Privacy policy

Effective 2026-07-29. We collect the minimum needed to sell you data files and measure our ads. We do not sell or rent personal data.

What we collect

  • Account data -- your email address, a hashed password (never the password itself), and, if you use Google sign-in, your Google account email. Plus your marketing-email opt-in choice.
  • Billing data -- purchases and subscription status. Payment is handled by Stripe; card numbers never touch our servers.
  • Usage data -- download history (which files, when) and standard web-server logs (IP address, user agent, pages requested), kept for security, abuse prevention, and capacity planning.
  • Ad attribution -- if you arrive from an ad, the click identifier (e.g. Google's gclid) and UTM parameters are stored in a first-party cookie and, if you sign up, on your account, so we can tell which ads actually work.

Cookies

  • access_token -- keeps you logged in (essential).
  • mp_attrib -- first-party ad-attribution cookie (gclid/UTM values, expires after 90 days).
  • Google Ads conversion tracking -- pages load the Google tag (gtag.js), which sets Google cookies to measure sign-ups and purchases from our ads. Where enhanced conversions are enabled, a SHA-256 hash of your email (never the plaintext) may be sent to Google to improve conversion matching. See Google's advertising policies.

We run no third-party analytics beyond Google's ad measurement, and no social-media pixels.

What we never collect

  • Card or bank numbers (Stripe holds those).
  • Your trading activity, positions, or strategies -- the data files are downloaded to your machines and we cannot see what you do with them.
  • Anything from your Google account beyond the email address used to sign in.

Sharing & retention

Personal data is shared only with the processors that make the service work -- Stripe (payments), our email delivery provider (receipts, password resets, opted-in updates), our hosting and CDN providers, and Google (ad measurement, as described above) -- and when the law requires it. Account and billing records are kept while your account exists and as long as tax law requires afterwards; server logs rotate on a short schedule.

Your choices

  • Marketing email is opt-in at registration and every message has an unsubscribe link; transactional email (receipts, password resets) is sent regardless.
  • Email [email protected] from your account address to export or delete your account data. Deletion removes account and usage records; billing records are retained only as long as tax law requires.
  • Blocking Google's cookies in your browser does not affect your ability to use the site or download data.

Contact

Privacy questions: [email protected]. Material changes to this policy will be reflected in the effective date above. See also the terms of service and data license.