Privacy

TradeFlux is a practice trading terminal. It has no brokerage connection and handles no money, so it never asks for payment details, identity documents, or access to an outside account. What follows is the full list of what it does keep.

What is stored

• Your account. Email address and a hashed password, held by Supabase Auth. If you sign in through a third-party provider, that provider tells us your email address and nothing else.
• Your profile. Username, display preferences, and an avatar image if you upload one.
• Your trading activity. Simulated orders, positions, trades, replay sessions, journal entries, strategies, and tags. This is the product: without it there is no track record to show you.
• Your settings. Theme, sidebar state, chart configuration, focus markets.
• Error reports. When something breaks, a stack trace goes to Sentry along with the route it happened on and your user ID, so the bug can be found. Chart surfaces are excluded from session capture.

What is not stored

No advertising identifiers, no cross-site trackers, no analytics profile, and no sale or sharing of anything above with a third party. Market data is licensed from a third-party market-data provider and flows one way: into your session, never back out with your name attached.

Where it lives

The application runs on Vercel. Accounts and profiles are held in Supabase; market history and trading records are held in CockroachDB. Each of those providers processes the data on our behalf and under their own security commitments.

How long it is kept

Your records are kept while your account exists. Deleting your account removes your profile, trades, journal entries, strategies, and preferences. Error reports expire on Sentry’s own retention schedule.

Your choices

• Export or correct anything in your account from the settings page.
• Delete your account, and everything above goes with it.
• Ask what is held about you, and you will get a straight answer at privacy@tradeflux.app.

Cookies

One session cookie, set by Supabase Auth, which is what keeps you signed in. One preferences cookie so your theme is correct on the first frame rather than flashing. Neither is used for tracking, and there is no third-party cookie.

Changes

If this page changes in a way that affects what is collected, the date at the top changes with it.