Privacy Policy

Trade Journal is a personal project, run by one person. This page says plainly what the app stores, where it stores it, and who else can see it. There is no analytics, no tracking, no advertising, and nothing here is sold or shared with anyone.

The short version

• Your trades, notes and settings are yours. They are stored either on your own device or in your own account, and never used for anything but showing them back to you.
• There are no analytics or tracking scripts on this site or in the app — no Google Analytics, no pixels, no advertising networks, no third-party cookies.
• Passwords are never stored in readable form, by either the offline gate or the cloud account.
• You can export everything you have, and delete everything you have — including the whole account, yourself, from Profile › Delete account. No email required, no waiting period.

Two ways the app can run

Which of these applies to you decides everything else on this page.

Offline / local-first

Built without cloud configuration, the app makes no network calls at all. The web version keeps your journal in your browser's IndexedDB storage; the Windows desktop version keeps it as JSON files under your own user profile (%APPDATA%\tradingjournal). Nothing leaves your machine, and there is no account, no server and nothing for anyone else to see. If you never sign in, no data about you exists anywhere except on your device.

With an account

The hosted version at this site is configured for accounts. When you sign in, your journal is stored in database rows scoped to your user id, protected by row-level security, so one account cannot read another's data. Signing in is what moves your journal off your device; until you do, it stays local.

What is stored

• Your journal — trades, fill legs, notes, strategies, day/week/year journal entries, cashflow records, accounts, settings and preferences, plus any screenshots you attach.
• Your profile — display name, and anything optional you choose to fill in: photo, date of birth, email, phone, country, base currency, experience, primary market, broker, bio, website, social handle. Every one of these is optional and blank until you type it.
• Your account — the email address you sign in with, when the account was created, and when you last signed in.
• A theme preference — a single browser localStorage value (brij-tj-theme-mode) remembering whether you chose light, dark or auto. It holds nothing else and identifies nobody.

There is no hidden telemetry. The app does not record which features you use, how long you spend in it, or what pages you visit.

Passwords

The optional offline login gate stores a PBKDF2-SHA-256 hash with a random per-user salt — never the password itself, and never anything reversible. Cloud passwords are handled entirely by the authentication service; this app never sees or stores them.

Note what the login gate is and is not: it protects the running app, not the files on disk. It is not disk encryption.

The services involved

Three third parties are involved in running this site, and nothing else is:

• Supabase — authentication and database hosting for accounts. Your email, password hash and journal rows live there. See Supabase's privacy policy.
• Cloudflare Pages — hosting for this website. Like any web host it processes the requests needed to serve pages, which involves your IP address. See Cloudflare's privacy policy.
• Formspree — delivery for the contact form, and only if you use it. Whatever you type into that form is passed on so a reply can reach you. See Formspree's privacy policy.

Fonts are bundled with the app rather than fetched from a font CDN, so loading a page does not call out to a third party for them.

Cookies

No tracking or advertising cookies are set. Signing in stores a session locally in your browser so you stay signed in — that is what the session is for, and it is not used to follow you anywhere.

Getting your data out

Settings › Data & Backup exports a full JSON backup of your journal, and the Reports tab exports to Excel, CSV, PDF, Word or a self-contained interactive HTML file. A backup contains your journal and settings; it deliberately does not contain password hashes, so restoring someone's backup can never hand over their login.

Deleting your data

You can delete your account yourself, from inside the app, without asking anyone. There is no waiting period, no retention window and no "deactivated" state you can be talked back out of.

• Your account, and everything in it — Profile › Delete account. You type your email back to confirm, and the account is removed from the authentication service along with every row stored against it: all trades, screenshots, notes, strategies and settings. It happens immediately, in one database transaction, and it is irreversible — there is no backup copy kept on the server and support cannot restore it afterwards. Export a backup from Settings › Data first if you might want the journal again.
• A local login, without the journal — in the offline/desktop mode there is no server account: one journal on the device can have several logins. Profile › Delete account removes your login and leaves the journal alone, unless you tick the box that also erases it. The dialog says which one you are getting before you confirm.
• Local data on its own — Settings › Danger Zone clears the journal on this device without touching any login. Clearing your browser's site data for this site does the same, and uninstalling the desktop app leaves only the folder named above, which you can delete.
• If the button ever fails you — use the contact page, giving the address you signed up with, and the account will be removed by hand.

Children

This is not intended for anyone under 18. Please do not create an account if you are.

Changes

If this policy changes, the date at the top changes with it. Because this is a small personal project, there is no mailing list to announce it on — the page itself is the record.

Contact

Questions, corrections, or a deletion request: use the contact page.