Privacy Policy
Last updated: July 26, 2026
This Privacy Notice explains how Simple Trading Journal (operated by [Company Name], [Registration No.], [Address]) ("we", "us") collects, uses, and protects personal data when you use simpletradingjournal.online (the "Service"). We act as the data controller for the personal data described here.
1. Data we collect
- Account data: email address, display name, hashed password (or Google account identifier).
- Trading data you enter: trades, symbols, strategies, playbook rules, screenshots, notes, emotional tags.
- Usage data: pages visited, feature usage, device/browser type, IP address, approximate location.
- Support messages when you contact us.
- Payment metadata: subscription status and plan. Card details are processed by Paddle and never touch our servers.
2. Legal basis and purposes
- Contract performance: to create your account, deliver the Service, and process subscriptions.
- Legitimate interests: product improvement, fraud/abuse prevention, security monitoring.
- Legal obligation: tax records, responding to lawful requests.
- Consent: optional analytics/marketing communications; you can withdraw at any time.
3. Sharing your data
We share data only with:
- Paddle.com Market Ltd — our Merchant of Record for payments, subscription management, tax, and invoicing.
- Infrastructure providers: Cloudflare, Supabase (hosting, database, authentication), Google (Gemini AI for chart analysis, optional Google Sign-in).
- Authorities when required by law.
4. International transfers
Our providers may process data outside the EU/UK. In such cases we rely on Standard Contractual Clauses or adequacy decisions to protect your data.
5. Retention
Your account data and trading data are kept for as long as your account is active. You may delete your account at any time from Settings, after which we permanently delete personal data within 30 days, except records we must retain for legal or tax reasons (up to 7 years).
6. Your rights
Under GDPR (and equivalents) you have the right to: access, rectification, erasure, restriction, portability, objection, and to withdraw consent. You may also lodge a complaint with your data protection authority. We respond to requests within one month.
7. Security
Data is encrypted in transit (TLS) and at rest. Row-level security ensures only you can read your trades and screenshots. Access to production systems is restricted and logged.
8. Cookies
We use essential cookies (sign-in session) and minimal analytics cookies. No third-party advertising cookies. You can clear cookies in your browser at any time; the Service requires the session cookie to work.
9. Children
The Service is not intended for anyone under 18. We do not knowingly collect data from children.
10. Contact
Data controller: [Company Name], [Address]. Contact us at privacy@simpletradingjournal.online.