Privacy Policy

We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about our policy, or our practices with regards to your personal information, please contact us.

This Privacy Policy governs the privacy policies and practices of our Website, located at Tradingster.com. Please read our Privacy Policy carefully as it will help you make informed decisions about sharing your personal information with us.

Information We Collect

As a Visitor, you can browse our Website to find out more about our Website. You are not required to provide us with any personal information as a Visitor.

Information You Provide to Us

We collect your personal information when you express an interest in obtaining information about us or our products and services, when you participate in activities on our Website Site or otherwise contacting us.

Generally, you control the amount and type of information you provide to us when using our Website. The personal information that we collect depends on the context of your interaction with us and the Website, the choices you make and the products and features you use. The personal information we collect can include the following:

Name, Email Address and Contact Data

Automatically Collected Information

When you use our website, we may receive technical information such as an IP address, browser information and request records. This information can relate to you.

Cookies

Cookies are small pieces of information stored by your browser. Our website uses them for site functions, including an essential session cookie when you sign in. A session identifier can relate to your account even though the cookie does not contain your email or password. Browser settings let you manage cookies; blocking essential cookies may prevent sign-in. The account section below explains other account-related browser storage.

Log Information

Our server and proxy logs can record an IP address, request path and query, time, response status, referrer and browser information. We use these records to operate the website and investigate problems and abuse. Do not put passwords or other sensitive information in URLs.

Information Regarding Your Data Protection Rights Under General Data Protection Regulation (GDPR)

For the purpose of this Privacy Policy, we are a Data Controller of your personal information.

If you are from the European Economic Area (EEA), our legal basis for collecting and using your personal information, as described in this Privacy Policy, depends on the information we collect and the specific context in which we collect it. We may process your personal information because:

We need to perform a contract with you, such as when you use our services
You have given us permission to do so
The processing is in our legitimate interests and it's not overridden by your rights
For payment processing purposes
To comply with the law

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. In certain circumstances, you have the following data protection rights:

The right to access, update or to delete the personal information we have on you
The right of rectification
The right to object
The right of restriction
The right to data portability
The right to withdraw consent

Please note that we may ask you to verify your identity before responding to such requests.

You have the right to complain to a Data Protection Authority about our collection and use of your personal information. For more information, please contact your local data protection authority in the European Economic Area (EEA).

"Do Not Sell My Personal Information" Notice for California consumers under California Consumer Privacy Act (CCPA)

Under the CCPA, California consumers have the right to:

Request that a business that collects a consumer's personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.
Request that a business delete any personal data about the consumer that a business has collected.
Request that a business that sells a consumer's personal data, not sell the consumer's personal data.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

Service Providers

We employ third party companies and individuals to facilitate our Website ("Service Providers"), to provide our Website on our behalf, to perform Website-related services or to assist us in analyzing how our Website is used. These third-parties have access to your personal information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Analytics

Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.

You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity.

For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: http://www.google.com/intl/en/policies/privacy/

COT tool feedback

When available, Send feedback opens a form hosted by Tally. We use your answers to understand problems and improve Tradingster. You may submit without an email address. Screenshots are optional; do not include passwords, account details or other sensitive information in your message or attachments.

The link supplies the tool name, where you selected the link, whether it came from production or staging, and the contract code on COT Analysis. It does not supply your member ID, account email, session, watchlist, full page URL, report date or app version. Tally receives information when you visit and use its form under its own privacy policy.

Feedback is processed through Tally, a private Google Sheet and owner email notifications. An optional email address is used only to follow up about your feedback with your permission. Giving that permission does not subscribe you to Tradingster Updates or other marketing emails; newsletter signup is separate. Use the contact details below for questions about your feedback data.

Tradingster accounts and Watchlists

When accounts are available, we use your email address and account identifier to provide sign-in and save your Watchlist. We record verification and account status, account and update dates, and your saved markets, their names, report types and order. A Watchlist is a list of markets; it does not contain your brokerage account, trading positions or balances. Creating an account does not subscribe you to Tradingster Updates. The registration form has an optional newsletter box that is not selected for you; if you tick it, we send a confirmation email and you are subscribed only after you confirm. Newsletter unsubscribe and account closure are separate.

Authentication and account emails

We use Supabase for authentication and Twilio SendGrid to deliver verification and password-reset emails. Passwords pass securely through Tradingster to Supabase; they are not stored in Tradingster's account or Watchlist database tables. SendGrid processes recipient and delivery information and may record account-email opens. Authentication buttons are excluded from click tracking. The newsletter's no-tracking statement applies to newsletter messages, not account emails. Delivery reports may also reach our mail-handling service and owner mailbox.

DigitalOcean hosts our website and database; Cloudflare provides site proxying and stores website database backups. Our hosted account database and Supabase authentication project are in the United States. Our protected staging website uses the same account and Watchlist data as the main website.

