Privacy Policy

1. Controller

FinTimers Inc. (Delaware, USA) is the data controller for personal data processed by TapeCharts. Contact: support@tapecharts.com.

2. Data we collect

Account data: username, password (stored only as a salted scrypt hash), residence country and an age-eligibility verdict (we deliberately do not store your date of birth). Session data: short-lived session tokens, IP address used for login throttling and security logs. Product data: your trading journal entries, strategy tags, notes and the chart screenshots the terminal captures at trade entry/exit (stored to document your own trades back to you). Technical data: server logs necessary to operate and secure the Service. We do not collect data from advertising trackers and we do not buy third-party data about you.

3. What we never collect

Your exchange API keys are used server-side for the connections you configure and are never shared with other parties or exposed to the browser. We never request withdrawal permissions. We do not sell personal data.

4. Purposes and legal bases

We process data to provide the Service (contract), secure it and prevent abuse (legitimate interest), meet age/jurisdiction obligations (legal obligation / legitimate interest), and, with your consent, to send product updates you opted into.

5. Retention

Rolling market data (trades, order-book history) is an operational ring buffer retained for approximately 72 hours. Journal data and trade evidence screenshots are kept until you delete them or your account. Security logs are kept for a limited period proportionate to their purpose. Deleted accounts are purged within 30 days except where law requires longer retention.

6. Processors and transfers

We use a small set of infrastructure providers (currently server hosting by Hetzner in the EU) under data-processing terms. Data may be processed in the EU and the USA. We do not use analytics or advertising subprocessors on the product today; this policy will be updated before any such change.

7. Your rights

Depending on your jurisdiction (GDPR, CCPA and similar), you may request access, correction, deletion, portability or restriction of your personal data, and you may object to certain processing. Write to support@tapecharts.com; we respond within the statutory deadline. You may also lodge a complaint with your supervisory authority.

8. Security

Keys and credentials are stored server-side only; passwords are hashed with scrypt; sessions are short-lived tokens revocable centrally; production systems are hardened and access-restricted. No system is perfectly secure — report concerns to support@tapecharts.com.

9. Changes

Material changes to this policy will be announced in the Service or by e-mail before they take effect.