Privacy policy

Plain-language summary of what this site stores and why.

What we store

• Account: username, email, display name, time zone, and a salted Argon2 hash of your password (never the password itself).
• Security: your encrypted two-factor secret, hashed recovery codes, signed-in devices (IP address and browser), and an activity log of security events such as logins and password changes.
• TradeLocker (members, optional): environment, server, login email, and your TradeLocker password encrypted with AES-256-GCM, plus a short-lived cache of your account balance, positions and recent orders.

What we use it for

Only to run this site: logging you in, keeping your account secure, and showing your dashboard. No advertising, no tracking cookies, no analytics, and no selling or sharing of data.

Cookies

Two essential cookies: a session cookie that keeps you logged in, and a security token that protects forms. Both are HTTP-only and secure.

Your choices

From your account page you can download your data, disconnect TradeLocker (which deletes the saved login immediately), sign out devices, and delete your account.

Hosting

The site is self-hosted and served through Cloudflare, which processes requests to protect the site.