Privacy Policy
Last updated 29 October 2026
The short version. This website collects nothing at all — no cookies, no analytics, no trackers. The portfolio application, which you have to sign in to use, stores your email address and the ownership records you choose to enter. Nothing is sold, and nothing is shared with anyone except the service providers listed below who host it.
Who holds your information
MyDecimal is operated by MyDecimal LLC, Texas. Questions about this policy, or requests to see or delete your information, go to info@mydecimal.com.
This website
The page you are reading, and every other page on mydecimal.com,
collects nothing. There are no cookies, no analytics, no advertising pixels, no
embedded fonts, and no requests to any third party. There is no JavaScript on
these pages at all.
Our hosting provider records standard server logs — IP address, time, and which page was requested — as any web server does. We do not read them for marketing and cannot connect them to a person.
The portfolio application
The application at app.mydecimal.com is separate, requires
an account, and does store information.
What it stores
- Your email address, used to sign you in and to send sign-in links. There is no password to store.
- A display name, if you provide one.
- The owner entities you create — the individual, trust, estate or company through which you hold minerals — and the names you give them.
- The interests you record: decimal, interest type, product, wells or units, payor, effective and end dates, and any note you add. Nothing you enter is ever overwritten; corrections are added alongside, so the record keeps both what you first entered and what you later changed it to.
- Calculations you save: the figures you type into the interest calculator and the decimal it works out, kept against one of your owner entities and a well or unit. They are your own arithmetic; we do not check them.
- Operator-change alerts: if you have premium and a well you hold gets a new operator listed by the regulator, we email you about it from alerts.mydecimal.com, through our email provider Resend. We check twice a day and email you only when something changed, normally one email per check. Each email has an unsubscribe control, and you can turn these emails off on the Account tab.
- Wells or payors you add that are not already on file, together with what you typed and any note explaining it.
- Technical failure reports, when something in the application breaks. These deliberately record our own description of the failure and never the values involved — no decimal, no well name, no legal description. They also record which page you were on and your browser's user-agent string.
What it never stores
- Payment card or bank details. Card details are entered at Stripe and never stored by MyDecimal.
- Social security numbers or government identification numbers.
- Uploaded documents. There is no way to upload a division order or a deed.
- Your location.
What other users can see
This matters more than most of this page, so it is stated plainly.
Your interests, decimals, owner entities and notes are private to you. They are protected at the database level, not merely hidden by the interface.
Wells and companies are shared records. If you add a well or a payor that is not already on file, that well or company becomes visible to every other user, because the same well can be owned by many people. What becomes shared is the record itself — the name, the county, the API number — never your interest in it and never your decimal.
A reviewer sees submissions. When you add a well or a payor, it is queued for review. A reviewer sees what you typed, any note you attached, and your email address, so they can follow up. They do not see your interests or your decimals through that queue.
Who else processes it
We use these providers to run the service. Each holds data on our behalf and under its own terms.
- Supabase — database and sign-in. Holds everything in the list above.
- Vercel — hosting for this website and the application.
- Resend — sends sign-in emails and operator-change alert emails. Holds your email address.
- Stripe — payment processor for premium subscriptions. Holds your name, email, billing address and card details. Stripe Tax uses your billing address to work out sales tax.
- Cloudflare — domain name service and email forwarding.
Data is stored in the United States. We do not sell your information, and we do not share it for advertising. We would disclose it if legally compelled, and would tell you unless prohibited from doing so.
Well and operator records shown in the application come from the North Dakota Industrial Commission's and the Montana Board of Oil and Gas Conservation's public regulatory data. That is public information about wells, not information about you, and nothing about you is sent to them.
How long it is kept, and how to have it removed
Your records are kept for as long as your account exists.
You can do this yourself, from the application. Sign in at
app.mydecimal.com and open the Account tab.
"Download my data" gives you a copy of everything listed above, including your saved
calculations, as a file you keep. "Delete my account" — which asks you to type DELETE to confirm, because
it cannot be undone — immediately removes your interests, your saved calculations, your owner entities,
your account, and your sign-in itself.
If you would rather not sign in to do this, email info@mydecimal.com and we will do it for you within 30 days.
Payments are the exception to deletion. Stripe keeps the record of payments (name, email, card brand and last four digits, and invoices) for as long as tax and accounting law requires, and MyDecimal cannot delete it.
Backups of the service can keep a copy of data you have deleted for up to about 90 days before they are removed.
One limit worth knowing: wells and companies you contributed are shared records that other people's interests may now depend on. Deleting your account removes your interests, your owner entities and your account. It does not remove a well or company record from the shared list, because doing so would break other people's records. Those carry no information about you.
Security
Access to your records is enforced by the database itself, so a fault in the application cannot show your interests to another user. Sign-in is by emailed link or code; there is no password to be guessed or reused.
We do not claim the service is impossible to breach. No one honestly can. If information is exposed, we will tell affected users what happened and what was involved.
Children
The service is not intended for anyone under 18 and we do not knowingly collect information from children.
Your choices
You can ask us at any time to tell you what we hold about you, correct it, send you a copy, or delete it. Write to info@mydecimal.com. Depending on where you live you may have additional rights under state or national law; we will honour those requests regardless of where you live.
Changes
If this policy changes materially, the date at the top will change and we will say so on this page. Continuing to use the service after that means you accept the revised policy.