Privacy Policy

1. Who is responsible

WickLogs is run by Valentinyi Zoltán Viktor, sole proprietor (egyéni vállalkozó, EV). It is not a company. There is no separate legal person: the sole proprietor is personally the data controller.

Seat: 2890 Tata, Kocsi utca 61.. Tax number: 92416871-2-31. Registration number: [[EV_REGISTRATION_NUMBER]]. Contact for everything in this policy: info@wicklogs.com.

Paddle, the payment provider, is a separate controller for payment data (Section 6). The WickLogs Discord community and any future newsletter are covered separately (Section 14).

2. What we collect

This is everything the code stores or receives. Nothing is added from other sources.

• Account: your name, email address, a hashed password (never the password itself), whether your email is verified, your role, beta and waitlist status, a discount flag, and timestamps.
• Login and security: for each session a session token, your IP address and your browser or device description (user agent). Login, sign-up and similar forms are rate-limited by IP address, in server memory only.
• Trade data: for each trade the instrument, direction, quantity, entry and exit price and time, profit and loss, commission, planned stop loss and take profit, the exit reason, and the raw fill record your platform provides. Orderflow snapshots with up to 2300 values per trade. A snapshot can contain the broker account name or ID that your platform reports.
• Journal: your tags, templates, daily entries, trade reviews, notes and weekly summaries. Screenshots you attach are kept in your own browser (IndexedDB) and are not uploaded to our servers at the moment.
• Settings: fee and calculation settings, display preferences and onboarding progress.
• App activity (desktop app, only while you are signed in): when the app is open (a short signal every few minutes while it runs, with the app version) and counts of what you do in your journal, such as how many characters of notes, tags, checklist items and daily entries you wrote. Never the text itself. Together with your trade data (instrument, direction and time of each trade) this shows how much and how the app is used.
• Waitlist: your email, your name and trading platform if you give them. Beta application: your email, name, experience, platform, reason, message and your written answers.
• Messages you send us by email, and a Discord username if you tell us one.
• Purchases (once paid plans are live): Paddle's customer, subscription and transaction IDs, the plan, its status, the period end, the amount and the currency. We never see your card details.
• Website visits: your IP address and request details reach our host Vercel in its server logs. Visitors to the homepage also cause their browser to load headline images straight from the news publishers' servers (Section 12).

Desktop app: your broker login stays on your PC, encrypted with Windows' own protection, and is only sent to your broker's own server. It is never sent to WickLogs. When you are signed in, the app uploads your captured snapshots, fills and preferences to your WickLogs account.

3. Why we use it, and the legal basis

• Run your account, the website, the desktop app and its sync, your journal and your settings. Basis: performing our contract with you (GDPR Art. 6(1)(b)).
• Verification, password reset, invites and replies to your beta application or waitlist entry. Basis: the contract, or steps you asked for before a contract (Art. 6(1)(b)).
• Understand how the app is used, fix problems and ask users for feedback. A person at WickLogs can see, account by account, when the app was last used, for how long, which trades were taken (instrument, direction, time) and whether the journal was used, and may contact you about it. Basis: our legitimate interest in improving the product (Art. 6(1)(f)). You have the right to object (Section 9); if you do, we delete your app-activity records and stop using them.
• Keep the service secure and stop abuse: sessions, IP addresses, rate limits, the audit log of admin actions. Basis: our legitimate interest in a safe service (Art. 6(1)(f)).
• Create and sell the pseudonymized trade dataset (Section 5). Basis: our legitimate interest in selling trade data (Art. 6(1)(f)). You must accept this policy to register, but we do not treat that as consent under Art. 6(1)(a). You have the right to object (Section 9).
• Bookkeeping and tax duties for paid plans. Basis: legal obligation (Art. 6(1)(c)).

We make no automated decisions with legal or similarly significant effect on you, and we build no advertising or marketing profile of you. Looking at how an account uses the app (above) is done by a person, to improve WickLogs and to ask for feedback.

We do not send marketing email. Waitlist and beta emails are about your request only.

4. Who receives your data

Only these, and only what they need:

• Vercel Inc. (USA): Hosts the website and the API; sees every request, including IP addresses.
• Turso (USA): Stores the WickLogs database: accounts, trades, journal, waitlist.
• Namecheap Private Email (mail.privateemail.com): Sends all service emails (verification, password reset, waitlist, beta).
• GitHub, Inc. (USA): Serves the desktop app's update and download files. GitHub sees the IP address of the device that downloads.
• Data Partners, the buyers of the pseudonymized trade dataset (Section 5).
• Paddle, as a separate controller, when you buy (Section 6).
• Authorities, when the law requires it.

Your broker and market-data sources (Rithmic, Tradovate, CBOE, Yahoo and others) are contacted directly by the desktop app on your PC. They see your IP address. They do not receive your WickLogs account data from us.

We use no advertising, analytics or tracking companies.

5. Selling trade data

WickLogs sells trade data. This is part of how the service is paid for. You accept it when you register.

What is sold, per finished trade:

• the instrument and the direction (long or short);
• the entry time and entry price;
• the exit time and exit price;
• the planned stop loss and the planned take profit;
• a pseudonymous trader ID, so one trader's trades can be grouped.

What is never sold: your name, email, password, IP address, broker or account details, quantity, profit and loss, commission, journal, notes, tags, screenshots, raw fills, orderflow snapshots, app-activity records, messages to us, or payment details.

