Privacy policy
Last updated 13 September 2026
Short version: your trading data is yours. It is stored in
a directory only your account can reach, it is never sold, and it is never
used to train anything.
What we store
- Your email address and a hash of your password. The
password itself is never stored — only a scrypt hash, which cannot be
reversed back into the password.
- Your trading data: the journal entries you write or
import, fills, account balances and drawdown history, price alerts, and
any panels you build or import.
- Broker tokens, if you connect a broker. These are held
per account and revocable by you at any time.
- Session records: a hashed session token, when you last
used it, and the address and browser it came from — kept so you can
be signed out and so we can see an account being attacked.
Each account's data lives in its own directory on the server. There is no
query in this application that can return one customer's data to another,
because the file was never opened.
What we do not do
- We do not sell your data, to anyone, for any purpose.
- We do not use your trading history to train models.
- We do not run advertising or third-party tracking on the application.
- We do not have access to your money. EVTRA holds no funds and cannot
withdraw from any account.
Who else sees anything
- Stripe handles payment. Card details go directly to
Stripe and never reach our servers; we store only a customer id and your
subscription status.
- Our email provider receives your address in order to
deliver password resets and confirmations.
- The AI assistant, if you use it, sends the shape of your
data — field names and types — and, where you ask it a question
about your trading, the figures needed to answer. It is off unless you
turn it on, and its provider is contractually barred from training on it.
Your rights
Ask us and we will export everything we hold on you, or delete the account
and its directory outright. Deletion is permanent and we cannot undo it.
Write to keegan.barnhart4113@gmail.com.
Cookies
One cookie, and it is the session that keeps you signed in. It is HttpOnly,
SameSite=Lax, and Secure over HTTPS. There are no analytics or advertising
cookies on this application.
Changes
If this policy changes in a way that affects what we do with your data, we
will email you before it takes effect.