1. About This Notice

This notice describes how the current Winners Journal service handles account, journal and support information. For questions about your information, use our contact page. Signed-in users with verified email can use support tickets.

2. Information You Provide

• Account and security information: Your name, email address, password hash and the security methods you choose, such as two-factor authentication or passkeys.
• Journal information: Trading accounts, imported or manually entered trades, dates, prices, results, notes, tags, setups, reviews, checklists and uploaded images.
• Profile and preferences: Optional profile fields, avatar and settings you choose to save.
• Support information: Messages and attachments you submit to support. Authorized support administrators can access these tickets and attachments.
• Optional AI chat: Questions, replies and records of your sharing consent. AI chat processing is described below.

3. How Information Is Used

Information is used to provide your journal and statistics, manage account access and security, respond to support requests and diagnose service errors. Account verification and password-recovery messages use the configured email service. Replies to support tickets are available in the app; support-email delivery and monthly report emails are not currently enabled.

4. Optional AI and Connected Services

When AI chat is available and you give consent, your question, recent conversation and a selected-account trade summary are sent to the configured provider, OpenAI, Anthropic (Claude) or OpenRouter, named in the chat consent. OpenRouter forwards requests to its selected model provider; its free router can select different free models. The summary covers the selected history and includes up to 50 recent trade details. It can include trade symbols, dates, prices, sizes, results, currency and account timezones.

The generated trade context excludes account identity, private journal notes, attachments and broker credentials. Anything you type into a question can itself contain personal or sensitive information and is sent with that question. Questions, replies and consent records are also saved privately by Winners Journal. Starting a new chat does not delete earlier saved requests.

If you connect cTrader, the service exchanges authorization and trading-history information with Spotware to retrieve the connected account's history. Candle charts can request public symbol, time-window and interval data from Yahoo. These functions depend on their availability and your access; viewing this notice does not connect an account or send an AI request.

Configured hosting and email services may process the information needed to operate the service. Provider processing and storage are subject to the applicable provider's terms; this notice does not promise a particular provider retention period.

5. Storage and Security

If you connect MetaTrader through MetaApi, your platform, broker server, login and investor password are sent to MetaApi to run a paid cloud terminal. The application verifies investor-only access before importing history. Your investor password is held encrypted locally while provisioning is unresolved, then erased once the cloud account is identified or removal is requested. MetaApi holds the broker connection credentials and returns account details and trading history. Disconnect requests removal of the cloud connection; it does not delete your broker account or saved journal trades. Removal can require retries or operator review, and cloud charges may continue until MetaApi confirms removal.

Passwords for signing in to Winners Journal are stored as one-way hashes. Selected sensitive fields, including saved AI questions and replies, cTrader access credentials, pending MetaTrader investor passwords and staged broker history, use application-level encryption. Private images, support attachments and exports use authorized download routes rather than public storage links.

Protection of stored databases, files, backups and network connections also depends on the hosting and deployment configuration. Application-level encryption of selected fields does not establish encryption of every stored record, file or backup.

6. Cookies and Browser Storage

The service uses first-party session cookies to keep you signed in and request-protection mechanisms to prevent forged requests. Choosing remember me can add a persistent authentication cookie. Sign-in is not stored as a session token in localStorage.

Browser storage is used for preferences such as theme and device-local trading settings. Clearing browser preferences is separate from signing out or deleting information saved on the server.

7. Retention and Deletion Controls

Available journal controls let you remove individual records or explicitly clear a selected account's history. Private image cleanup can be delayed by a storage error and retried after the record is removed.

You can request account deletion even when you have trading history. The account form requires your current password, your exact current email and explicit acknowledgement of irreversible deletion. Once accepted, local sign-in access and connected-account credentials are revoked, and removal of active application data and private files begins.

A private status link distinguishes processing, operator review, documented retention holds and completed active-data removal. MetaTrader cloud removal must be confirmed before its connection receipts are erased. A storage error or unresolved reference can delay completion; submitting a request is not confirmation that all files have been erased. Starting a new chat, signing out or losing subscription access does not itself erase history.

A documented retention obligation can pause erasure for operator review. We do not assign an undocumented legal retention period or promise deletion of backups, operational logs or copies already held by external providers within 30 days. Those copies and any legally retained records require separate documented handling. Final backup and legal retention arrangements must be confirmed for the request concerned.

8. Access and Corrections

You can review and correct information through the available account and journal controls. Trade CSV/PDF exports require the applicable export access and cover the selected trade scope; they are not a complete export of every personal record. Contact support about information or requests outside these controls.

9. Updates and Contact

The date above identifies this version of the notice. Review this page for current service information and contact us with questions about a change. No automatic email notice or fixed response deadline is promised by this page.