Privacy notice
Draft. This text is being reviewed by a lawyer and may change before the service opens.
Who we are
The controller of your personal data is , . Contact: .
What we process and why
Account: your e-mail address, sign-in records and, if you turn it on, a two-step verification factor; to give you an account (contract).
Purchases and membership: what you bought, your subscription state and the Stripe customer reference; to deliver what you paid for (contract) and to keep accounting records (legal obligation). Card details are handled by Stripe only; they never reach our server.
Guides: each page of a guide you read is shown with your e-mail address and order number, so that a copy shared without permission can be traced (legitimate interest in protecting our guides). The mark is added when you open the guide and is not stored separately.
Trading Journal: the trades, notes and screenshots you enter; to provide the journal (contract). Screenshots are stored without their hidden metadata (location, device, dates). Only you can see them; the admin panel never shows journal content.
Community: if you connect Discord or Telegram, your account id there; to give or remove VIP access (contract).
Security logs: changes of access and admin actions; to protect the service (legitimate interest).
Who receives it
Supabase (database, sign-in, file storage, EU region) and our hosting provider in Germany process data for us. Stripe processes payments and is also a controller for its own fraud and legal duties. Discord and Telegram, if you connect them. TradingView, whose widgets on the Tools page receive the page address and your IP address as their own controller.
How long
Account and journal data: until you delete your account. Accounting records: for the period the law requires. Security logs: [period to be confirmed].
Your rights
You can see and download all your data at any time (Security → Download your data), correct it, and delete your account yourself (Security → Delete your account). You may object to processing based on legitimate interest and complain to the data protection authority of the EU country where you live or work, or to the Romanian authority (ANSPDCP).
Cookies
We set only the cookies needed to keep you signed in and to keep a form you were filling in. See the Cookies page.