Privacy Policy

1. Information We Collect

When you use TPS, we collect the following categories of information:

Account Information

• Your name and email address (provided at registration)
• A hashed password — we never store your password in plaintext
• Subscription plan and status

Trading Journal Data

• Trade entries you create: asset, date, session, result, P&L, notes, scores
• Strategies you define and associate with trades
• Pre-trade checklists and post-trade reflections

Analytics Data

• Pages visited and features used, collected via Google Analytics 4
• Aggregate event data (sign-up, login, trade created, subscription purchased)
• GA4 uses anonymised identifiers and does not receive your email address

Payment Information

• Payment status and method (card/SBP via YooKassa, or crypto)
• Subscription plan purchased and amount paid
• For USDT TRC20 payments: the transaction hash (TXID) you submit
• We do not store full card numbers or card CVV codes

2. Google Analytics 4

TPS uses Google Analytics 4 (GA4) to understand how users interact with the platform. GA4 collects anonymised usage data including page views, navigation paths, and custom events. Data is processed by Google LLC and stored on Google servers.

GA4 uses a first-party cookie (_ga) to distinguish unique users. You can opt out of GA4 tracking by installing the Google Analytics Opt-out Browser Add-on or by disabling cookies in your browser. See our Cookie Policy for details.

3. Authentication

Authentication is handled by NextAuth.js using encrypted JWT sessions. When you sign in, a secure HTTP-only session cookie is set on your browser. This cookie is essential for using TPS and cannot be disabled without losing access to your account. Session tokens are signed with a server-side secret and expire after 30 days of inactivity.

4. Payment Processing

YooKassa

Card and SBP payments are processed by YooKassa (LLC YooMoney, Russia). When you pay, you are redirected to or interact with YooKassa's payment interface. TPS receives a payment confirmation webhook from YooKassa but does not see or store your card details. YooKassa's privacy policy governs the data they collect during checkout.

Crypto Payments (USDT TRC20)

For cryptocurrency payments, you transfer USDT on the TRC20 network and submit your transaction hash (TXID). TPS uses the TronGrid API to verify the transaction on the blockchain. The TXID and payment amount are stored in our database. Blockchain transactions are public and irreversible by nature.

5. Third-Party Services

TPS uses the following third-party infrastructure providers:

6. Data Storage and Security

Your data is stored in a Neon PostgreSQL database managed via Prisma ORM. Passwords are hashed with bcrypt (cost factor 12) and never stored in plaintext. All communications use HTTPS/TLS. API endpoints are protected by rate limiting via Upstash Redis.

We apply industry-standard security practices. However, no internet-based system can guarantee 100% security. In the event of a data breach that affects you, we will notify you as required by applicable law.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, your personal data and trade history will be permanently deleted within 30 days. Payment records and transaction hashes may be retained for up to 7 years for tax and legal compliance purposes.

8. Your Rights

You have the right to:

• Export your data — use the Export button in your Trade Journal at any time to download a CSV of all your trades
• Correct your data — edit your profile or any individual trade entry at any time within the app
• Delete your account — contact us at support@tps.app and we will permanently delete all your personal data
• Restrict processing — contact us to request restriction of how your data is used

9. Cookies

TPS uses an essential HTTP-only session cookie for authentication and a first-party analytics cookie from Google Analytics 4. We do not use advertising or tracking cookies. See our Cookie Policy for a full breakdown.

10. Children

TPS is not intended for users under 18 years of age. We do not knowingly collect personal data from minors. If we discover that a minor has registered, we will delete their account promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or a notice in the app. Continued use of TPS after changes constitutes acceptance of the updated policy.

12. Contact

For privacy questions or data requests, contact us at support@tps.app.