Privacy Policy
Last updated September 24, 2026
This policy explains what information TradeHarbor collects, how we use it, and the choices you have. We collect only what we need to run the Service.
Information we collect
- Account information: your email address and a securely hashed version of your password (we never store your password itself).
- Your Data: trades, accounts, journal entries, and settings you enter or import.
- Billing information: if you subscribe, payment is handled by Stripe. We receive your subscription status and a Stripe customer ID, not your full card number.
- Technical information: IP address, browser type, and request logs, used to secure the Service (for example, to limit repeated sign-in attempts) and to diagnose errors.
How we use it
- To provide the Service: store your data and calculate your statistics.
- To secure your account: authentication, rate limiting, and abuse prevention.
- To send service emails: email verification, password resets, security notices, and billing receipts. We don't send marketing email without your consent.
- To process payments for paid plans.
We do not sell your personal information or Your Data, and we don't use Your Data for advertising.
Cookies and local storage
We use a single, strictly necessary cookie to keep you signed in. We store your light/dark display preference in your browser's local storage. We use Cloudflare Web Analytics to count page visits; it doesn't use cookies or track you across sites. We don't use advertising trackers.
Who we share it with
We share information only with service providers that help us run the Service, under agreements that restrict their use of it:
- Cloudflare — hosting, database, security, and transactional email.
- Stripe — payment processing for paid plans.
We may also disclose information if required by law, or to protect the rights and safety of our users or the Service.
Retention and deletion
We keep your information for as long as your account is open. You can export your data at any time from Settings → Data, and permanently delete your account from Settings → Delete account. Deleted data is removed from our live systems immediately and from backups within 30 days.
Security
Data is encrypted in transit (HTTPS) and at rest. Passwords are hashed with a slow, salted algorithm. Sign-in sessions are stored only as one-way hashes. No system is perfectly secure; if you believe your account has been compromised, contact us right away.
Your rights
You can access, correct, export, and delete your information from within the app. Depending on where you live, you may have additional rights — for example to object to certain processing or to lodge a complaint with a regulator. To make a request, email support@tradeharbor.co.
Children
The Service is not intended for anyone under 18, and we don't knowingly collect information from minors.
Changes
If we make material changes to this policy, we'll notify you by email or in the app before they take effect.
Contact
Privacy questions or requests: support@tradeharbor.co.