Privacy Policy

• Your email address. It is the account identifier and the only way to sign in.
• What you enter: trade parameters, rules, prop challenge details, reported equity, outcomes, and review notes.
• Session records: a hashed session token, its creation time, and the browser user-agent string, so you can see and revoke active sessions.
• Consent records: which version of these terms you accepted, and when.
• Payment records, if you buy something: the provider's identifiers and the amount. Card numbers never reach our servers.

• No password. Sign-in is a single-use emailed link, so there is no credential to steal or reuse.
• No broker or exchange API keys. The product has no ability to connect to your accounts.
• No advertising or cross-site tracking identifiers.
• No card details.

Sign-in tokens and session tokens are stored only as hashes — a copy of the database cannot be replayed to sign in as you. Sessions are server-side records, so revoking one genuinely ends access rather than relying on your browser to discard a cookie.

Traffic is encrypted in transit. The database is not exposed publicly.

When a model is used, it receives a capital-free projection of a decision — the structure of the question, never your balances, position sizes, or notional values. Your private records are not used to train any model, ours or a provider's.

The default deployment runs with models disabled entirely.

We share data only with processors needed to run the service:

• the hosting provider that runs the servers and database;
• the email provider that delivers sign-in links;
• the payment provider, if you make a purchase;
• a language-model provider, only if enabled, and only the capital-free projection described above.

We do not sell personal data and do not share it with advertisers or data brokers. A community or affiliate partner never receives your identity, your decisions, or your figures.

You can run a risk check without an account. That session is temporary, expires within 24 hours, and is not linked to an identity unless you choose to sign in and attach the result to your account.

• Account and decision data: until you delete it.
• Sign-in tokens: 15 minutes, then unusable.
• Sessions: 30 days, or until revoked.
• Payment and invoice records: retained as long as tax and accounting law requires, even after account deletion. This is the one category we cannot erase on request.

From your account page you can export everything in machine-readable form and delete your account, without contacting us first. Deletion removes your records; it does not remove financial records we are legally required to retain.

Depending on where you live you may also have rights to correction, restriction, objection, and to complain to a supervisory authority. To exercise any of them, use the contact page.

If a breach affects your data, we will tell affected users directly and describe what happened, what was exposed, and what to do — within 72 hours of establishing the facts.