the right to:
- know what personal information we have collected about you, its sources, purposes and recipients, and get a copy
- have it deleted or corrected
- opt out of its sale or sharing, and of targeted advertising
- not be treated differently for using any of these rights
Because we use no sensitive personal information, the right to limit its use does not apply. To make a request, email hello@oilprices.io, or use the opt-out above. An authorised agent may act for you if you give them signed permission.
To verify a request we may ask only for details that link you to the data, such as the email address you wrote from. We confirm requests within 10 business days and respond within 45 days. If we refuse a request, you can appeal by replying to our answer, and we will respond within the time your state's law requires.
We do not offer financial incentives for personal information. We do not knowingly sell or share personal information of consumers under 16.
10. Children
This site is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, email us and we will delete it.
11. Do you have to give us data?
No. Technical data in sections 2a and 2b is needed to load the page and its prices. Consent to advertising cookies is optional, and you can use the whole site without it. Emailing us is voluntary.
12. Changes to this policy
We will update this policy when the way the site processes data changes, and review it at least once every 12 months as California law requires. The date at the top shows the latest version. If we make a significant change, we will also show a notice on the home page.