Data we collect
- Account data — your name, email address, hashed password, and, if you sign in with Google, your Google account identifier.
- Trading data — the trades, notes, tags, accounts, goals, reviews, and settings you enter or import, including any prop-firm rules and the fees or payouts you record against a prop-firm account. This is Your Content and is used to provide the Service to you.
- Broker connection data — where you connect a broker, the access secret our broker-connection provider (SnapTrade) issues for your connection, stored encrypted at rest. You sign in to your broker on SnapTrade's or your broker's own page; we never see or store your broker password.
- Usage & device data — basic technical logs (e.g. IP address, browser type, timestamps) needed for security and to operate the Service.
- Site analytics — aggregate, cookieless measurement of how the public pages of our website are used (such as page views and referring site), collected first-party on our own infrastructure. It creates no cross-site or advertising identifier and is not shared with any analytics vendor. We do not run analytics inside the signed-in application.
- Signup attribution — if you arrive from a link carrying campaign parameters (
utm_sourceand similar) or from another website, we store those values and the referring site's name with your account when you register, or with your email address when you open the guest demo, so we can tell which channels bring people to the Service. If you do neither, nothing is stored. See our Cookie Policy. - Guest demo email — to open the guest demo you give an email address and agree to receive product updates. We store the address with the dates you opened the demo and when you agreed. Every update lets you unsubscribe, and unsubscribing does not affect anything else. We keep the address until you ask us to delete it.
How we use data
- To provide, maintain, and secure the Service and your account.
- To compute the analytics, reports, and figures you request.
- To understand, in aggregate, how our public website is used and which channels bring people to it.
- To communicate service-related notices (e.g. verification, security, billing).
- To send product updates to people who asked for them; you can opt out at any time.
- To comply with legal obligations and enforce our Terms.
We do not sell your personal data, and we do not use your trading data to advertise to you.
Third-party processors
We share limited data with service providers strictly to operate the Service. The main sub-processors are:
- Hosting — Hetzner Online GmbH (Germany), which operates the servers and storage where the Service and its database run.
- Backup & replication storage — Backblaze, Inc. (United States), which stores encrypted off-site copies of the database so the Service can be recovered if our hosting fails. These copies contain the same data as the live database and are kept only for as long as our recovery policy requires.
- AI features — Anthropic, OpenAI, Google, and Perplexity, to generate responses when you use an AI feature. What is sent can include your trade records and the notes you wrote, and, for support, your message to us.
- Market data — Twelve Data, Yahoo Finance and StockNewsAPI, to fetch quotes, charts, market headlines and earnings dates for the tickers you view or hold.
- Charts — TradingView, only if you choose its chart: the widget then loads from TradingView in your browser, which receives your IP address and may set its own cookies. Our own charts do not load it.
- Authentication — Google, if you choose Google Sign-In (subject to Google's privacy policy).
- Broker integrations — SnapTrade and the brokers you connect, to sync your trades and balances.
- Payments — Freemius, Inc. (United States), our merchant of record for subscriptions, and PayPal. We do not receive or store full card or bank details.
- Email delivery — Postmark (AC PM LLC, United States) and Google LLC (Google Workspace), which send our emails, such as verification and security notices and, if you asked for them, product updates. They receive your email address and the email's content.
- Notifications — Discord, only if you configure a webhook to send yourself chart snapshots or alerts.
A fuller list of the software and data sources we build on is in our Attributions & Licenses.
Cookies
We use strictly necessary cookies to run the Service (such as authentication and session cookies) and browser storage that remembers preferences such as your theme and layout. If you choose to load a third-party component, such as the TradingView chart, it may set its own cookies. See our Cookie Policy for details.
Data retention
We keep your data while your account is active. You can delete your account at any time, after which we delete or anonymize your personal data except where retention is required by law. You can export your trading data at any time using the built-in export tools.
Security
We use reasonable technical and organizational measures to protect your data, including encryption of sensitive credentials at rest and encrypted transport. No system is perfectly secure, and we cannot guarantee absolute security.
Your rights
Depending on where you live (for example under the GDPR or CCPA), you may have rights to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact support@ledgerofalpha.com. You also have the right to complain to your local data-protection authority.
International transfers
Your data may be processed in countries other than your own. Some of the providers listed above are based in the United States, so your data may be transferred outside the EEA. Where required, we use appropriate safeguards for such transfers.
Children
The Service is not directed to children under 18, and we do not knowingly collect their data.
Changes & contact
We may update this Policy and will notify you of material changes. Questions or requests may be sent to support@ledgerofalpha.com.