Privacy Notice

01Controller and contact

The controller is [YOUR LEGAL NAME OR REGISTERED BUSINESS NAME], [POSTAL ADDRESS IN SLOVENIA]. Contact: [YOUR PRIVACY CONTACT EMAIL]. Add your registered business details and verify whether a data protection officer or representative is required before publishing.

02Data we process

• Account details: name, email address, password hash, account and session identifiers.
• Trading records: imported or manually entered trade details such as symbol, direction, volume, prices, dates, profit, commission, and swap.
• Journal and profile content: notes, ratings, tags, setup, optional biography and profile picture.
• Preferences: dashboard layout, selected calendar currencies and impact levels, timezone, custom session markers, and sharing choices.
• Technical information: session cookie, and data included in ordinary hosting, security, and error logs. We do not currently describe any advertising or cross-site analytics tracking.

03Why and on what basis

• Provide your account, trade journal, imports, analytics, profile, and support: necessary to perform our contract with you (GDPR Article 6(1)(b)).
• Protect accounts, prevent abuse, troubleshoot errors, and maintain service security: legitimate interests (Article 6(1)(f)), balanced against your rights.
• Display a public profile or trade performance: your choice to enable sharing (and, where required, consent). You can turn it off or regenerate your unlisted link.
• Meet legal obligations or establish, exercise, or defend legal claims where applicable.

04Who may receive data

Data is processed by the hosting and database providers that operate this application, selected by the Operator, and by technical service providers needed to run it. Identify the actual provider names and locations here before launch. The sessions page requests a weekly economic calendar export from Fair Economy/Forex Factory; the request is made by the application server. If you open an external source link, that site receives your browser request under its own policy. We do not sell personal data.

05International transfers

Depending on the hosting, database, and support providers you configure, data may be processed outside Slovenia or the EEA. Before launch, list actual locations and transfer safeguards (such as an adequacy decision or Standard Contractual Clauses) where required. Do not publish until this section reflects your real providers and infrastructure.

06Retention and deletion

Account and trading data is kept while the account is active to provide the service. When an account is deleted, associated account data is scheduled for deletion, except information that must be retained for legal obligations, security, dispute handling, or backup expiry. Specify actual backup retention periods and account deletion procedure here. You can request access, correction, or deletion via [YOUR PRIVACY CONTACT EMAIL].

07Security

Passwords are stored as salted scrypt hashes, and the sign-in session cookie is HTTP-only and configured as secure in production. No internet service can promise absolute security. Keep your credentials private and contact us if you suspect compromise. Confirm the hosting, database encryption, backup, and incident-response measures before making further security claims.

08Your GDPR rights

Subject to legal requirements and exceptions, you may request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Contact [YOUR PRIVACY CONTACT EMAIL]. You may complain to the Slovenian Information Commissioner (Informacijski pooblaščenec) at https://www.ip-rs.si/ or to your local supervisory authority.

09Automated decisions and children

The service calculates descriptive statistics from the trading data you provide. It does not claim to make legally significant decisions about you. The service is not intended for children; contact us if you believe a child has provided personal data.

10Updates

We will update this notice when our data practices or legal obligations change and show the revision date. If a change requires consent or direct notice, we will take the steps required by law.