Privacy

What we store

• Your email address and username.
• A one-way Argon2id hash of your password. It cannot be reversed, so nobody here can read your password — not even us.
• Sign-in sessions: when they started, when they were last used, the browser name, and a hashed form of your IP address. We do not keep raw IPs.
• A security log of account events: sign-ins, password and email changes.
• Your subscription state, once billing exists.
• If you enable cloud sync: your settings, layouts and custom indicator source, stored compressed against your account.

What we never receive

Your trades. Positions, trade history, replay sessions and the price data itself are written next to your MetaTrader terminal, in a folder you choose. Prices flow from your broker to your terminal to your browser and stop there.

This is a design decision, not a promise about our intentions: we could not hand over your trading history if we were compelled to, because we do not have it. Replay files also happen to be megabytes each, so the incentive runs the same way.

What syncs, if you turn it on

Cloud sync stores your settings, layouts and custom indicators so a second computer picks up where the first left off. It is optional. With it off, the same profile still moves between your browsers through the EA, and nothing reaches us.

Your private indicator code is private. It is stored so it can sync, and it is not listed, searched, shown to other users, or reachable from our admin console — there is no screen in it that can open your profile. If you want us to see one, publish it or send it to us.

Being straight about the limits: a synced indicator sits in our database, so a serious breach of that database, or a lawful order naming it, could expose it. If an indicator is valuable enough that this matters to you, leave cloud sync off — the app is fully usable without it.

Publishing to the library

Publishing is a separate, deliberate action with its own confirmation. When you publish, that indicator becomes visible to everyone and you grant the licence set out in the terms — which includes letting us use and adapt it. Unpublishing removes it from the library; copies other people already installed stay on their machines.

Why we are allowed to store it

To run your account and, when billing is on, to take payment — performance of a contract with you. We do not profile you, we do not sell anything to anyone, and there are no advertising or analytics trackers on this site. That is also why you were not asked to accept cookies: the only one we set is the one that keeps you signed in.

Your rights

You can download everything we hold from your account page, correct it there, or delete your account. Deletion is scheduled 30 days out so a mistake is recoverable; after that the record is removed, not flagged.

Questions, or a complaint: support@chartbridge.example. You also have the right to complain to your national data protection authority.

Who else is involved

• Our hosting provider, which stores the account database.
• Our email provider, which delivers verification and reset messages.
• Mollie, once payments are enabled, which handles card details so that we never see them.