← Back to the journal

Privacy Policy

Last updated October 13, 2026 · Terms of Service · Refund Policy

1. Who is responsible

FTJournal at ftjournal.trade is operated by a sole proprietorship based in Pennsylvania, USA, which is responsible for the personal information described here. Contact: support@ftjournal.trade.

2. What we collect, and why

What we do not collect: your card number or bank details (Stripe's Link handles those), your broker logins, or any data from your broker. The journal does not connect to brokers. We do not store your IP address (Cloudflare's short-term request logs, described below, are separate). The emailed sign-in links we used until September 2026 did record the IP address each link was requested from; those old records are deleted automatically within 30 days of the link expiring.

3. Who can see your journal

• You.
• Your coach or coaches. They can read your entire journal - trades, notes, screenshots, accounts and statistics - and write notes and grades for you. They cannot change your trades. They can also download a backup file of the whole room, which includes your journal; once downloaded, that file is in the coach's hands.
• Other students cannot see your journal. They can see the room's member list: each member's name, whether they are a coach or a student, and when they joined and were last active. Email addresses are not shown to other students.
• The operator can access the database to run the service, fix problems and respond to requests you make.

4. Services we rely on

We use a small number of other companies to run the journal. Each receives only what it needs for its job:

• Cloudflare hosts the journal and its database (in Cloudflare's Eastern North America region) and keeps short-term technical logs of requests. Its Web Analytics counts visits to the public front page (section 5).
• Resend delivers our emails, such as invitations, password resets and security alerts, so it receives your email address and the message.
• Stripe and Link sell and process subscriptions. Link is the merchant of record for your purchase, so it collects your payment details, name, billing address and email to take payment, calculate tax, prevent fraud and send receipts, under Link's privacy policy and Stripe's privacy policy.
• Have I Been Pwned helps keep passwords safe. When you choose a password, our server checks it against a public list of passwords leaked in other companies' data breaches. Only the first five characters of a scrambled fingerprint of the password are sent; the password itself never leaves our server, and nothing about you is sent with it.
• Google Fonts supplies the typefaces the journal uses. When a page loads them, your browser connects to Google, which can see your IP address.
• Google Sign-In, where offered and only if you choose to use it, confirms your email address to us. We receive your email address, name and Google account identifier, and nothing from your Google account beyond that.

We do not sell or rent personal information, share it for advertising, or allow these services to use it for their own marketing. We may disclose information if the law requires it or to protect the service and its members from fraud or abuse.

5. Cookies and browser storage

The journal sets one cookie: the sign-in cookie that keeps you signed in for up to 30 days. It is required for the journal to work and is not used for tracking. While you are signing in, two more short-lived cookies (deleted within minutes) tie the sign-in steps, such as the Google step and the two-step sign-in code, to your browser. The journal also saves display preferences, such as whether the sidebar is collapsed, in your browser's own storage; they never leave your device. There are no analytics, advertising or tracking cookies.

Visit counts. The public front page (not your journal) uses Cloudflare Web Analytics to count visits: which page was opened, the referring site, and the browser, device type and country. It sets no cookies, does not use your IP address to identify you, and does not follow you to other sites. It is loaded only on the front page, never when you open the journal signed in, and it never sees what you type or anything in your journal.

6. How long we keep it

• Your account and journal: for as long as the account exists. If your subscription ends, your journal is kept in read-only form so you can still see and export it, until you ask us to delete it or a coach removes your account.
• When an account is removed, its journal, notes, screenshots, sign-in records, our record of its subscription payments, and the account itself are deleted from the live database immediately, and its account reference is cleared from our error reports. We keep one thing: a one-way scrambled fingerprint of the email address. It is not the address itself, and we use it only to check whether an address has already had a free trial. It only lets us recognize the same address if it signs up again, so the free trial is given once per person. One exception: if an invitation email was sent to you, our limit on how many invitations one address can get may still hold your email address. Entries are cleared once they are a day old, the next time anyone is sent an invitation.
• Payment records are kept by Stripe and Link for as long as tax and financial laws require, even after your account is gone. We cannot delete those for them.
• Backups: once a week the whole database is copied to private cloud storage, and a copy without chart screenshots is emailed to the operator's private mailbox. Backups exist only to recover from an accident, are never used for anything else, and are deleted after 12 weeks. A removed account drops out of them as the older copies are deleted.
• Sign-in records: expired sign-ins are deleted the day after they expire, and invitation and password-reset links within 30 days of expiring.
• Error reports are kept until the problem is fixed and deleted 90 days after that. Cloudflare's technical logs expire on their own within days.

7. Your choices and rights

• Export: download a full copy of your journal anytime from About → Your data.
• Correct: edit your own entries in the journal, or ask us to fix your name or email.
• Delete: students can delete their account and journal themselves, immediately, from Settings → Delete my account; any subscription is cancelled at the same moment. Or email support@ftjournal.trade from the address on your account and we will do it, normally within 30 days.
• Ask: you can ask what we hold about you at any time, and we will tell you.

Depending on where you live, you may have further rights under local law. We will honor them.

8. Security

The journal is served only over encrypted HTTPS. You sign in with Google or with your username or email and a password; we do not email sign-in links. An invitation link to create your account lasts 7 days and works once, and a password-reset link lasts 1 hour and works once. Sign-in cookies cannot be read by scripts on the page. Two-step sign-in data (the key your authenticator app shares with us, and your recovery codes) is stored encrypted or as scrambled fingerprints, is never included in backups, and is deleted with your account. Each account can only reach its own journal, and this is checked on the server for every request. No system is perfectly secure, but if we ever learn of a breach affecting your information, we will tell you promptly.

9. Children

The journal is for adults. It is not intended for anyone under 18, and we do not knowingly collect information from children.

10. Changes

If we change this policy in a way that matters, we will tell members by email or in the journal before the change takes effect. The date at the top shows the latest version.

11. Contact

Privacy questions or requests: support@ftjournal.trade.