Legal
Privacy policy
Last updated November 11, 2026
Draft. This text is being reviewed by a lawyer before launch; bracketed details are filled in then.
We collect as little as we can. This page says what we store, why, and for how long.
Who is responsible
The operator named in the Impressum. Contact: [contact email].
Visiting the website
Our server logs technical data (IP address, time, page, browser) to keep the site secure. Logs are deleted after 14 days. Legal basis: Art. 6 (1) (f) GDPR. We use no tracking or advertising cookies. A login cookie is set only when you log in.
Membership
To run your membership we store your email address, your plan, your subscription status and the alert channels you choose. Legal basis: Art. 6 (1) (b) GDPR (contract). We keep this data while you are a member and delete it within 30 days after your membership ends, except where tax law requires us to keep invoices (up to 10 years).
Payments (Stripe)
Payments are processed by Stripe Payments Europe Ltd., Dublin, Ireland. Stripe receives your payment details directly; we never see your card number. Stripe may transfer data to the USA under the EU-US Data Privacy Framework. See stripe.com/privacy.
Alerts
Email: we send alerts to your address [via our email provider]. Telegram: if you connect it, we store your Telegram chat id and username. Discord: if you connect it, we store the webhook URL you give us. Push: if you allow it, we store the push address your browser gives us. You can disconnect each channel at any time in your dashboard, which deletes this data.
Below bot (Auto plan)
The bot runs on your own device. It sends us your licence key, a random device id, its version and a short status message (for example 'Up to date'). It does not send your broker keys, balance or positions, and we never receive them.
Hosting
The site runs on a server operated by [hosting provider], [location]. Our data is stored there.
Your rights
You have the right to access, correct, delete and port your data, to restrict or object to processing, and to complain to a data protection authority. Write to [contact email].