Privacy Policy

Effective Date: August 2026 • Last Updated: August 2026

1. Information We Collect

PropfirmJournal collects only information necessary to deliver our performance tracking and analytics services:

  • Account Details: Email address, user identification token, and account authentication credentials.
  • Trading & Execution Records: Trade timestamps, execution prices, instruments/symbols, quantities, profit/loss (PnL), fees, commissions, session tags, notes, and log files parsed from supported trading platforms (e.g., Quantower, TopstepX, Tradovate, Rithmic, NinjaTrader, TradingView, Match-Trader, Tradesea).
  • Prop Firm Settings: Account balance targets, maximum drawdown thresholds, daily loss limits, and cash flow records (payouts and reset fees).
  • Technical Metadata: Browser type, session state tokens, and essential telemetry required to keep you securely signed in.

2. How We Use Your Data

Your data is processed strictly to provide personal analytics, journaling calculations, and platform functionality:

  • To compute performance metrics (Win Rate, Profit Factor, Expectancy, Drawdown tracking, Consistency Rule analysis).
  • To securely synchronize your journal data across your personal devices.
  • To send critical account notifications and service updates.

We do NOT sell, lease, or monetize your trading data or strategy records to prop firms, brokers, or third-party advertisers under any circumstances.

3. Data Security & Isolation Architecture

We implement enterprise-grade security protocols to protect your personal and trading records:

  • Row-Level Security (RLS): Every database query is cryptographically verified against your unique user ID (`auth.uid() = user_id`). No user can access or view another user's trade entries or settings.
  • Encryption: All network traffic between your client and our services is encrypted via Transport Layer Security (TLS/HTTPS). Authentication tokens and passwords are encrypted using secure cryptographic hashing algorithms.
  • Isolated Environment Secrets: Critical server keys and credentials remain isolated in secure backend infrastructure and are never exposed to client-side code.

4. Data Ownership, Retention & User Rights

You maintain 100% ownership of your trading records and personal information:

  • Data Export: You can export your full trade logs into standardized CSV formats at any time.
  • Data Erasure: You have the right to request complete deletion of your account and all associated trading data. Upon deletion, your records are permanently purged from active databases.

5. Third-Party Infrastructure Providers

We partner exclusively with reputable infrastructure providers complying with international data protection standards:

  • Database & Authentication: Supabase Inc. (PostgreSQL, Auth Engine)
  • Web Hosting & CDN: Cloudflare Inc. (Edge Deployment, DDoS Mitigation)
  • Market Data: Financial market data providers (for historical chart replay reference only).

6. Contact Information

If you have any questions, inquiries, or privacy requests regarding this Privacy Policy, please contact our support team at:

Email:[email protected]

← Back to HomeView Terms of Service