Privacy Policy

Last updated: 22 October 2026.

This page says what we collect, why we collect it, and how you can delete it. It covers the website and the Android app.

What we collect

• Your name, email address and password. The password is stored only as a bcrypt hash, a scrambled form that cannot be turned back into your password.
• When you sign up, we email you a code to check that the email address is yours. The email is sent through an email delivery company, which gets your email address and the email's text. What you enter is kept for at most 7 days while it waits for the code. Your account is made when you type the code in, or when our administrator confirms your sign-up.
• Your mobile number, if you give it. You can sign in with it instead of your email.
• What you write in your journal: trades, their buys and sells, notes and discipline scores.
• Screenshots you add to a trade.
• Your theme and language choices.
• On the website, a problem report you send through Report an issue: your message, the page address you were on, your browser's name and version, your screen size, and any screenshots you add. A report sent while signed in is linked to your account. A report sent without an account has an email address only if you leave one.
• On the website only: counts of page visits, and records of errors. See Visits and errors on the website. Neither has your name, your email or your account number.

What we use it for

We use it to run your journal and to work out its numbers, such as your win rate, your R and your drawdown. We show your name in the side menu, and use your email address to sign you in and to send you the sign-up code. We use your mobile number to let you sign in with it, and to reach you about your account if we need to. We use a problem report to find and fix the problem, and to answer you. On the website, we also count which pages are visited and record errors, as explained below.

What we don't do

• We do not sell your data, and we do not use it for advertising.
• We do not use advertising trackers, and we do not follow you across other websites.
• The Android app has no tracking or visit-counting code.

Where it is kept

Your data is kept on our own server and in private storage. The sign-up code's email goes through an email delivery company, as said above. Screenshots are never public: the server checks who you are each time, before it shows one. This is also true for a screenshot in a problem report: only you and the site's administrator can open it.

Visits and errors on the website

Counting visits. We count which pages are visited, so we know what to improve. The counting runs on our own server, so no outside company gets this data.

• It sets no cookies.
• It does not store your IP address. It uses it to work out your country, region and city. To count each visitor once, it keeps a code made from your IP address and browser. The code changes every month, and your IP address cannot be read back from it.
• For each visit it keeps: the page address, without anything after a "?" or "#" (except campaign tags such as utm_source), and with numbers such as a trade number removed; the page title, except while you are signed in; the website you came from; your browser, operating system, device type, screen size and language; and how fast the page loaded.
• It never gets your email, your account number, or anything you type into the journal or a calculator.
• Visits by our own staff are not counted.

Error reports. When something breaks on our server, we record technical details so we can fix it: the error, the page address and the steps in the code that led to it. Cookies, sign-in details, form contents and anything that looks like an email address are removed first. These reports may be handled for us by an outside error-tracking service. It never gets your trades, notes or screenshots.

Cookies and tokens

On the website, one cookie keeps you signed in. That is its only use. The visit counting sets no cookies. The Android app does not use cookies: it signs in with a token that can be cancelled.

Data deletion

You can delete your account at any time. It happens at once and cannot be undone.

• In the app: More → Delete account.
• On the website, when signed in: Settings → Danger zone.

Your trades, screenshots, problem reports and sign-in tokens are deleted. Activity records that mention your account are kept for security checks, but your email and every other detail that could identify you are removed from them.

A problem report sent without an account is deleted with your account only if it has your account's email address. To have any other report deleted, email us its number (it is shown when you send the report) and we will remove it.

Contact

Questions about this policy or your data? Email ghanshyamtech@hotmail.com.