Privacy Policy
This policy explains what the ELEV8 Trading Journal ("ELEV8", "we", "us") collects when you use elev8tradingjournal.com and the ELEV8 app, why, who helps us run it, and the choices you have. ELEV8 is run by Kacper Jasinski in Ireland, who is the controller of your personal data under the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988 to 2018.
What we collect
- Account details: your full name, date of birth (we work out your age from it), email address and password. Passwords are stored by our sign-in provider in scrambled (hashed) form; we can never see them.
- Your journal: everything you add, including trades (pairs, direction, prices, lot size, risk, result, fees, dates and times), setups, sessions, notes, mistakes, emotions, trading plan rules, chart screenshots, trading accounts (type, broker or prop firm, size, platform, nickname), payouts and payout certificates, and your settings.
- Email and notification preferences: whether you've turned on the weekly review email, which notifications you want, your reminder time and quiet hours, and your device's time zone (so these happen at the right local time).
- Notification addresses: if you turn on notifications on a device, the address your browser gives us for sending them to that device (and its encryption keys). It doesn't identify you or your device to anyone else.
- Technical data: our hosting providers keep standard server logs (such as IP address, browser type and time of request) to deliver the site and keep it secure.
We don't use advertising trackers or tracking cookies. We count visits with Cloudflare Web Analytics, which uses no cookies and doesn't identify you. The app saves a copy of your journal and your sign-in session in your browser's storage on your device so it works quickly and offline. If you untick Remember me when signing in, we set one strictly necessary cookie that your browser deletes when it closes; when it's gone, the app signs you out and clears your journal from that device.
We never ask for your broker or prop firm login, and we can't place trades on your behalf.
Why we use it
- To run the journal for you (performing our agreement with you): creating your account, syncing your journal between devices, showing your stats, insights and weekly review, and storing your screenshots and certificates.
- To send account emails you need, such as confirming your email, resetting your password or confirming an email change.
- To send your weekly review email, only if you turn it on (your consent). You can turn it off in Settings at any time.
- To send notifications (your weekly review is ready, high-impact news coming up, a prop account nearing its loss limits, a reminder to log your trades), only if you turn them on (your consent). You can turn them off in Settings or in your browser at any time. They're worked out from your journal: news alerts from the currencies in your pairs, limit alerts from your prop accounts and trades, and reminders from whether you have open or unlogged trades.
- To keep ELEV8 safe and working (our legitimate interests): preventing abuse, fixing problems and handling bug reports you send.
- To check your age: ELEV8 is only for adults aged 18 and over.
We don't sell your data, and we don't share it with anyone for marketing.
Who helps us run ELEV8
These providers process data for us, only to provide their service:
- Supabase: sign-in, database and file storage for your account and journal.
- Resend: sends our emails (account emails and the weekly review).
- GitHub (GitHub Pages and GitHub Actions): hosts the website and runs the weekly review and news alert jobs.
- Your browser's push service (for example Google for Chrome and Android, Apple for Safari and iPhone, Mozilla for Firefox): delivers notifications to your device if you turn them on. What we send is encrypted so only your device can read it.
- Cloudflare: domain name and network services for elev8tradingjournal.com; Web Analytics, which counts visits without cookies and without identifying you (pages viewed, referring site, country and device type); Turnstile, a check on sign-up and sign-in that stops automated spam accounts, which looks at technical details of your browser and connection; and Email Routing, which forwards emails you send to an @elev8tradingjournal.com address (for example privacy@) to our inbox.
- Our email provider: stores the emails you send us so we can reply.
Our fonts are served from our own website, so loading a page doesn't send anything to Google.
Some of these providers are based in, or store data in, the United States or other countries outside the European Economic Area (EEA). Where that happens, the transfer is protected by the safeguards the GDPR requires, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
How long we keep it
We keep your account and journal for as long as you have an account. You can delete your trades yourself at any time in Settings, or delete your whole account in Settings › Account › Delete account. That immediately and permanently deletes your login, journal, screenshots, payout certificates, notification addresses and any bug reports you sent. If you ask us by email instead, we do the same within 30 days, except where the law requires us to keep something. Server logs held by our providers are kept for a short period under their own policies.
Your rights
You have the right to access your data, correct it, delete it, restrict or object to how we use it, and receive a copy of it in a portable format. You can export your whole journal yourself from Settings (Excel, CSV or JSON) and correct your name, date of birth and email in your profile. Where we rely on your consent, such as the weekly review email or notifications, you can withdraw it at any time.
You can delete your account yourself in Settings. To use any of the other rights, or if you can't sign in, email privacy@elev8tradingjournal.com from the address on your account. We'll reply within one month.
If you're unhappy with how we've handled your data, please contact us first. You also have the right to complain to the Data Protection Commission (DPC) in Ireland at dataprotection.ie, or to the data protection authority in the EU country where you live.
Security
Your journal is private to your account: our database only lets each signed-in person read and change their own trades, settings and files. Connections to ELEV8 are encrypted (HTTPS). No system is perfectly secure, so please use a strong password that you don't use anywhere else, and sign out on shared devices.
Age limit
ELEV8 is only for people aged 18 and over. You need to give your date of birth when you sign up, and we don't knowingly collect data from anyone under 18. If you believe someone under 18 has created an account, contact us and we'll delete it.
Changes
If we change this policy, we'll update the date at the top. If a change is significant, we'll tell you in the app or by email before it takes effect.
Contact
ELEV8 Trading Journal, Ireland · privacy@elev8tradingjournal.com