Cookies, browser copies and security records

An essential cookie identifies your signed-in session; authentication tokens are kept in private server sessions. Account access expires after seven days without activity or thirty days from the start of a session. These are access limits, not account-deletion periods. Cleanup of eligible idle session files is scheduled hourly; removal is not guaranteed at the exact expiry time.

Your browser remembers your Watchlist display preference and keeps markers used to coordinate sign-in and saved-data changes between pages. Where optional browser caching is enabled, it also stores account-linked Watchlist and COT result copies, without your email, password or authentication tokens. Reuse is limited to up to twenty-four hours, or thirty minutes for the market catalogue, and requires a fresh access check. Expired copies are removed when the website's script runs; an offline device may retain them longer. Display preferences and local change markers have no automatic time limit. Clearing Tradingster site data removes browser-held state and signs that browser out; it does not delete your server account or Watchlist. We cannot remotely erase copies already saved on an offline device.

We also use request counters, coded identifiers and security logs to prevent repeated attempts and investigate problems. Logs may include an IP address, request path, time and browser information. Coded identifiers and session identifiers can relate to you; they are not anonymous data.

Retention, requests and recovery limits

Accounts, saved Watchlists and unconfirmed signups are kept until a verified deletion request is handled or an explicit decision is made to close the account or service. There is no automatic account deletion for inactivity. Removing an item from My Watchlist changes the current saved list; it does not erase every older recovery copy.

When accounts are available, Settings lets you review account details and change your password; My Watchlist lets you change your saved markets. Settings has no email-change, data-export or account-deletion controls. For access, correction or deletion requests, use this policy's contact details and identify the account concerned. We may need to verify that you are entitled to make the request. Do not send passwords, session cookies or verification codes. Requests require owner-assisted review; submitting one does not itself erase data. We will explain what can be completed, what needs separate handling and any retained records.

Account-email information has separate retention rules. SendGrid's email-log visibility is up to thirty days; its documented handling keeps most delivery metadata for up to thirty-seven days and some pseudonymized events for up to a year, with separate sending restrictions and legal exceptions. Visibility limits are not deletion guarantees. Automatic cleanup of our downstream account-email reports is not yet enabled. Necessary delivery restrictions may need to remain to prevent unwanted mail; account deletion or a later signup does not automatically remove them. Newsletter retention periods do not apply to these account records.

Security and request records need separate review. We keep necessary evidence to handle outstanding requests, investigate security issues and prevent removed or restricted accounts from being reopened through recovery. There is no single automatic deletion deadline for all security records. Working request exports, if prepared, are to be removed after confirmed delivery and case closure; minimum outcome and recovery-restriction evidence may be needed longer.

Existing website database backups include account and Watchlist tables. Local copies use a five-day pruning setting, cloud copies a sixty-day expiry setting, and the database provider offers a separate seven-day recovery window. Job and provider processing can delay physical deletion. These database copies do not include Supabase authentication identities, and complete account recovery has not been verified. During this free preview, we cannot guarantee recovery of your account or saved Watchlist after a serious service failure. You may need to create a new account and rebuild your Watchlist, and the member tools may remain unavailable. Keep a separate note of the markets you follow. An unrecoverable failure could permanently lose some or all accounts and Watchlists. Advance notice of a planned preview end does not guarantee uninterrupted service during an unexpected outage. Backup copies expire separately from current records. Any recovery must preserve applicable deletions and restrictions before restored account data becomes accessible; this requirement is not a claim that recovery has been tested.

Tradingster Updates newsletter

Effective date: October 16, 2026.

Who is responsible

Neotec Solutions Co., a Hong Kong-registered company, is responsible for the personal data used for Tradingster Updates. Contact [email protected] or write to 1321 Upland Drive, Suite 1900, Houston, TX 77043, USA.

This section covers the newsletter and its signup, confirmation, unsubscribe and preference pages on updates.tradingster.com.

Your choice to subscribe

The signup choice is:

Yes, email me Tradingster updates: new features, product news and occasional market insights. I can unsubscribe at any time.

The checkbox is not selected for you. Signup through our newsletter page, other site placements such as the footer, and the optional box on the account registration form uses double opt-in. After requesting a subscription, follow the confirmation email's link and select Confirm subscription. The link expires after 48 hours. An unconfirmed request through these routes does not make you an active subscriber. If you did not request the email, you can ignore it.

Creating a Tradingster account does not by itself subscribe you to the newsletter.

Earlier Tradingster emails were sent through Mailchimp. In October 2026 we briefly copied our Mailchimp subscribers into our new newsletter service, without emailing them, and then removed them again, because most had not received a newsletter for many years. Their earlier unsubscribe choices were kept. Recent Mailchimp subscribers received one email from Mailchimp inviting them to subscribe again; no reminder will be sent. To receive Tradingster Updates, please subscribe through our newsletter page. Mailchimp's unsubscribe and preference links keep working until we close that account.

