Legal
Privacy Policy
Effective August 24, 2026
1. Who we are
TRADINGSCORECARD is operated by Ethan Fisher, an individual ("we", "us"). This policy explains what we collect, why, and how to reach us: [email protected].
2. What we collect
- Account info — your email address, and a hashed password if you sign up that way (we never store your plaintext password), or an identifier from Google/Apple if you sign in with one of those.
- Trade data — whatever a broker export you upload (CSV or Excel) contains: symbols, quantities, prices, and timestamps of your trades.
- Brokerage data (optional) — if you connect a brokerage account through SnapTrade, we receive your trade and position history through SnapTrade's API. We never receive your brokerage login credentials.
- Payment info — handled entirely by Stripe. We never see or store your full card number.
- Usage data — basic server logs, and a session cookie used to keep you signed in.
3. How we use it
To run the service: turning your uploaded or connected trade data into the journal, charts, and analytics you see; processing subscription payments; sending transactional email like password resets and receipts; and fixing bugs.
We don't use your trade data to train models or for advertising, and we don't sell it.
4. Who we share it with
We share data only with the service providers we use to run TRADINGSCORECARD, and only what each needs to do its job:
- Stripe — payment processing
- Resend — sending account and billing emails
- SnapTrade — brokerage account connections, if you choose to connect one
- Alpaca — market data lookups (prices), which don't include any of your personal or account data
- Google / Apple — only if you choose to sign in with one of them
We don't sell your data to anyone.
5. How long we keep it
We keep your data while your account is active. To delete your account and data, email [email protected] from the address on your account and we'll delete it.
6. Security
Passwords are hashed, never stored in plain text. Brokerage connection tokens are encrypted at rest. Your session cookie is set httpOnly and, in production, secure — it can't be read by page scripts or sent over plain HTTP.
7. Your rights
You can access or correct your account info from settings at any time, or request a copy or deletion of your data by emailing [email protected].
8. Cookies
We use one cookie to keep you signed in. We don't use third-party advertising or tracking cookies.
9. Children
TRADINGSCORECARD is not directed at anyone under 18, and we don't knowingly collect data from anyone under 18.
10. Changes to this policy
If we make a material change to this policy, we'll email the address on your account before it takes effect.
11. Contact
Questions or requests about your data: [email protected]