Privacy Policy
Last updated: May 15, 2026
Who we are
We operate EndureTrade — a trading journal delivered as a Chrome extension and web application. The Service helps you log trades, add notes and tags, capture optional chart screenshots, and review saved sessions in your account. References to “we”, “us”, “our”, or the “Service” mean the operator of EndureTrade and its associated services.
EndureTrade is not affiliated with, endorsed by, or sponsored by any charting platform, broker, or other third-party trading service. You choose when to save data using the extension or the web app.
Information we collect
We collect only the information necessary to provide and improve the Service:
-
Account information: When you sign up or log in, we receive your email address and basic authentication identifiers. We do not collect or store additional profile information unless you voluntarily provide it.
-
Journal session and trade data: Session records and individual trades (for example entry/exit prices, timestamps, symbols, and related fields you enter or confirm), plus tags, strategy labels, notes, and optional screenshots you choose to attach. This data is created when you initiate capture or entry via the Chrome extension on web pages where you use the Service, or when you enter or upload information manually in the web app. We do not run silent background collection of third-party page content.
-
Personal memos: Optional Markdown notes you create in the extension or web app, including free-text tags and images you paste into a memo. Memos are stored in your account and are not tied to a specific trade unless you reference that in the text yourself.
-
Technical and usage data: IP address, browser type and version, device information, extension version, and basic interaction data (e.g., page views, feature usage) collected through normal web and extension requests.
-
Support and contact information: Any details you voluntarily provide when contacting us (name, email, message content, support tickets).
We do not collect:
- Payment information (handled by third-party processors if you upgrade)
- Location data beyond IP-derived country-level information
- Any sensitive personal data (health, religion, political views, etc.)
How we collect data
-
Chrome Extension: When you are signed in and use extension features, we process information you choose to save — for example trades and session details you log or confirm, notes and tags you add, and optional screenshots of the browser tab you are on. The extension may read on-page content on sites where you activate journal features, solely to support those user-initiated actions. We do not use the extension to read or sync content from sites you have not used with the Service for journaling. Chrome may list additional technical permissions (for example for screenshot capture or storage); those support the features described here.
-
Web Application: You sign in to view and manage saved sessions and trades, tags, notes, screenshots, personal memos, and account settings. You may also create or edit journal data entirely in the web app without the extension.
-
Cookies & Local Storage: Essential cookies and local storage are used for authentication, session management, preferences, and core functionality. Optional analytics cookies are used only with your consent.
Cookies and Analytics
We use Google Analytics (with Google Consent Mode) to understand usage and improve the product. You can accept or reject analytics tracking via the cookie consent banner. When analytics is declined, we limit or avoid sending personal data to Google.
You can also manage preferences through the cookie settings link in the footer.
Why we process your information (Legal bases — GDPR/UK style)
We rely on the following legal bases:
- Performance of contract: To provide the core Service (storing and letting you review journal session and trade data you choose to save).
- Legitimate interests: Security, fraud/abuse prevention, product analytics and improvement, and maintaining a safe service — balanced against your rights.
- Consent: For optional non-essential cookies and analytics.
- Legal obligation: When we are required to process or retain data to comply with laws.
Data retention
- Session and trade data (and your notes, tags, screenshots) and personal memos you save: Kept until you delete them or close your account. We may retain limited backups for a short technical recovery window.
- Account information: Retained while your account is active, plus a reasonable period afterward for legal or security purposes.
- Technical logs: Deleted or anonymized after a short period (typically 30–90 days), unless needed for security investigations.
Sharing and subprocessors
We do not sell your personal information or your saved session and trade data.
We share data only with trusted subprocessors necessary to operate the Service:
- Cloud infrastructure providers (authentication, database, and file storage)
- Application hosting providers
- Google (Analytics, with consent)
- Email / support tools (if used)
All subprocessors are subject to appropriate data processing agreements. We may also disclose information if required by law, to protect our rights, safety, or property, or in connection with a business transfer.
International data transfers
Our primary infrastructure is hosted in the United States through our cloud providers. If you are located in the EEA, UK, Switzerland, or another region with transfer restrictions, we use Standard Contractual Clauses (SCCs) and other appropriate safeguards. You can request details about our current subprocessors and transfers by contacting us.
Your rights
Depending on your location, you may have rights to:
- Access, correct, or delete your personal data
- Restrict or object to certain processing
- Data portability
- Withdraw consent (where processing is based on consent)
To exercise these rights, contact us via the in-app support form or the contact details on our website. We will respond within legally required timeframes.
You also have the right to lodge a complaint with your local data protection authority.
Children
Our Service is not directed at children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect data from children.
Security
We implement reasonable technical and organizational measures to protect your data (encryption in transit and at rest for sensitive fields, access controls, etc.). However, no system is completely secure.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version here with an updated “Last updated” date. Where changes are material, we will provide additional notice (e.g., via email or in-app banner) and, if required, refresh consent.
Contact us
For any privacy questions, requests, or concerns, please reach out through:
- The in-app support / contact form, or
- The contact details published on https://www.enduretrade.com
Related: Terms of Service