Last updated: March 17, 2026 · Effective: March 17, 2026
SpotTradeJournal ("we", "us", "our") operates the trading journal platform at spottradejournal.com. We provide tools for traders to log, analyse, and improve their trading performance.
This Privacy Policy explains how we collect, use, and protect information when you use our website and services.
Account information: When you register, we collect your first name, last name, and email address. Your password is stored as a one-way bcrypt hash — we cannot read it.
Trade data: All trade entries you log manually or import from brokers (IBKR, Binance, Coinbase, etc.) are stored in our database. This includes entry/exit prices, position sizes, P&L, dates, and any notes or screenshots you attach.
Usage data: We may log basic server access logs (IP address, browser type, pages visited) for security and debugging purposes. We do not use third-party analytics trackers.
Payment data: We do not store payment card details. Payments are processed by third-party payment providers who handle billing data under their own privacy policies.
Communications: If you contact us by email, we retain that correspondence to respond to you.
We use your data exclusively to:
We do not use your trade data for any purpose other than displaying it back to you. We do not analyse your trades for our own commercial benefit, share them with third parties, or use them to train AI models.
Your data is stored on servers hosted in a secured environment. We implement the following security measures:
Despite our efforts, no method of internet transmission is 100% secure. We encourage you to use a strong, unique password for your account.
We do not sell, rent, or trade your personal data to any third party.
We may share data only in these limited circumstances:
We use one session cookie (PHPSESSID) to keep you logged in. This cookie is:
We do not use advertising cookies, tracking pixels, or third-party analytics cookies.
You have the right to:
To exercise any of these rights, email us at privacy@spottradejournal.com.
We retain your account and trade data for as long as your account is active. If you delete your account, we will permanently delete all associated data within 30 days, except where we are required to retain it by law (e.g. financial records for tax purposes).
Server access logs are retained for a maximum of 90 days.
SpotTradeJournal is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify registered users by email at least 14 days before any material changes take effect. Continued use of the service after that date constitutes acceptance of the updated policy.
The "Last updated" date at the top of this page always reflects the most recent revision.
For privacy-related questions, data requests, or to report a security issue:
We aim to respond to all privacy requests within 5 business days.