Privacy policy
Last updated 12 October 2026
Short version: your trading data is yours. It is stored in
a directory only your account can reach, it is never sold, and it is never
used to train anything.
What we store
- Your email address and a hash of your password. The
password itself is never stored — only a scrypt hash, which cannot be
reversed back into the password.
- Your trading data: the journal entries you write or
import, fills, account balances and drawdown history, price alerts, and
any panels you build or import.
- Broker tokens, if you connect a broker. These are held
per account and revocable by you at any time.
- Session records: a hashed session token, when you last
used it, and the address and browser it came from — kept so you can
be signed out and so we can see an account being attacked.
Each account's data lives in its own directory on the server. There is no
query in this application that can return one customer's data to another,
because the file was never opened.
The EVTRA Chrome extension
The extension reads trading sites you have allowed, read-only, and sends
what it reads to your EVTRA account. In full:
- What it reads. The visible text and tables of the
trading-platform tabs it is allowed on (TradingView, Tradovate, TopstepX
out of the box) and of the prop-firm dashboards and brokers you allow,
either one at a time or all at once with “Allow trading
sites”. From those pages it keeps account ids and names, balances,
day and open P&L, max-loss levels, positions and fills.
- Tab addresses. If you turn on “ask me when I
open a new trading site” (Chrome words this permission as
“read your browsing history”), the extension sees the address
of each tab you open and checks it against its list of trading sites so
it can offer to read a new firm. Addresses of non-trading pages are not
kept and not sent anywhere.
- Screenshots. When a trading tab’s text cannot be
read, and only if the screenshot setting is on, the extension may send a
picture of that one tab to EVTRA’s server to read the numbers on
it. The picture itself is not stored; only the numbers read from it
are. You can turn this off in the extension’s settings.
- Where it goes. Everything is sent over HTTPS to
evtra.trade using your own EVTRA session and stored in your
account’s directory, like the rest of your trading data. The
extension contacts no other server.
- AI processing. Page text and, if enabled, a screenshot
of a trading tab are processed by Anthropic’s API to extract the
figures on screen, and summaries of your journal are processed by it to
write the analyst’s notes. Anthropic does not use data sent through
its API to train models. Individual fills, prices, balances and broker
identifiers are withheld from the analyst’s summaries.
- What it never does. It never places, changes or
cancels an order, under any setting; the optional lockout greys the
order buttons on screen and blocks your own click, it never presses
anything. It does not read passwords or keystrokes, it uses the sessions
you already opened on your platforms, and it does not read any site you
have not allowed.
- On your computer. Settings, the list of accounts it
has read, and an offline queue of journal rows are kept in Chrome’s
extension storage. Alerts use Chrome notifications, which you can switch
off in the extension’s settings.
- Your control. Remove a site in the extension’s
settings to stop reading it, revoke any permission in Chrome’s
extension settings, or uninstall the extension. Deleting your EVTRA
account deletes the data it sent.
The extension uses the data it reads for one purpose: to show you your
own accounts, trades and risk, and to warn you before a rule is broken. It
is not sold, not shared with anyone else, and not used for anything
unrelated to that purpose.
What we do not do
- We do not sell your data, to anyone, for any purpose.
- We do not use your trading history to train models.
- We do not run advertising or third-party tracking on the application.
- We do not have access to your money. EVTRA holds no funds and cannot
withdraw from any account.
Who else sees anything
- Stripe handles payment. Card details go directly to
Stripe and never reach our servers; we store only a customer id and your
subscription status.
- Our email provider receives your address in order to
deliver password resets and confirmations.
- The AI assistant, if you use it, sends the shape of your
data — field names and types — and, where you ask it a question
about your trading, the figures needed to answer. It is off unless you
turn it on, and its provider is contractually barred from training on it.
Your rights
Ask us and we will export everything we hold on you, or delete the account
and its directory outright. Deletion is permanent and we cannot undo it.
Write to keegan.barnhart4113@gmail.com.
Cookies
One cookie, and it is the session that keeps you signed in. It is HttpOnly,
SameSite=Lax, and Secure over HTTPS. There are no analytics or advertising
cookies on this application.
Changes
If this policy changes in a way that affects what we do with your data, we
will email you before it takes effect.