Legal draft
Privacy policy
DRAFT. Not legal advice. It describes what the current code stores and must be reviewed before launch.
Draft status. This website is a public pre-release. Customer accounts remain unavailable until a separate secure account service is activated. The operator's identity, contact address, retention periods and jurisdiction-specific rights wording must be added by counsel.
Data kept on your own computer
The local desk stores price observations, paper portfolios, your account journal and logs in a SQLite file on your machine. It is not uploaded by the desk. It never stores your EA password, backup codes or tokens.
Data a commerce server would store
| Data | Why | How |
|---|---|---|
| Email address | Account identity, receipts, support | Plain text, lower-cased |
| Password | Sign-in | Only a salted PBKDF2-HMAC-SHA256 hash; never plaintext |
| Session, reset and verification tokens | Authentication | Only SHA-256 hashes; sessions last 30 days |
| Subscription and payment records | Access control, accounting, refunds | Plan, status, dates, amount, currency, processor reference. No card numbers; the payment processor handles cards |
| Support tickets and messages | Answering you | Visible only to you and administrators |
| App version reports | Compatibility and update planning | Random install id, version, platform |
Deletion
You can request account deletion. An administrator then anonymises the account, revokes credentials and removes support message content. Payment records are kept in anonymised form for accounting.
Sharing
Data would be shared only with the payment processor and hosting providers needed to run the service. No advertising trackers are used on these pages.