How it is pseudonymized: the trader ID is a one-way code made from your internal user ID with a secret key that stays on our server. Buyers get no key and no way to turn the code back into you. Because we could still link the code to you, the law treats this data as personal data. That is why it is explained here.

Who buys: funds, proprietary trading firms, brokers, financial institutions and data or analytics providers ("Data Partners"). They may use the data for research, model training and market analysis.

Every export of the dataset is logged with its date and size. The log holds no personal data.

Accounts created before 2026-10-05 are not part of any sale unless the owner switches this on via the Account page.

Deleting your account or objecting stops future sales. Data that was already sold stays with the buyer. We cannot recall it and we have no technical way to find it again inside the buyers' systems. It was sold under this policy, which you accepted when you registered.

6. Payments and Paddle

Paddle is the Merchant of Record for paid plans. You buy from Paddle, not from WickLogs. Paddle decides how card and billing data is handled and is a separate controller for it. Its privacy notice is at https://www.paddle.com/legal/privacy.

WickLogs gets only the purchase facts listed in Section 2. We never see or store your card details.

7. Transfers outside the EEA

Some providers are in the United States. These are the safeguards each one documents:

• Vercel Inc. (USA): EU Standard Contractual Clauses (2021/914) built into Vercel's Data Processing Addendum, Schedule 3.
• Turso (USA): [[TRANSFER_MECHANISM_TURSO]]
• Namecheap Private Email (mail.privateemail.com): [[TRANSFER_MECHANISM_NAMECHEAP]]
• GitHub, Inc. (USA): EU Standard Contractual Clauses (2021/914), per GitHub's published data protection terms.
• Paddle: EU Standard Contractual Clauses (Module 1) and the UK Addendum, per Paddle's privacy notice.
• Data Partners (buyers of the pseudonymized dataset): [[TRANSFER_MECHANISM_DATA_PARTNERS]]

You can ask us for a copy of the safeguards that apply to your data at info@wicklogs.com.

8. How long we keep it

We keep only what the code actually keeps. Where nothing deletes data automatically, we say so.

• Account, trade, journal, app-activity and settings data: until you delete your account. Deleting your account (Account page, "Delete account") removes all of it from our database straight away, together with your waitlist entry and beta application matched by your email address and our admin notes about you.
• Sessions: kept while valid and removed with your account.
• Waitlist entries and beta applications: not deleted automatically. We delete them when you ask or when you delete your account.
• Admin audit log (who did what in the admin area): not deleted automatically. It holds admin email addresses and record IDs, not your content.
• Payment records: our Paddle IDs and amounts stay as long as tax and accounting law requires, even after you delete your account. Paddle keeps its own records.
• Pseudonymized data already sold: with the buyers, see Section 5.
• Server logs: kept by Vercel under its own settings. Email correspondence: as long as needed to handle your request and any legal claim.
• Copies in our providers' backups are removed on the provider's own schedule. We have not set a period for those.

9. Your rights and how to use them

• Access: ask what we hold about you and get a copy.
• Correction: ask us to fix wrong data. You can edit your name on your Account page.
• Erasure: delete your account yourself on the Account page, or ask by email.
• Restriction: ask us to pause the use of your data while a dispute is checked.
• Portability: export your trades as a CSV file on the Account page ("Export spreadsheet") or ask us for your data.
• Objection: you can object to processing based on legitimate interests at any time. To object to the sale of your trade data, switch off "Include my pseudonymized trade data in datasets WickLogs sells" on the Account page, or email us. This stops future sales.
• Withdraw consent: where we ever rely on consent, you can withdraw it at any time.

Write to info@wicklogs.com. We answer within one month. We may ask you to prove who you are, so that nobody else can get your data.

10. Complaints and courts

You can complain to the data protection authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9-11., Hungary. Post: 1363 Budapest, Pf. 9., Hungary. Phone: +36 1 391 1400. Email: ugyfelszolgalat@naih.hu. Website: https://naih.hu. You can also complain to the authority in your own EU country.

You can also go to court. In Hungary, data protection claims go to the regional court (törvényszék). You may choose the court for your home or for ours.

11. Age

WickLogs is for people aged 18 or over. We do not knowingly collect data from anyone younger. If you think a minor has registered, tell us and we will delete the account.

12. Cookies, local storage and third-party images

WickLogs uses only storage that the service needs to work: a login cookie, and a few settings kept in your browser. It uses no analytics or advertising cookies, so there is no cookie banner. Details are in the Cookies & storage notice at /cookies.

The homepage news strip shows headline images that your browser loads directly from the publishers' servers (for example Yahoo Finance, CNBC and Investing.com). Those servers therefore see your IP address and can set their own cookies. We send no referrer to them.

13. Security

What we actually do: the site is served over HTTPS; passwords are stored hashed; login and sign-up are rate-limited; the site sends security headers; broker credentials never leave your PC and are encrypted there with Windows' own protection.

No system is perfectly secure. If a breach puts your rights at risk we will tell you and the authority as the law requires.

14. Community, newsletter and other places

The WickLogs Discord server is run on Discord. What you post there is governed by Discord's own terms and privacy notice. Our Discord bot only posts messages and hands out reaction roles. It does not read message content and stores no personal data.

WickLogs does not run a newsletter. If we start one, we will ask for a separate opt-in, with an unsubscribe in every email, and describe it here first.

15. Changes and contact

We may update this policy. The date above shows the current version. For important changes we will email registered users.

Questions or requests: info@wicklogs.com, or write to Valentinyi Zoltán Viktor, sole proprietor (egyéni vállalkozó, EV), 2890 Tata, Kocsi utca 61..