Legal

Privacy Policy

Effective August 24, 2026

1. Who we are

TRADINGSCORECARD is operated by Ethan Fisher, an individual ("we", "us"). This policy explains what we collect, why, and how to reach us: [email protected].

2. What we collect

  • Account info — your email address, and a hashed password if you sign up that way (we never store your plaintext password), or an identifier from Google/Apple if you sign in with one of those.
  • Trade data — whatever a broker export you upload (CSV or Excel) contains: symbols, quantities, prices, and timestamps of your trades.
  • Brokerage data (optional) — if you connect a brokerage account through SnapTrade, we receive your trade and position history through SnapTrade's API. We never receive your brokerage login credentials.
  • Payment info — handled entirely by Stripe. We never see or store your full card number.
  • Usage data — basic server logs, and a session cookie used to keep you signed in.

3. How we use it

To run the service: turning your uploaded or connected trade data into the journal, charts, and analytics you see; processing subscription payments; sending transactional email like password resets and receipts; and fixing bugs.

We don't use your trade data to train models or for advertising, and we don't sell it.

4. Who we share it with

We share data only with the service providers we use to run TRADINGSCORECARD, and only what each needs to do its job:

  • Stripe — payment processing
  • Resend — sending account and billing emails
  • SnapTrade — brokerage account connections, if you choose to connect one
  • Alpaca — market data lookups (prices), which don't include any of your personal or account data
  • Google / Apple — only if you choose to sign in with one of them

We don't sell your data to anyone.

5. How long we keep it

We keep your data while your account is active. To delete your account and data, email [email protected] from the address on your account and we'll delete it.

6. Security

Passwords are hashed, never stored in plain text. Brokerage connection tokens are encrypted at rest. Your session cookie is set httpOnly and, in production, secure — it can't be read by page scripts or sent over plain HTTP.

7. Your rights

You can access or correct your account info from settings at any time, or request a copy or deletion of your data by emailing [email protected].

8. Cookies

We use one cookie to keep you signed in. We don't use third-party advertising or tracking cookies.

9. Children

TRADINGSCORECARD is not directed at anyone under 18, and we don't knowingly collect data from anyone under 18.

10. Changes to this policy

If we make a material change to this policy, we'll email the address on your account before it takes effect.

11. Contact

Questions or requests about your data: [email protected]