Privacy

Account

Your email address, a hash of your password (never the password itself), when you signed up and last signed in, when you accepted the terms and which version, and whether you have a subscription. If you turn on two-step verification, what is needed to check your codes.

Your journal

Everything you enter: trades, prices, sizes, sessions, confluences, notes, your answers to the psychology questions and the grade you give each trade.

Screenshots

Chart images you attach to a trade. Stored privately and shown only to you.

Trading plan

What you write on the Trading plan page: your rules, routine and checklists, and which boxes are ticked.

Certificates

What you put on your certificates wall: the kind, the firm, the amount and date you type, the account you link it to, your list of firms, and the picture or PDF of the certificate, which often carries your name. Stored privately and shown only to you.

Settings

Display name, theme, time format and time zone, session times, which instruments you trade (NQ, ES or both), your own lists and their order, and your account names.

Payment

Your plan, its status and renewal date, a customer reference from our payment provider, and the boxes you ticked at checkout, with the time and the terms version. Your card or bank details, name and billing address stay with the payment provider.

Withdrawal

If you withdraw from the contract: when, your reference number and the reason if you gave one.

Messages to us

What you write in the feedback form or by email, screenshots you attach, and your email address. A report sent from the app also records the page, window size, browser, theme, language and time zone, so we can reproduce the problem.

Launch email

Only if you asked for it: that you want one email when NQ Journal opens, and when it was sent.

Demo

When you pressed Start on the five-minute demo. Nothing you do inside the demo is kept.

Notes on your account

If we ever write to you about how your account is used, the date and the reason. Sometimes a short internal note, for example why access was given.

Technical logs

Our host logs each request with its IP address, and our database provider logs each sign-in. We read them only to investigate a fault or an attack.

We use no analytics, no advertising pixels and no session recording. The only outside scripts on the site are a bot check on the sign-in, sign-up, password-reset and withdrawal forms, and Stripe’s payment form on the payment step (section 4).

Running your journal

Storing what you enter and computing your statistics. Basis: contract (GDPR art. 6(1)(b)).

Account and billing

Signing you in, taking payment, and sending account, security and billing emails. Basis: contract.

Tax records

Keeping invoices and payment records, as Dutch tax law requires. Basis: legal obligation (art. 6(1)(c)).

Security and fair use

Rate limits, the bot check, logs, and automatic checks that count how an account is used: how many trades, how fast, how much storage, whether it still signs in. These checks count; they never read what you wrote. Basis: legitimate interest (art. 6(1)(f)) in a service that stays online, stays safe and is used as agreed.

Knowing how the service does

Totals across all accounts, worked out on our server from what is already listed here: how many accounts are made, confirmed, log trades and pay, how many stop, which parts of the journal get used and at which hours, and how often addresses at each mail provider confirm (only the provider counts, never the address). Never about one person, never what you wrote, and nothing extra is collected or stored for it. Basis: legitimate interest (art. 6(1)(f)) in running and improving the service.

Proof of agreement

Keeping the record of the terms you accepted and the boxes you ticked. Basis: legitimate interest in being able to show what was agreed.

Answering you

Replying to your messages and complaints. Basis: legitimate interest, or contract when it is about your subscription.

Launch email

One email when NQ Journal opens, only if you asked. Basis: consent (art. 6(1)(a)). Turn it off on the subscribe page or by email.

The demo

Opening it once per account, and seeing which accounts tried it and whether they went on to subscribe, so we know whether the demo helps. Only we see this, in our admin console. Basis: legitimate interest (art. 6(1)(f)).

What you must give. An email address and a password, because there is no account without them, and for a subscription the payment details our payment provider asks for. Everything else is up to you. A field you leave empty is not stored.

What we never do. We do not analyse journals in bulk, train any model on them, show them to other users or sell them. We look inside a journal only if you ask us to, or if a report points to something unlawful.

These suppliers help run NQ Journal. Each line says what the supplier does, what it receives and on what terms. A processor works only on our instructions and may not use your data for anything else. Where a supplier is based outside the EU, the safeguard is named.

Supabase

Processor, under a data processing agreement. Database, sign-in and file storage. Your journal is stored in its EU region, in Ireland. Supabase Inc. is based in the US. Any access from outside the EU, for example by its support staff, is covered by the standard contractual clauses in our contract with Supabase.

Vercel

Processor, under a data processing agreement. Hosting. Our server code runs in Dublin, and pages reach you through Vercel’s worldwide network. Vercel also keeps our second set of safety copies, in Dublin. Vercel Inc. is based in the US and certified under the EU–US Data Privacy Framework, which covers the transfer. Our contract with Vercel adds standard contractual clauses.

Stripe

Processor for our payments, under a data processing agreement, and a controller in its own right for its own legal duties, such as fraud checks and keeping payment records. We contract with Stripe Payments Europe Ltd. in Ireland. Stripe receives your email, name, billing address and payment details. It shares data with Stripe Inc. in the US under the Data Privacy Framework and standard contractual clauses.

Your way to pay

The bank, wallet or service you pay with (your bank for iDEAL | Wero, PayPal, Apple or Google) receives what it needs to make the payment, from Stripe or from you, and handles it as a controller under its own privacy notice.

Cloudflare

Processor, under a data processing agreement. The bot check (Turnstile) on the sign-in, sign-up, password-reset and withdrawal forms. For that check only, it sees your IP address and technical details of your browser. Cloudflare Inc. is based in the US; transfers rely on the Data Privacy Framework and standard contractual clauses.

