On this page
- 1What happens to my journal if I don't sign in?
- 2Do I have to sign in?
- 3What do you store when I sign in?
- 4Where is it stored, and who can read it?
- 5Do you sell my data or use it for ads?
- 6Do you use cookies?
- 7How do I get a copy of my data?
- 8How do I delete my data?
- 9Will this policy change?
- 10How do I contact you about my data?
What happens to my journal if I don't sign in?
It stays in the browser you use it in, on your device, and never reaches us. We have no copy of it on our server.
Everything in the journal except the Dashboard works without signing in, and none of it is sent to us. Where your data is stored explains how the browser keeps your journal, what can delete it and how to back it up.
Like any website, our host, Cloudflare, sees that your browser asked for our pages, along with the technical details every request carries, such as your IP address. It never receives what you type into the journal or the calculators.
Do I have to sign in?
No. Signing in is optional, and for now the only way to sign in is with a Google account.
Sign in if you want the Dashboard, or the same journal in more than one browser or on more than one device. Signing out, or never signing in, keeps the rest of the journal working as before.
Google tells us who you are; we never see your Google password. We ask Google only for your basic profile, so we can’t see your emails, files, contacts or anything else in your Google account.
As with any “Sign in with Google” button, Google knows that you signed in to Tradijourney. Google’s own privacy policy covers what it does with that.
What do you store when I sign in?
Your Google account details, a session that keeps you signed in, and a copy of your journal. Screenshots themselves aren’t uploaded: only each one’s caption and details are.
In full:
- Account detailsFrom Google: your email address and whether Google has verified it, your name, your profile picture link, Google’s ID for your account and the permissions you gave us (your basic profile only), plus the date your account was created. We don’t keep the sign-in tokens Google issues, and there’s no password.
- Sign-in sessionA random token, kept in a cookie in your browser and on our server, with when it started, when it expires, and the IP address and browser you signed in from. It lasts 30 days and is extended each day you use it; signing out ends it.
- Your journalYour accounts, trades and their fills, deposits and withdrawals, tags, notes, daily journal entries and journal settings, exactly as your browser stores them.
- ScreenshotsWhich trade each screenshot belongs to, its caption, file type, size and dimensions. The pictures themselves aren’t uploaded and stay in your browser.
When you first sign in, everything already in this browser’s journal is copied to our server and merged with anything already there. After that, changes you make in a signed-in browser are sent to the server, and changes from your other signed-in browsers come back.
A few settings that only make sense in one browser stay in that browser and are never sent.
If a request to our server fails, it writes a short error note with your account’s ID, never any of your journal.
We keep your data until you delete your account.
Where is it stored, and who can read it?
On Cloudflare, which hosts Tradijourney, in its D1 database, where it’s encrypted at rest. It isn’t end-to-end encrypted, so our server can read it.
Our server reads your journal to merge changes from your different browsers and to give you a copy when you export it. Features we add later may need to read it too, which is why it isn’t encrypted in a way only you could unlock.
Encryption at rest protects the stored copy, for example if a disk were taken. It doesn’t stop our own server from reading your data, and Cloudflare, as the company that runs that server for us, could technically reach it too.
Apart from Cloudflare as our host, only we can get into that server, and we don’t look at anyone’s journal unless you ask us to, for example to look into a problem you’ve reported.
Do you sell my data or use it for ads?
No. We don’t sell your data, show ads or run analytics on your journal.
There are no analytics or tracking scripts on the site or in the journal. Your data is used only to run the journal for you: to sign you in, keep your signed-in browsers up to date with each other and give you your export.
No one else receives your journal. Cloudflare stores it for us as our host, and Google only handles signing in and never receives your journal.
Do you use cookies?
Only the ones signing in needs. When you sign in, a cookie holds your session so you stay signed in, and we use no cookies for tracking or ads.
The position size calculator remembers your balance, account currency, risk and market in this browser’s own storage, so they’re there next time. That stays on your device and is never sent to us.
How do I get a copy of my data?
Signed in or not, you can export a backup file from Data in the journal at any time. Signed in, you can also download everything our server holds of your journal, in the same file format, from the account area in the journal.
Either file can be imported into the journal in any browser, and it merges with what’s already there. The server’s file holds your journal; your email address and name are shown in the account area.
Neither file is encrypted. Anyone who has one can read your trades, so keep it the way you’d keep a bank statement.
How do I delete my data?
Delete your account from the account area in the journal. That erases your account, every sign-in session, the link to your Google account and your journal from our server straight away, and it can’t be undone.
Every browser and device you were signed in on is signed out at once. If you sign in with the same Google account later, you start a new, empty account.
Cloudflare’s database keeps a rolling recovery history of up to 30 days, so erased data is completely gone once that period has passed.
Deleting your account doesn’t touch the journal in your browser. To remove that too, clear this site’s data in your browser’s settings, or keep it and go on using the journal signed out.
Deleting a single trade works differently. It is marked as deleted so your other browsers remove it too, and that marked copy stays on our server until you delete your account.
Signing out deletes nothing: your journal stays in your browser and on our server.
Will this policy change?
Yes, as Tradijourney changes. The date at the top says when it last changed, and if a change would use your data in a new way, this page will say so before it happens.
How do I contact you about my data?
Email tradijourney@gmail.com. Ask what we hold about you, ask us to correct or delete it, or ask anything this page doesn’t answer.