Privacy Policy & Data Declaration
Last Updated: August 25, 2026. We believe in 100% transparent data ethics. Below is our complete declaration of what data we collect, why we collect it, how it is secured, and how you retain total ownership.
256-Bit SSL Encryption
All data in transit and at rest is secured via bank-grade TLS/SSL encryption.
Zero Data Selling
We never sell, monetize, or disclose your trading logs to third-party brokers or advertisers.
100% User Ownership
Export your journal history or permanently delete your account & data at any moment.
Full User Data Collection & Processing Map
1. Account & Profile Info
Never shared with third partiesFull Name, Email Address, Bcrypt Encrypted Password Hash, Avatar URL
To authenticate your account, maintain secure JWT sessions, manage access permissions, and facilitate password resets.
PostgreSQL Database (TLS/SSL Encrypted at Rest & in Transit)
2. Trading & Performance Data
Never sold, rented, or shared with brokeragesTrade ticket numbers, open/close timestamps, currency pair/symbol (e.g. XAUUSD), lot sizes, entry/exit execution prices, profit & loss (P&L), swaps, and commissions.
To generate your analytical performance reports, monthly P&L calendars, win-rate metrics, risk-reward ratios, and AI Trade Doctor psychological habit audits.
PostgreSQL Database (Isolated per user account)
3. MT5 / MT4 Sync Tokens
Sent only to your designated broker server for authenticationMT5 account login number, broker server name, and read-only investor handshake token / EA Webhook token.
To establish a secure, read-only telemetry bridge with your MetaTrader terminal for sub-second real-time trade ingestion. Cannot place or close orders.
Encrypted memory / isolated DB token record
4. Technical & Network Telemetry
Never stored long-term or shared externallyIP address, browser User-Agent, device OS (Windows/Mac), screen resolution, and session timestamps.
For DDoS protection, automated brute-force rate limiting (5 attempts/min on auth), detecting unauthorized account logins, and responsive UI rendering.
Temporary in-memory sliding window cache (cleared every 60s)
5. Subscription & Payment Records
Never shared; processed strictly for verificationSelected plan tier (Free / Pro / Elite), UTR transaction reference number, transaction date, and payment status.
To verify your plan upgrade, activate Pro/Elite features, maintain billing history, and provide receipt invoices.
PostgreSQL Database (`Payment` table)
6. AI Strategy Queries
Sent strictly as prompt text to Google Gemini AI (No Personal PII attached)Trading strategy text input into the AI Backtester (e.g. 'FVG on 15m with 1:2 RR').
To simulate multi-month historical backtests, win-rate curves, and AI recommendations.
Temporary session payload
1. Password & Credential Security
We never store plaintext passwords under any circumstances. User passwords are automatically salted and hashed using standard BCrypt (10 rounds). Plaintext passwords cannot be viewed or retrieved even by our senior database administrators.
Investor passwords supplied for MT5 / MT4 synchronization operate strictly in a read-only capacity. They cannot place, modify, or liquidate live orders in your brokerage accounts.
2. Cookies & Local Storage Usage
We use secure, HTTP-only session cookies with sameSite: 'lax' to maintain your encrypted login token. No personal identification information (PII) or sensitive passwords are ever saved in unencrypted browser storage.
You can customize your cookie consent at any time via our interactive Cookie Preferences panel.
3. Right to Data Erasure (Permanent Account Deletion)
In full compliance with European GDPR (Article 17) and California CCPA guidelines, you have the absolute right to request permanent erasure of your account and all associated trading data.
When an account deletion is executed via DELETE /api/user/profile or by contacting support, all associated user records, linked MT5 trading accounts, trade tickets, journal entries, and payment references are permanently removed from our production databases.
4. Trademark & Third-Party Disclosures
TradeFXLounge™ is an independent software platform.
MetaTrader 4®, MetaTrader 5®, MT4®, and MT5® are registered trademarks of MetaQuotes Ltd. FTMO, FundedNext, The5ers, FundingPips, and other mentioned proprietary trading firms are trademarks of their respective owners. TradeFXLounge is not affiliated with, authorized, or endorsed by MetaQuotes Ltd or any referenced prop firm.