Emails come from [email protected]. Replies go to [email protected].

Information we use

We use newsletter information to send the emails you chose, record your choices, prevent unwanted mail and deal with delivery or security problems. This includes:

Your email address, newsletter list, confirmation status and subscription choices.
Consent records: the action and its source, consent wording and version where applicable, verification references, and the dates of requests, confirmation and withdrawal. Reference numbers help us recognise duplicate requests.
Delivery records from Twilio SendGrid, including message references, delivery or delay, bounces, dropped messages, spam complaints and provider-wide unsubscribes. Relevant raw event reports are kept encrypted and may include your address and technical delivery details.
Do-not-email records, including a coded identifier derived from your email address, the reason for a restriction and relevant dates.
Newsletter-page session information, which can include your IP address, browser information and last activity. We also use short-lived coded IP identifiers to limit repeated signup requests. IP addresses and browser information are not added to the newsletter's consent-event history.

Consent and subscription records are described above.

Newsletter signup, confirmation and preference forms use essential session cookies. Unsubscribe does not require a login, cookies or a CAPTCHA.

Tracking and your preferences

We do not use email open or click tracking. Delivery records do not tell us whether you read an email. Website privacy practices still apply when you follow a normal link.

Newsletter and confirmation emails include unsubscribe and preference links. Where your mailbox offers it, you can also use its one-click unsubscribe option. You can contact [email protected] for help. Opening an unsubscribe page alone does not change your choice; selecting Unsubscribe does. Messages already submitted for delivery may still arrive.

We keep your withdrawal so that a profile change, old request or imported list does not add you back by mistake. If you later choose to subscribe again, you must complete a new double opt-in confirmation. A complaint or permanent-bounce restriction is separate and is not automatically removed by signing up again. Unsubscribing from this newsletter does not close a Tradingster account.

Service providers and storage

We use Twilio SendGrid for email delivery in the United States. It receives the recipient address, email content and message references, and supplies delivery and restriction information.

DigitalOcean hosts the newsletter application and managed database in the San Francisco region, SFO3, United States. Cloudflare provides the proxy/CDN for newsletter pages and stores encrypted database backups. Its backup location setting is Automatic (APAC); this does not promise a particular country. Data is therefore handled outside Hong Kong.

We use Zoho Mail for contact and reply emails, which are forwarded to the owner's personal mailbox. If you email us, we receive your email address and the information you include in your message.

How long we keep information

We keep newsletter information only as long as needed to send the newsletter and honour your choices. We keep opt-out records as long as needed to prevent unwanted mail. We review the need to keep these records at least once a year.

Encrypted database backups are made every 6 hours and kept for 14 days. They expire through the storage provider's deletion process rather than being edited individually whenever a record changes.

DigitalOcean also makes automatic managed-database backups, kept for 7 days. We do not keep downloaded backup copies.

When we removed the copied Mailchimp subscribers, we kept a protected archive of the removed records, and an export of our former Mailchimp list, only to document that change. We will delete them by April 2027.

Contact and reply emails are kept only as long as needed to handle the request.

Access, correction and deletion

Email [email protected] with the address concerned and tell us whether you want access, a correction or deletion. We may need to check that you are entitled to make the request. Please do not send passwords or verification codes.

The owner handles privacy requests by email and will answer within 30 days.

You may complain to the Hong Kong Office of the Privacy Commissioner for Personal Data (PCPD). If you are in the EEA or UK, you may also complain to your local data protection authority. See the EEA complaint guidance or the UK Information Commissioner's Office (ICO).

Unsubscribe stops future newsletter submissions; it does not erase every record. We review deletion requests individually and explain what can be removed and what needs to be kept. A minimum do-not-email record may still be needed to honour your withdrawal and prevent accidental resubscription. Its coded email identifier is still personal data, not anonymous information.

A new email address needs its own consent and verification. Deleting newsletter data does not automatically delete a website account or remove SendGrid's delivery restrictions. Backup copies expire separately; withdrawals and deletion requirements must be reapplied if a backup is restored.

Children's information

Tradingster Updates is for a general audience and is not directed at children under 13, or under 16 in the European Economic Area (EEA) or United Kingdom. If you are a parent or guardian and believe we hold your child's newsletter information, email [email protected] to ask us to delete it. We will review the request and explain any minimum record needed to prevent further unwanted email.

Changes to this section

This section takes effect on its publication date. We show changes by updating the effective date above. We also announce material changes in the next newsletter.

Contacting Us

If there are any questions regarding this privacy policy you may contact us using email: