What we collect

• Account details: your email address and a one-way, salted hash of your password (we never store or see the password itself).
• Agreement record: which version of these documents you accepted and when.
• Plan and billing: your plan, renewal date and Stripe customer and subscription IDs. Card details are entered on Stripe's pages and handled by Stripe; we never receive or store your card number.
• Your trade journal: trades you choose to type in (symbol, shares, prices, dates, the level you followed, and any note). It is shown only to you, is not used for advertising or to profile you, is never sold or shared, and you can export or delete it at any time.
• Play: your answers in the learning games, your rating, streak and badges. They are shown only to you (there is no public leaderboard) and are deleted with your account.
• Feedback you choose to send us.
• Technical: two essential cookies (one keeps you signed in, one protects forms against forgery) and standard server logs kept for security and troubleshooting.

What we do not collect

We never ask for or connect to your brokerage account or bank account (the journal is typed in by you, not synced), and we do not use advertising or tracking cookies or third-party analytics. The Portfolio check reads the holdings you type in to build that one page and then discards them: they are not saved to your account, our database or our logs.

Some pages embed price charts from TradingView. When a chart loads, your browser connects to TradingView directly, and TradingView may set its own cookies under its privacy policy. We do not receive anything from TradingView about you.

How we use it

To run your account and subscription, send the emails you signed up for, keep the Service secure, answer you, and meet legal obligations. We do not sell or rent your personal information, and we do not share it except with the service providers that run the Service for us (hosting, database, email and Stripe for payments) under confidentiality obligations, or when the law requires it.

How long we keep it

Account data, including your journal, is kept while your account is open. A journal entry you delete is removed right away. When you delete your account we remove your personal data and your whole journal within 30 days, except billing records we must keep for tax and accounting law.

Your choices and rights

You can see your account details on the Account page, and you can ask us to access, correct, export or delete your data by emailing caissavest@gmail.com. Depending on where you live (for example California or the EU/UK) you may have additional rights; we will honor them. We will not treat you differently for using them.

Security, children and changes

Passwords are hashed with scrypt, sessions are stored hashed, and the site is served over HTTPS. No system is perfectly secure; we will notify you of a breach as the law requires. The Service is not for anyone under 18. We will post changes to this policy here and ask for your agreement again if they are material. Contact: caissavest@gmail.com.