Home › Privacy Policy
🛡️ Your Privacy, Our Commitment

We protect your data
like you protect your capital.

Trading Journal is built on trust. Every decision we make about your data is guided by one principle — your trading information is yours, and yours alone. This policy explains exactly what we collect, why we need it, and the ironclad guarantees we make to you.

Effective: March 21, 2026
Last reviewed: March 2026
Version 3.1
🔒
Never Sold
Your data is never sold, rented, or traded to any third party. Period.
🚫
Never Public
Your trade data, journal entries and reports are fully private by default.
🔐
AES-256 Encrypted
All data encrypted at rest and in transit using bank-grade standards.
✋
You're in Control
Download or permanently delete everything from your account at any time.
01

What Data We Collect

We collect only the minimum data necessary to deliver Trading Journal's services. There is no hidden data harvesting, no silent profiling, and no collection of anything beyond what is described below. Transparency is not just a policy — it is an engineering constraint we build into every feature.

Data Type Examples Purpose Retention
Account Info Name, email, password (hashed) Authentication & communication While active
Trade Data MT5 statement history, P&L, lots Report generation & analytics User controlled
Journal Entries Notes, tags, screenshots, emotions Behavioral analysis & reporting User controlled
Usage Analytics Page views, feature usage, session length Product improvement 90 days
Technical Logs IP address, browser type, error logs Security & debugging 30 days
Payment Info Last 4 digits, billing country Subscription management Via Stripe, not stored by us
🔒 Absolute Guarantee
We never collect your broker credentials, API keys, live account passwords, or any information that could grant access to your actual trading account. Your brokerage relationship is entirely separate and private.
02

Why We Need It

Every piece of data Trading Journal collects exists for one reason — to make the service work better for you personally. We do not build advertising profiles, we do not analyze aggregate trading trends for resale, and we do not share insights with financial institutions.

  • ✓ Trade data — Used exclusively to generate your private performance reports. Our AI models run on your data to surface patterns unique to your trading behavior. No human at Trading Journal can read your individual trades.
  • ✓ Journal entries — Stored in encrypted form and processed locally per-user. Used to identify behavioral correlations between your notes and your outcomes. Never read by staff.
  • ✓ Usage analytics — Anonymized aggregate data that tells us "the report tab is slow" or "most users don't find the equity curve feature." Zero individual-level tracking.
  • ✗ NOT for advertising — We do not use your data to build ad targeting profiles, retarget you on other platforms, or share with advertising networks of any kind.
  • ✗ NOT for third-party enrichment — Your financial behavior is never combined with external datasets to create a credit or risk score about you.
  • ✗ NOT for commercial intelligence — We do not aggregate user trading data to sell market insights, trend reports, or strategy intelligence to hedge funds, brokers, or institutions.
03

The Industry Standard — You're Already Sharing More Elsewhere

We want to be honest with you about something that may feel uncomfortable — every financial platform you use today collects your data. This is not a flaw in the system; it is a regulatory requirement and an operational necessity. The question is never "does this service use my data?" — it is always "how responsibly do they handle it?"

Consider what the platforms you already trust collect every single day:

Your Broker
Regulated Firm
  • Every trade you open and close
  • Your full portfolio composition
  • Deposit & withdrawal history
  • KYC: passport, address, tax ID
  • Device fingerprints & IP logs
Trading Apps
Retail Platforms
  • Real-time position data
  • Risk appetite & behavior
  • In-app interaction heatmaps
  • Push notification engagement
  • Referral & social sharing
Payment Processors
Financial Infrastructure
  • Transaction amounts & times
  • Merchant category codes
  • Spending behavior profiles
  • Geolocation per purchase
  • Device & browser fingerprint
💡 The Key Distinction
The difference between Trading Journal and these services is straightforward. Your broker is legally required to report your activity to regulators and tax authorities. Payment processors build commercial profiles shared across networks. Trading Journal collects trade data for one purpose alone — to give that insight back to you, privately. We have no regulatory obligation to report your data, no advertising business model that monetizes it, and no interest in selling what you share with us.

Using a trading journal platform is not a privacy risk — it is a significantly smaller data footprint than your brokerage account, your bank, or even your smartphone. We exist to serve you, not to extract value from your information.

04

Our Ironclad Guarantees

These are not aspirational values or marketing claims. They are hard commitments embedded in our legal agreements with partners, staff NDAs, and technical architecture. Violating any of these would constitute a material breach of our operating principles.

