Privacy Policy

Your account: email address, a display name, and a password. Passwords are stored only as a scrypt hash — we cannot read yours, and neither can anyone who obtains the database.

What you log: trades, journal entries, playbooks, goals, screenshots you upload, and settings. This is the substance of the product; it exists because you typed it in.

Security records: a short-lived log of login and signup attempts, keyed to an IP address, used to rate limit password guessing. Rows are deleted once the window they belong to has passed.

We do not run advertising trackers, and we do not use third-party analytics that profile you.

We use your data to run the service: show you your journal, compute your statistics, keep you signed in, and protect accounts from unauthorized access. If you have the leaderboard enabled, we also use your trades to compute your standings.

We do not sell your data. We do not share it with advertisers. We do not use it to train machine learning models.

If your leaderboard setting is on, other signed-in users can see your display name and your computed totals for the current season. That is the entire public surface.

Your individual trades, notes, screenshots, journal entries, goals and email address are never shown to other users. Turning the leaderboard off in Settings removes you from it entirely.

Trade Bookie runs on infrastructure operated by other companies. They store data on our behalf and are not permitted to use it for their own purposes.

• Vercel — Hosting and file storage for screenshots
• Neon — Database hosting

We may also disclose data if legally required to, or where necessary to investigate abuse of the service.

Your journal is kept as long as your account exists. Delete your account and it is removed from the live database immediately, and from routine backups within 30 days. Security records are deleted continuously as their windows expire.

From Settings you can change your display name, leave or rejoin the leaderboard, change your password, sign out every other device, download everything as a single file, and delete your account permanently.

Depending on where you live you may have additional rights over your data, including access, correction, deletion and portability. The controls above cover all of them; email us if you need something they don't.

Passwords are hashed with scrypt. Sessions use a signed, HTTP-only cookie that can be revoked from Settings. Every database query for your data is scoped to your account by a central mechanism rather than by hand, so one user cannot read another's rows.

No system is perfectly secure. Keep your password unique, and if you suspect someone else has it, change it and use “sign out everywhere.”

Trade Bookie is not intended for anyone under 18, and we do not knowingly collect data from children.

If this policy changes materially we'll say so in the app rather than quietly editing this page.