Your data and your privacy

What is stored

Your trades, accounts, plans, notes, tags, setups and screenshots. Broker credentials, encrypted. Nothing else about you beyond your email and the profile you filled in.

How it is protected

• Row-level security on every table. A query can only ever return your own rows. The application is not the only thing standing between accounts.
• Credentials encrypted at rest with AES-256-GCM, decrypted only at the moment a sync runs, never returned to the browser.
• Two-factor authentication available on every account.
• Read-only broker connections, structurally — there is no code path that could place an order.
• An audit log of sensitive actions, which you can export.

Cookies

Essential cookies keep you logged in. Analytics cookies are off until you turn them on, and declining is a single click that is exactly as prominent as accepting.

Exporting everything

Settings → Data & privacy. CSV for trades with every field, or JSON for everything. The exports contain no lock-in: the CSV columns are plain names and the JSON is the same shape the API returns.

Deleting everything

Settings → Data & privacy → Delete my account. It asks you to type your email address, then removes your profile, every trade, every plan and every screenshot. There is no soft-delete and no recovery window, so export first if you might want the data.