🚫 We Will Never Do This
Sell your data. Not now, not if we raise funding, not if we are acquired, not ever. Any acquisition of Trading Journal would legally require the acquirer to honor this policy or offer users full data deletion before the transition.
🚫 We Will Never Do This
Publish your private data. Your trading performance, account balance, win rate, drawdown, journal entries, and any identifying information are private by default. The only public data is what you explicitly choose to share using our report-sharing feature.
🚫 We Will Never Do This
Share with advertisers or data brokers. We have no advertising partnerships. We have never entered a data-sharing agreement with a marketing platform, and we will not. Our revenue comes from subscriptions — not from your information.
✅ What We Actively Do Instead
We anonymize all aggregate platform statistics before any internal analysis. Our engineers work with synthetic datasets during development. Access to production user data is restricted to a maximum of two senior engineers under explicit security audit logs — and only for incident response purposes.
05

Security Measures

We approach data security the same way a serious trader approaches risk management — with multiple layers, redundancy, and zero tolerance for single points of failure.

🔐
AES-256 Encryption
All data is encrypted at rest using AES-256, the same standard used by major banks and government agencies globally.
AT REST
🌐
TLS 1.3 In Transit
Every byte transferred between your browser and our servers uses TLS 1.3 — making interception computationally impossible.
IN TRANSIT
🔑
Zero-Knowledge Architecture
Your journal entries and trade details are encrypted with keys derived from your credentials — even our team cannot read your private content.
BY DESIGN
🧱
Infrastructure Isolation
User data is stored in isolated, single-tenant containers. No user's data is ever co-mingled with another's at the storage layer.
ISOLATED
🛡️
Penetration Testing
Independent third-party security audits conducted quarterly. All critical findings are resolved within 72 hours of disclosure.
QUARTERLY
📋
Access Audit Logs
Every internal access to production data is logged, timestamped, and reviewed. Unauthorized access triggers immediate automated alerts.
MONITORED 24/7
06

Your Rights

You have complete and unconditional control over your data. These rights are not gated behind support tickets or waiting periods — they are available instantly from your account settings dashboard.

👁️
Right to Access
Download a complete export of everything we store about you — trades, journals, reports, account metadata — in JSON or CSV format.
✏️
Right to Rectification
Edit or correct any personal information in your profile at any time, instantly, without approval required.
🗑️
Right to Erasure
Permanently delete your entire account and all associated data. Deletion is irreversible and completes within 30 days, including backups.
⛔
Right to Object
Opt out of any data processing activity, including anonymized analytics, at any time from your privacy settings.
📦
Right to Portability
Export your full trading history and journal in standard formats compatible with other platforms. Your data is not locked in.
🔕
Right to Restrict Processing
Pause all data processing while keeping your account active — useful if you are reviewing our policy or disputing a concern.
07

Cookies & Tracking

We use a minimal, purposeful cookie policy. We do not use third-party tracking cookies, retargeting pixels, or any technology designed to follow you across the web.

Cookie Name Type Purpose Duration
tl_session Essential Keeps you logged in securely Session
tl_csrf Essential Prevents cross-site request forgery attacks Session
tl_prefs Functional Stores your UI preferences (theme, layout) 1 year
tl_analytics Analytics Anonymized usage statistics (opt-out available) 90 days
📌 No Third-Party Cookies
We do not load Facebook Pixel, Google Ads tags, or any other advertising network scripts. Our self-hosted analytics system means your browsing behavior on Trading Journal stays on Trading Journal. We do not send your behavior data to any external analytics service.
08

Contact Our Privacy Team

If you have any questions, concerns, or requests regarding this policy or your personal data, our dedicated Privacy Officer is reachable directly. We commit to responding to all privacy-related inquiries within 48 business hours and to resolving data access or deletion requests within 30 calendar days.

Questions about your privacy?

Reach our Privacy Officer directly — a real human who reviews every request personally.

EMAIL  admin@aldarani.com
RESPONSE TIME  ≤ 48 hrs
⚡ Policy Updates
We may update this Privacy Policy to reflect changes in law, regulation, or our practices. When we make material changes, we will notify you by email at least 30 days before the change takes effect and prominently display the update on our platform. Continued use of Trading Journal after notification constitutes acceptance. You always retain the right to delete your account and data if you disagree with any update.