Privacy Policy

Your email address and password, held by our authentication provider; the trading rules you create and their versions; the journal of what the platform evaluated and decided on your behalf; your notifications; your licence state; and, if you connect one, the identifier and mode of your cTrader account together with the access tokens needed to reach it.

You do not need an account to join, and joining does not create one. We keep your email address and the moment it arrived, and nothing else: no name, no IP address, no referring page, no tracking identifier. The address is encrypted where it is stored, and it is stored under a keyed hash of itself, so the list cannot be read by someone who can see the storage keys.

After you have joined, the form asks which platform you trade on and which broker you use. Both are optional, both are stored only if you answer, and they are used to decide which platform the product supports next.

We will use the address to send you one email when early access opens. There is no newsletter, the list is not shared or sold, and the email carries no tracking pixel and no click tracking. Ask us and we will take your address off the list. [TO BE CONFIRMED — the email provider that will deliver that message, and the address to write to in order to be removed.]

cTrader access and refresh tokens are encrypted at rest on the server and are never sent to your browser. No part of the web application receives them and no API endpoint returns them. Disconnecting your account from the Accounts page removes them from the platform.

We do not read your broker account’s cash flow history — deposits, withdrawals, swaps and commissions are not requested, and a test in the codebase prevents that request from being added without a deliberate decision. There is no advertising or analytics tracking in the platform, and no third-party script or iframe runs on the pages you use while signed in.

Authentication and account storage are provided by Supabase. Market data and order execution go through cTrader and the broker you chose. If and when paid access is enabled, payments are processed by Stripe and card details are never stored on our servers. The early-access email, when it is sent, will be delivered by an email provider, which will see the address it is sent to. [TO BE CONFIRMED — hosting provider, data region, the email provider, and the full list of sub-processors with their locations.]

To sign you in, to run the rules you configured, to show you what the platform decided and why, and to tell whether your account is licensed. The journal exists so that a decision can be explained afterwards; that is its purpose and it is kept for that reason.

[TO BE CONFIRMED — retention periods for account data, journal entries and disconnected broker links.]

You can disconnect your broker account at any time, and you can ask to be taken off the early-access list. For access, correction, export or deletion of your data, [TO BE CONFIRMED — the rights that apply under the governing jurisdiction, and how to exercise them.]

Session cookies are used to keep you signed in. There are no advertising or tracking cookies.

[TO BE CONFIRMED — data controller name, registered address, and a contact address for privacy requests.]