Privacy Policy

1 Introduction

This Privacy Policy explains how TTR Journal ("the Service"), operated by The Technical Room ("TTR", "we", "us"), collects, uses, and protects your information when you use journal.thetechnicalroom.ca.

We are committed to protecting your privacy. We collect only what is necessary to provide the Service and never sell your data to third parties.

2 Information We Collect

Account Information: When you register, we collect your name, email address, and a hashed password. We never store passwords in plain text.

Trade Data: Trades you log manually or sync via auto-sync EAs, including symbol, side, entry/exit prices, P/L, timestamps, notes, screenshots, and setup tags.

Account Settings: Your timezone, currency preference, theme preference, and risk rule configurations.

Usage Data: Basic analytics such as login timestamps and feature usage to improve the Service. We do not use third-party analytics trackers.

3 How We Use Your Information

• Provide the Service: Store and display your trades, generate analytics, and power risk management features
• Mentorship: Share your designated data with mentors you explicitly invite
• Auto-Sync: Receive and process trade data sent from your trading terminal via EAs
• Communications: Send account-related notifications (password resets, security alerts)
• Improvement: Analyze aggregate, anonymized usage patterns to improve features

4 Data Storage & Security

Your data is stored on secure servers with encrypted connections (TLS/SSL). Authentication uses JWT tokens with expiration. Passwords are hashed with bcrypt.

Auto-sync tokens are unique per connection and can be revoked at any time. Screenshots are uploaded to Imgur's API and linked in your journal — we do not host image files on our servers.

5 Data Sharing

We do not sell, rent, or trade your personal information. Your data is shared only in these limited circumstances:

• Mentors you invite: Read-only access to trade data, analytics, and account summaries you choose to share
• Legal requirements: If required by law, court order, or governmental authority
• Service providers: Imgur for screenshot hosting (images only, no personal data)

6 Data Retention

Your data is retained for as long as your account is active. When you delete your account (via Settings > Danger Zone), all your data — trades, accounts, analytics, sync connections, mentorship links, and comments — is permanently deleted via cascading delete within 30 days.

7 Your Rights

You have the right to:

• Access: View all data stored in your account through the dashboard
• Export: Download your trade history as CSV at any time
• Correct: Update your profile information and trade data
• Delete: Permanently delete your account and all associated data
• Revoke: Remove mentor access or disconnect auto-sync connections at any time

8 Cookies & Local Storage

TTR Journal uses browser localStorage to store your authentication token (JWT) and theme preference (light/dark). We do not use third-party cookies, advertising cookies, or tracking pixels.

9 Children's Privacy

TTR Journal is not intended for individuals under 18 years of age. We do not knowingly collect information from minors.

10 Changes to This Policy

We may update this policy periodically. The "Last updated" date at the top reflects the most recent revision. Continued use of the Service after changes constitutes acceptance.

11 Contact

For privacy-related inquiries, contact us at support@thetechnicalroom.ca or visit our support page.