Privacy policy

1. Who is responsible for your data

The data controllers are the creators of the Tradeforge project, Kuba S. and Max B. For anything related to personal data, email support@tradeforge.pl or contact the admins on our Discord server: discord.gg/tradeforge (a ticket to the admins or a message to a person with the admin role).

2. Data that stays on your device

The Windows app stores in a database file on your drive (the app data folder), and the browser version and the mobile apps for Android and iPhone store in their own storage on your device:

• journal trades, notes, screenshots, accounts and instruments,
• backtest sessions, drawings, indicators, templates and settings,
• downloaded market data (cache),
• Tradovate credentials and the sync folder stay only on your computer (encrypted); the app connects to Tradovate directly,
• in Settings → Your data you can download everything we store about you (“Download my data”) or delete your community account together with posts, messages, results and cloud backups (“Delete account”) at any time.

We never send this data anywhere. You are in full control: export it, back it up or delete it together with the app data folder.

3. Account and login

You create an account with email and password. We store your email address, a hash of your password (we never know the password itself), your nickname, your profile picture if you add one, and the account creation date. We email you confirmation codes, replies to your support requests and, if you turn it on, the weekly report.

On iPhone you can also use Sign in with Apple. Apple then gives us an account identifier and your email address, or a private relay address if you choose to hide your email, and your name if you agree to share it.

You can also log in with Discord. In that case Discord asks you to approve three permissions:

• identify: your ID, name and avatar,
• guilds: your server list, to check that you are on the Tradeforge server,
• guilds.members.read: your roles on the Tradeforge server (e.g. member, strategy creator).

We have no access to your messages, friends, email or password. The login token is stored only on your computer. Our server uses it with each request to confirm your identity with Discord and does not store it (it keeps only a hash in memory for 10 minutes to avoid asking Discord every time).

4. Community data

If you use the Community, our server stores:

• your Discord ID, display name, avatar identifier and whether you have a moderator role,
• the time of your last activity,
• your questions, strategies, answers, comments, votes and images attached to them,
• posts on the feed (text, images, shared trades and backtest session recordings), likes, comments, your profile bio, the people you follow and exam results you choose to save to your profile,
• daily prediction picks, duels (results in R and trade counts), group membership and group chat, and your activity status (e.g. “trading live · NQ”), which disappears after 10 minutes, poll votes on the Board, comments under macro calendar news, tournament entries and results, app error reports (the error text, app version and your ID, so we can fix the problem), automatic message translations (done by our own server, never sent to third parties; translated text is cached for up to 60 days), live streams and voice chat in them (video and audio are relayed through our server, so nobody sees your IP address; nothing is recorded),
• chat messages (the last ~5000 messages, older ones are deleted automatically),
• badge counters on your profile: number of journal and backtest trades, longest day streak and days in the psychology journal; win rate, total R and profit factor only if you turn that on in your profile (dollar amounts are never sent),
• if you have Premium and join the community comparison: anonymous ratios from the last 90 days (win rate, profit factor, average R, losing streaks, trades per week), no amounts; you can opt out in Reports,
• results you submit to challenges (including private ones, visible only to their members): number of trades, win rate, total R, profit factor and result, shown on the challenge leaderboard,
• moderator actions (e.g. removing a post) in the moderation log.

Posts are visible to all members of the Discord server together with your name and avatar. Purpose: running the community forum (Art. 6(1)(b) and (f) GDPR).

Cloud backup (Premium). If you turn it on, the app sends a compressed copy of your local database (journal, strategies, backtest sessions, settings) and your computer name to our server over an encrypted connection. Only you can see and restore it. We keep the last 7 backups and older ones are deleted automatically. You can turn off automatic backups in Settings, and on request we delete all your backups. Purpose: providing the service (Art. 6(1)(b) GDPR).

Weekly report (Premium). If you turn it on, once a week the app sends our server a summary of the previous week (result, number of trades, win rate, total R, green days, insights and a goal), and our bot delivers it to you as a Discord direct message. We do not store the report content, only the fact that the report for a given week was sent.

Discord posts. New questions and strategies may be announced automatically in channels on our Discord server (title, short description, your name and avatar).

5. Server logs

Like any web server, ours logs the IP address, time and requested address. Logs are deleted automatically after 14 days and are used only to prevent abuse and fix errors.

6. Third-party services

• Discord: optional login and role checks (under Discord's privacy policy).
• Stripe: Premium payments. You give your card and payment details directly to Stripe and we never see them. Stripe only sends us the subscription status and the buyer's email.
• Email delivery: sending codes, support replies and reports.
• Dukascopy: the app downloads historical market data for backtesting.
• Forex Factory (faireconomy.media): the economic calendar.
• Installer and updates are downloaded from our own server, tradeforge.pl.
• Apple and Google: Sign in with Apple, and delivery of push notifications to phones through Apple Push Notification service and Firebase Cloud Messaging.

We never send your journal data to these services.

7. Cookies and visit statistics

This website uses no cookies or ads. We count visits anonymously: we store the page you visited, the domain of the site you came from, the page language and whether you are on a phone. We do not store your IP address or any browser identifier, only a one-day hash that keeps us from counting you twice on the same day and cannot be linked to you. Only your chosen website language is saved in your browser storage.

7a. Support requests in the app

If you write to us through the Help section, we keep the request and replies with your account so we can help you. You can ask us to delete them.

7b. Email messages

We send sign-in and confirmation codes and important account notices, for example when your Premium period ends, to your email address. We send other messages only if you agree to them:

• Reminders: a daily NQ day reminder on weekdays, at most once a day and only if you have not played yet.
• News: information about new app versions, new features and offers.

If you sign in with Discord, you can add an email in the app. You confirm the address with a code, and from then on it can also be used to recover access to your account. You tick the consents yourself; the News consent is not pre-ticked. You can change or withdraw either one in Settings under Email messages. Withdrawing consent does not affect messages sent before. We send email from our own mail server and do not share addresses with third parties for marketing.

8. Where the data is and for how long

The Community server is located in Poland, in the European Union. Posts are kept for as long as the Community exists or until they are deleted. Deleted posts are hidden immediately, and on request we remove them completely together with your data.

8a. Mobile apps

The apps for Android and iPhone work on the same account and follow the rules above. In addition:

• if you allow notifications, we store the notification token of your device so we can send you the alerts you turned on. You can switch them off in the app or in the system settings of your phone,
• the apps do not show ads, do not use an advertising identifier and do not track you across other apps or websites,
• the apps do not read your location or your contacts,
• Premium cannot be bought inside the mobile apps, so they do not process any payment data.

9. Your rights

You have the right to access, correct, delete, restrict, port and object to the processing of your data. You can also lodge a complaint with a data protection authority (in Poland: the President of the Personal Data Protection Office). To delete your account together with your Community posts, messages, results and cloud backups, use Settings → Your data → Delete account in the app, or write to support@tradeforge.pl. You can also delete your own posts in the app.