TheSpeculatorsJournal TheSpeculatorsJournal
Home Terms Refund Log In
Legal

Privacy Policy

This document is provided in English. If any translation of this page differs from the English text, the English version governs.

Last updated: September 15, 2026  ·  Effective: September 15, 2026

Plain English summary: We collect only what we need to run the service. We never sell your data. Your trade data belongs to you. You can delete your account and all data at any time.
Contents
1. Who We Are 2. Data We Collect 3. How We Use Your Data 4. Data Storage & Security 5. Data Sharing 6. Cookies 7. Your Rights 8. Data Retention 9. Children's Privacy 10. Changes to This Policy 11. Contact Us

1. Who We Are

TheSpeculatorsJournal ("we", "us", "our") operates the trading journal platform at thespeculatorsjournal.com. We provide tools for traders to log, analyse, and improve their trading performance.

  • Privacy contact: privacy@thespeculatorsjournal.com

This Privacy Policy explains how we collect, use, and protect information when you use our website and services.

2. Data We Collect

Account information: When you register, we collect your first name, last name, and email address. Your password is stored as a one-way bcrypt hash — we cannot read it.

Trade data: All trade entries you log manually or import from brokers (IBKR, Binance, Coinbase, etc.) are stored in our database. This includes entry/exit prices, position sizes, P&L, dates, and any notes or screenshots you attach.

Usage and signup-location data: We log basic server access data (IP address, browser type, pages visited) for security and debugging. When an account is created, we also retain the signup IP address and an approximate country inferred locally from that address using the MaxMind GeoLite2 Country database. For accounts created before we recorded this, the approximate country is instead inferred once from the IP address used at your next sign-in; that sign-in IP address is not retained. This does not provide a precise address or GPS location. We use this information for security, fraud prevention, and aggregate signup analytics. We also use Google Analytics 4 to understand how the site and app are used in aggregate — which pages are visited and which features are used. We do not send your signup IP, trade data, journal entries, or financial figures to Google Analytics.

Referral and attribution data: If you arrive through an affiliate link or a campaign link, we store the referring code or campaign name so the referring partner can be credited. See Cookies below.

Payment data: We do not store payment card details. Payments are processed by third-party payment providers who handle billing data under their own privacy policies.

Communications: If you contact us by email, we retain that correspondence to respond to you.

3. How We Use Your Data

We use your data exclusively to:

  • Provide and operate the TheSpeculatorsJournal service
  • Authenticate your account and maintain your session
  • Send transactional emails — account verification, password resets, billing notices
  • Calculate and display your trading analytics and performance metrics
  • Respond to support requests
  • Detect and prevent fraud, abuse, or security incidents

We do not sell your trade data, analyse it for our own commercial benefit, or use it to train any AI model of our own.

One exception you should know about — the AI Coach. The AI Coach is an optional feature. When you ask it for an analysis, the trade data needed to answer that request is sent to our AI provider, DeepSeek, which generates the response and returns it. This happens only when you actively use the feature — never in the background, and never for users who do not use it. If you would rather no trade data ever leave our systems, simply do not use the AI Coach; every other feature works without it.

4. Data Storage & Security

Your data is stored on servers hosted in a secured environment. We implement the following security measures:

  • Passwords: Hashed with bcrypt (cost factor 12) — never stored in plain text
  • Sessions: PHP sessions with HttpOnly, SameSite=Lax cookies
  • Transport: HTTPS enforced on all pages
  • Database: Parameterised queries throughout — protected against SQL injection
  • Tokens: Password reset and email verification tokens are SHA-256 hashed before storage and expire within 1 hour (reset) or 24 hours (verification)

Despite our efforts, no method of internet transmission is 100% secure. We encourage you to use a strong, unique password for your account.

5. Data Sharing

We do not sell, rent, or trade your personal data to any third party.

We may share data only in these limited circumstances:

  • Hosting — Hostinger: Stores the application and database on our behalf.
  • Payments — Whop: Processes new subscription payments as merchant of record. Whop receives your name, email and payment details directly; we never see or store your card number. Whop receives no trade data. See Whop's privacy policy. Some older subscriptions were billed by Stripe until their paid-through date.
  • AI Coach — DeepSeek: Receives trade data only when you actively use the optional AI Coach feature, in order to generate your analysis.
  • Analytics — Google Analytics 4: Receives aggregate usage data (pages and features used). Receives no trade data.
  • Email — Hostinger SMTP: Delivers account, billing and support email.
  • Legal obligations: If required by law, court order, or to protect the rights and safety of our users

6. Cookies

Essential cookies — these are required for the site to work:

  • PHPSESSID — keeps you logged in. Set only after you log in; HttpOnly (inaccessible to JavaScript); SameSite=Lax; deleted when you log out or close your browser.
  • stj_lang — remembers your chosen language. Expires after one year.

Attribution cookies — these credit the partner or campaign that referred you. They contain a referral code or campaign name, not personal data:

  • stj_ref — affiliate referral code. Expires after 60 days.
  • stj_utm — the campaign or referring site you first arrived from. Expires after 30 days.

Analytics cookies — Google Analytics 4 sets its own cookies (_ga and similar) to measure aggregate site usage.

We do not use advertising cookies or re-targeting pixels, and we do not sell data to advertisers. You can block or delete any of these in your browser; blocking the essential cookies will stop you being able to log in.

7. Your Rights

You have the right to:

  • Access: Request a copy of all personal data we hold about you
  • Correction: Update your name and email in Settings at any time
  • Deletion: Delete your account and all associated data — contact us and we will process this within 30 days
  • Portability: Export all your trade data at any time using the Export feature in Trade History
  • Objection: Object to any processing of your data that is not strictly necessary for the service

To exercise any of these rights, email us at privacy@thespeculatorsjournal.com.

8. Data Retention

We retain your account and trade data for as long as your account is active. If you delete your account, we will permanently delete all associated data within 30 days, except where we are required to retain it by law (e.g. financial records for tax purposes).

Server access logs are retained for a maximum of 90 days.

9. Children's Privacy

TheSpeculatorsJournal is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users by email at least 14 days before any material changes take effect. Continued use of the service after that date constitutes acceptance of the updated policy.

The "Last updated" date at the top of this page always reflects the most recent revision.

11. Contact Us

For privacy-related questions, data requests, or to report a security issue:

  • Email: privacy@thespeculatorsjournal.com
  • Website: thespeculatorsjournal.com

We aim to respond to all privacy requests within 5 business days.

© 2026 TheSpeculatorsJournal  ·  Privacy Policy  ·  Terms of Service  ·  Refund Policy  ·  Home