Privacy policy
Last updated July 19, 2026
What we collect
- Account data — username, email address, phone number if you add one, and a hashed password. Passwords are stored only as bcrypt hashes.
- Subscription data — which signals your account is subscribed to, and for providers, the signals you register and their prices.
- Execution data — if you run the Signal Trader app, execution records for your subscribed signals (fills, prices, timing) are reported to the platform to build performance records. Your broker credentials are not collected: they stay in the app's configuration on your machine.
- Operational data — server logs (IP address, request paths, timestamps) and essential session cookies. We do not use advertising trackers or third-party analytics.
How we use it
- To operate the service: accounts, sign-in, two-factor codes, signal delivery, and subscription management.
- To build public performance records: execution data is anonymized, aggregated, and normalized before it appears in any public metric, as consented to when you subscribe. Your identity and balances are never published.
- To secure the service: rate limiting, abuse and fraud prevention, and debugging from server logs.
What is public
Provider brand names, their registered signals, and those signals' performance records are public — that is the marketplace. Subscriber identities are not public and are not shared with providers beyond aggregate counts.
Sharing
We never sell personal data. We share data only with the infrastructure providers that run the service (such as Amazon Web Services, which delivers our email and hosts our servers) acting as processors, and where required by law.
Cookies
We set essential cookies only: a session cookie that keeps you signed in. There are no advertising or cross-site tracking cookies.
Retention and deletion
Account data is kept while your account exists. If you close your account, we delete or de-identify your personal data within a reasonable period, except records we must keep for legal, security, or audit reasons. Anonymized, aggregated execution data already incorporated into a signal's public performance record is not traceable to you and persists as part of that record.
Your choices
You can update your email, cancel subscriptions, or close your account from your account page or by contacting us. To exercise access, correction, or deletion requests, email support@signaltrader.app.
Security
Traffic is encrypted in transit (TLS), passwords are hashed with bcrypt, sign-in requires a one-time code, and internal systems follow a least-access design. No system is perfectly secure; report concerns to the address above.