This Privacy Policy explains what data The Scalpers Journal collects, how we use it, and the rights you have over it. We try to keep this honest and short. If anything is unclear, email support@scalpersjournal.com.
The short version. We collect what we need to run the Service and nothing more. We don't sell your data. We don't use your trades or journal entries to train AI models. We use a small set of well-known infrastructure providers (Supabase, Netlify, Stripe, Google for sign-in) and that's it. You can export or delete your data anytime.
When you create an account, we collect your email address and a hashed password (or, if you sign in with Google, a Google account identifier). We never see or store your plain-text password.
When you upload broker CSVs, we parse and store the executions you uploaded — symbol, side, quantity, price, date, time, commission, and similar fields — in our database, linked to your account. We also store anything you create inside the app, including journal entries, per-trade notes, tags, trading rules, monthly goals, account size, net deposits, portfolio positions, and similar inputs.
We never see, receive, or store your broker credentials. We don't connect to your brokerage account. We only have what you upload.
When you subscribe, payments are processed by Stripe. We don't store your full credit card number or CVV. We receive limited billing information from Stripe (such as the last four digits of your card, billing country, and subscription status) to manage your subscription.
If you submit a review through the in-app review form, we store your rating, the optional message and Instagram handle you provide, and the timestamp. Reviews are visible on scalpersjournal.com unless hidden by you (via edit) or by us (per our Terms).
If you submit feedback through the in-app feedback form, we store your message, the feedback type, your email (so we can reply), and basic technical context (browser user-agent string, which page you were on when you submitted). Feedback is not public.
When you use the Service, our infrastructure providers automatically log basic technical information such as IP address, browser type, operating system, pages visited, and timestamps. This is used for security, debugging, and aggregate analytics — never combined with your trades to identify trading patterns.
We use cookies and browser local storage to keep you signed in, remember your preferences (theme, layout), and cache your data locally so the app loads quickly. We do not use third-party advertising or cross-site tracking cookies.
We use the data described above only to:
We do not use your trades, journal entries, or any other private data to train machine-learning or AI models. We do not sell your data to anyone, for any purpose.
We use a small number of third-party "subprocessors" to operate the Service. These are providers that may receive certain data to perform a specific function for us. They are bound by contracts that restrict how they can use that data.
| Subprocessor | What it does | What it sees |
|---|---|---|
| Supabase | Database and authentication | Account info, trades, journals, notes, reviews, feedback |
| Netlify | Web hosting and CDN | IP addresses, basic request logs |
| Stripe | Payment processing | Email, billing info, subscription status |
| Optional "Sign in with Google" authentication | Email and Google account ID (only if you use Google sign-in) |
We may also share data when legally required (subpoena, court order, lawful government request), to enforce our Terms, to protect our rights, or in connection with a merger, acquisition, or sale of substantially all of our assets — in which case we'll notify you so you can decide whether to keep your account active under the new owner.
Data is stored primarily on Supabase and Netlify infrastructure, which is hosted on cloud servers located in the United States. If you access the Service from outside the US, you consent to your data being transferred to and processed in the US.
We keep your data for as long as your account exists — including while a subscription is canceled or lapsed, so your trading history is waiting for you if you return. If you delete your account (via the "Delete My Account" option in Settings, or by emailing support), your personal data (trades, journal entries, notes, settings, reviews) is removed from our active database immediately. Some information may persist in encrypted backups for up to 90 days before being purged. We may retain limited anonymized records (e.g., transaction history for tax/accounting purposes) for as long as required by law.
You have the following rights with respect to your data:
If you are in California, the European Economic Area, the United Kingdom, or another jurisdiction with specific privacy laws (e.g., CCPA, GDPR), you have additional rights including the right to object to certain processing and to lodge a complaint with your local data-protection authority. To exercise any of these rights, email support@scalpersjournal.com and we'll respond within 30 days.
We use industry-standard security practices to protect your data: TLS encryption in transit, encrypted storage at rest through Supabase, row-level security policies that scope each user's data to their account, hashed passwords, and limited internal access. No system is 100% secure, but we take this seriously. If we become aware of a security breach affecting your data, we'll notify you within 72 hours of confirming it.
The Service is not directed to anyone under 18, and we do not knowingly collect data from anyone under 18. If you believe a child under 18 has provided us data, email us and we will delete it.
We may update this Privacy Policy from time to time. If we make material changes, we'll notify you by email or through the Service before the changes take effect. The "Last updated" date at the top of this page will always reflect the most recent version.
Questions, requests, or concerns about your privacy? Email support@scalpersjournal.com.