Privacy Policy

1. Information We Collect

Google Profile Information

When you sign in with Google, we receive your name, email address, and profile avatar. This is the minimum information needed to create and identify your account.

Trading Data

We store the strategies, trades, and settings you create within the Service. This data is essential to providing the backtesting functionality.

Payment Information

If you subscribe to a paid tier, payment is processed by Stripe. We receive confirmation of your subscription status but do not store your credit card number, CVV, or full billing details on our servers.

2. How We Use Information

We use the information we collect to:

• Provide the Service — run backtests, save strategies, display results
• Authenticate users — verify your identity via Google Sign-In
• Process payments — manage subscriptions through Stripe
• Improve the product — understand usage patterns to build better features

3. Data Storage

Your data is stored on our Hetzner dedicated server infrastructure located in Finland and Germany (EU). All data in transit is encrypted via HTTPS (TLS 1.2+).

We implement reasonable security measures to protect your data, including encrypted connections, secure authentication, and regular backups.

4. Third-Party Services

We integrate with the following third-party services:

• Google — Authentication (Sign-In). Subject to Google's Privacy Policy.
• Stripe — Payment processing. Subject to Stripe's Privacy Policy.

We only share the minimum information necessary for these services to function (e.g., your email for authentication, payment details for billing).

5. Cookies

We use session cookies strictly for authentication purposes. These cookies are:

• httpOnly — not accessible via JavaScript, preventing XSS attacks
• Secure — only transmitted over HTTPS
• Session-scoped — expire when you close your browser or after a set period

6. Data Retention

We retain your data for as long as your account remains active. If you request account deletion, we will remove your personal data and trading data from our servers within 30 days.

Some data may be retained in encrypted backups for up to 90 days after deletion for disaster recovery purposes, after which it is permanently removed.

7. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correct — update or fix inaccurate personal information
• Delete — request deletion of your account and associated data
• Export — receive your trading data in a portable format

To exercise any of these rights, email us at support@gigachadcharts.com. We will respond to your request within 30 days.

8. Children

GigaChadCharts is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will take steps to delete that information promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or a prominent notice within the Service at least 14 days before the changes take effect.

The "Last updated" date at the top of this page indicates when the policy was last revised.

10. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

support@gigachadcharts.com