Privacy

What we store

• Your email address and username.
• A one-way Argon2id hash of your password. It cannot be reversed, so nobody here can read your password — not even us.
• Sign-in sessions: when they started, when they were last used, the browser name, and a hashed form of your IP address. We do not keep raw IPs.
• A security log of account events: sign-ins, password and email changes.
• Which emails you have asked for: two switches, one for the newsletter and one for offers. Both are on the sign-up form, both can be changed from your account page, and every message we send carries a link that changes them without signing in. Service and security messages — sign-in codes, password resets, notices about your account — are not marketing and are always sent.
• Your subscription state, once billing exists. Payment and card details live with Paddle, the merchant of record — they never touch this server.
• If you enable cloud sync: your settings, layouts and custom indicator source, stored compressed against your account.

What we never receive

Your trades. Positions, trade history, replay sessions and the price data itself are written next to your MetaTrader terminal, in a folder you choose. Prices flow from your broker to your terminal to your browser and stop there.

This is a design decision, not a promise about our intentions: we could not hand over your trading history if we were compelled to, because we do not have it. Replay files also happen to be megabytes each, so the incentive runs the same way.

What syncs, if you turn it on

Cloud sync stores your settings, layouts and custom indicators so a second computer picks up where the first left off. It is optional. With it off, the same profile still moves between your browsers through the EA, and nothing reaches us.

Your private indicator code is private. It is stored so it can sync, and it is not listed, searched, shown to other users, or reachable from our admin console — there is no screen in it that can open your profile. If you want us to see one, publish it or send it to us.

Being straight about the limits: a synced indicator sits in our database, so a serious breach of that database, or a lawful order naming it, could expose it. If an indicator is valuable enough that this matters to you, leave cloud sync off — the app is fully usable without it.

Publishing to the library

Publishing is a separate, deliberate action with its own confirmation. When you publish, that indicator becomes visible to everyone and you grant the licence set out in the terms — which includes letting us use and adapt it. Unpublishing removes it from the library; copies other people already installed stay on their machines.

Why we are allowed to store it

To run your account and, when billing is on, to take payment — performance of a contract with you. We do not profile you, we do not sell anything to anyone, and there is no third-party advertising or analytics on this site. Even the font files are served from our own server, so opening a page here sends nothing to anyone else.

Keeping the product working also means knowing which parts of it are worth the effort, which is our legitimate interest — see Counting what gets used below for exactly what that amounts to.

Counting what gets used

We count, first-party, which parts of the product people use: which drawing tool was picked, which timeframe a chart was switched to, which indicator was added, a handful of app features, and which page of this website was opened. It is how we decide what to improve and what to retire.

What is stored is a daily total: a date, the thing, how many times it happened, and how many different accounts did it. That is the whole record. There is no log of who did what, in what order, or when; nothing records the symbols you trade, your prices, your positions or your money; and our own admin console has no screen — and no query behind one — that could show what any individual account uses.

To count people rather than clicks we do have to remember, briefly, that your account has already been counted for a given thing today. Those rows are deleted after a few weeks, they go immediately if you delete your account, and they are never used for anything else.

No cookie is set for any of this, nothing is sent to a third party, and if you are not signed in there is no identifier attached at all — the page view is counted and that is the end of it.

Cookies

You were not asked to accept cookies because EU law only requires consent for cookies that are not necessary — advertising, analytics, tracking. We set none of those: the usage counting described above deliberately sets no cookie of its own and stores no identifier for a signed-out visitor, which is what keeps it out of that category. Every cookie here is ours and functional:

The charting app also stores your layouts and settings in your browser’s own storage, on your machine. That is the product working, not tracking; it never leaves your computer unless you turn on cloud sync.

Your rights

You can download everything we hold from your account page, correct it there, or delete your account. Deletion is scheduled 30 days out so a mistake is recoverable; after that the record is removed, not flagged.

Questions, or a complaint: support [at] chartsynq.com. You also have the right to complain to your national data protection authority.

Who else is involved

• Our hosting provider, which stores the account database.
• Our email provider, which delivers verification and reset messages.
• Paddle, once payments are enabled, which is the merchant of record and handles card details and tax so that we never see them.