Google Workspace

Processor, under a data processing agreement. Email: our mailbox and the mail we send (sign-in links, password resets, security and billing notices, and replies). It receives your email address and the message. It is contracted through Google Cloud EMEA Ltd. in Ireland. Google LLC is based in the US; transfers rely on the EU–US Data Privacy Framework and standard contractual clauses.

Nobody else receives your data, and we never sell it. The public sources behind the economic calendar receive nothing about you. Ask us for a copy of the safeguards named above.

• Signing in. A session cookie that keeps you signed in until you sign out. When you open a sign-in or confirmation link from an email, a second cookie holds that link for at most ten minutes, until you confirm on the page.
• Your account filter. Cookies that remember which trading account and which market (NQ or ES) you last picked, for a year.
• Paying. On the payment step, Stripe’s payment form sets two cookies of its own to detect card fraud: one for the visit, one for a year. Stripe uses them for fraud checks only.
• Preferences. Your theme, lists and display settings, kept in your browser’s local storage. On the public site, local storage also remembers which plan you picked.

Each of these either makes the site work or remembers a choice you made, so the law does not require a consent banner for them. Apart from Stripe’s fraud check while you pay, nothing on this site tracks you or follows you elsewhere. If that ever changes, we will ask first, with a real option to say no.

Journal and settings

As long as your account exists. Delete your journal in Settings and it is gone at once, safety copies included.

Safety copies

So mistakes can be undone: a trade as it was before you deleted or changed it, 30 days; the sessions your trades had before a re-sort, 30 days; a nightly copy of each journal, 7 days. A second copy of each nightly copy, of your screenshots and of the list of accounts is kept with our host Vercel in Dublin, so a failure at one supplier cannot take your journal and its copies together. All are kept in the EU and removed at once when you delete everything or your account is closed. Separately, our database host makes a backup of the whole database each day, used only to recover from a failure and kept for 7 days, so something you delete is gone from those backups within 7 days.

Your account

Until you ask us to close it. We do that within 30 days, removing your journal, screenshots, trading plan, certificates, settings, safety copies and messages together. A running subscription is cancelled first.

Terms acceptance

With your account, until it is closed. If you paid, the record of the boxes you ticked at checkout also stays with the payment records, for seven years.

Notes on your account

Notices we sent you and our internal notes: until your account is closed.

After you cancel

Your journal stays, so you can come back. Delete it first if you prefer.

Unused accounts

An account with no subscription and no sign-in for two years is closed and deleted. We email you a month before, and signing in once keeps it.

Invoices and payments

Seven years, as Dutch tax law requires. This applies even after a deletion request, to those records only.

Withdrawals

Seven years, as part of the payment records Dutch tax law requires us to keep.

Messages to us

Two years after the last message in the conversation, then deleted. Sooner if your account is closed.

Launch email request

Until you turn it off or your account is closed. Once the email is sent, we keep the date so it never goes out twice.

Demo

The date you started it, with your account, until it is closed.

Admin log

Twelve months. When we change your access, send you a notice or reset your two-step verification, the log records what was done and when, never what you wrote.

Server logs

A day at most, then deleted by our host.

Sign-in records

7 days, in our database provider’s logs, for account security.

Rate-limit counters

A day at most. They hold a one-way hash of your IP address or account, never the address itself.

You can ask us for any of the following, free of charge:

• Access: a copy of everything we hold about you.
• Correction of anything that is wrong.
• Deletion of your account and everything in it.
• Portability: your journal in a file you can take elsewhere.
• Restriction: that we pause using your data while a question is sorted out.
• Objection to anything we do on the basis of legitimate interest.
• Withdrawing consent for the launch email, at any time. What we did before stays lawful.

Two of these need nobody’s help: while you subscribe, Settings exports your journal as CSV or JSON, and deletes it, on the spot. After your subscription ends, the page you land on when you sign in still downloads it. Screenshots are not in the export file; ask and we send them. For everything else, email contact@nqtradingjournal.com. We may ask you to confirm it is you. The law gives us a month to answer; we aim for a few working days.

If you are not happy with our answer, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority in your own EU country.

• Everything travels over HTTPS and is encrypted at rest.
• The database itself checks that each account can read only its own rows.
• Screenshots are private. The app shows them through links that expire within an hour.
• Passwords are stored as hashes. Nobody can read yours, including us.
• Two-step verification is available to you, and required for our own admin tools.
• We email you when your password changes or an authenticator is added or removed.
• Sign-in, sign-up, password reset and the withdrawal form are rate limited and protected by a bot check.
• New passwords are checked against known leaks. Only the first five characters of the password’s hash leave our server, and they reveal neither the password nor who you are.
• A strict content security policy blocks outside scripts apart from the bot check and, on the payment step, Stripe, and other sites cannot embed ours.

Found a weakness? Email contact@nqtradingjournal.com. We welcome reports made in good faith.

If a data breach puts your rights at risk, we report it to the Autoriteit Persoonsgegevens within 72 hours of finding it. If the risk to you is high, we also tell you directly, in plain language: what happened, what it means for you and what you can do.

The app computes statistics on your trades and points out patterns in your own record, for you only. It makes no decision about you with legal or similarly significant effects, and nothing about you is profiled for anyone else.

NQ Journal is for adults. You must be 18 or older to have an account. If we learn that a child has one, we delete it.

If we change this policy in a way that matters, such as a new supplier or a new purpose, we email you before it takes effect and change the date at the top. Smaller corrections we make without notice. Ask us for an earlier version at any time.