How Your Data Is Used

Last updated September 14, 2026

What this page is for

This is a plain summary of what Chart Ding collects and where it goes. It is written to be read rather than survived.

It supplements the Privacy Policy, which is the fuller document and the one that governs if the two ever disagree.

The short version

Your trades and your journal notes stay on your own device. We hold no copy — unless you choose to send us a broker file, which we delete within 30 days.
Alarm and clock settings are stored on your device too, unless you turn on cloud sync.
We use one analytics service to see which parts of the app get used. It records the path taken — not the screen.
We do not sell data, and we do not share it with advertisers or data brokers.
You can export or delete what we hold, at any time.

What we collect

To have an account at all

Your email address
Your password, stored hashed — we cannot read it
Which plan you are on, and whether it is active

To keep the app working and the account secure

Device type, operating system, browser and app version
Error logs
IP address, and the approximate area it maps to
Sign-in times, last activity, and how many devices are using the account

That last group exists to stop accounts being shared against the Terms of Service. It is not used for anything else.

Only if you turn on cloud sync (Pro and Pro Plus)

Your alarms, clock settings and profiles, so they can follow you between devices

Only if you choose to tell us

Which broker an imported file came from. This is optional and declining changes nothing.
A broker file you choose to send us so we can add support for it, with the email address and note you give — see Sending us a file below.

What we do not collect

Your location or GPS position
Your contacts, photos, camera or microphone
Your browsing history outside our own site
Any brokerage or bank login, or any account number — other than what may be inside a file you choose to send us
Health, fitness or social media data

We also never see your card. Payments go straight to Stripe.

Where each kind of data lives

What	Where it is held
Imported trades, and everything calculated from them	Your device only
Journal notes and tags	Your device only
Alarms, clock settings, profiles	Your device — and our database only if cloud sync is on
Custom sounds	Your device. Cloud sync carries a sound's name, never the audio
Email address, password, plan	Our database
A broker file you choose to send us	Our private storage — deleted within 30 days
Card details	Stripe. Never us.

Imported trades are the important row. The trade analysis dashboard reads a file you export from your broker and does its arithmetic in your browser. The file is not uploaded, and we have no copy of it. It also means that if you clear your browser data, the trades go with it — they can be exported from your broker again.

Reading an unfamiliar broker file

When a file is imported, we may ask which broker it came from. Answering is optional.

If you answer, we record the names of the columns in that file — headings such as Date, Action, Symbol, Quantity — along with the broker you named, whether we recognized the format, how many rows the file had and how many became trades.

Nothing from inside the file is recorded. No prices, no quantities, no symbols, no dates, no account names, and not the file's name. Only the headings at the top of the columns, and a count of the rows beneath them.

This exists so formats we handle badly can be found and fixed. A file we failed to read is more useful to us than one we read correctly, because it is the one that shows what needs work.

Sending us a file

If we cannot read a file from your broker, the Import screen offers to send it to us so we can add support for it. You can also send a sample file from a broker we do not read yet. It is optional, you do not need an account, and nothing is sent until you tick the box saying you want to send it.

What we get: the file, the email address you enter so we can reply, and your note if you write one. A broker file can contain account numbers and your trade history.
What it is for: building import support for that kind of file. Nothing else.
Who can open it: Chart Ding staff. It is kept in private storage, not anywhere public.
How long we keep it: we delete the file within 30 days, along with its name and your note. We keep a record that a file was sent — the date, your email address, and the file's size and type — like any other support message.
Want it gone sooner? Reply to any email from us about it, or use the contact form, and we will delete it.

To stop the feature being flooded, we also keep a salted hash of the sending IP address — it cannot be turned back into the address — and delete it with the file.

Testing Chart Ding with us

If you apply at www.chartding.com/testers, or we invite you, here is what the tester program keeps.

What we get: your name, your email address, and your answers — where and what you trade, what you track trades with today, roughly how many trades a month, whether you would send us a file that does not import, and your computer and browser. If you become a tester, we also note when you claimed your year of Pro Plus and which account claimed it, and later your two-week check-in answers.
What it is for: running the test — choosing testers, knowing which broker files are coming, sending you the invitation, approval and check-in emails, and deciding what to fix. Nothing else.
Who can see it: Chart Ding staff, in our admin panel. It is not public, and it is not sold or shared.
How long we keep it: while the tester program runs. Want it gone sooner? Reply to any email from us about the program, or use the contact form, and we will delete it.
Quotes: we only quote you if you said yes in your check-in, and any quote we use says you received a free year of Pro Plus as a tester.

To stop the form being flooded, we also keep a salted hash of the IP address an application came from, and clear it once the application has been approved or declined.

Who else sees anything

Service	What it gets	Why
Stripe	Your email, and the payment itself	To take payments. stripe.com/privacy
Supabase	Email, hashed password, synced settings if sync is on, and any file you choose to send us	The database and sign-in behind the app. supabase.com/privacy
PostHog	How the app is used — see below	To see what people actually use
StatCounter	Basic visit counts	Traffic measurement
Resend	Your email address	To send account, renewal and tester program emails
PromoteKit	Only if you arrived through an affiliate partner's link: a referral cookie, your email address if you then create an account, and the amounts paid and refunded if you pay. The partner who referred you can currently see your email address	To pay our affiliate partners their commission. Section 4.6 of the Privacy Policy
App stores	Installs and crash reports	Only if you installed from a store

We do not share your data with advertising networks, data brokers, or social platforms, and we do not sell it.

About the analytics

We use PostHog to understand how the app is used. It records which pages and tabs get opened, clicks on buttons, and a small number of specific events — starting an alarm, completing signup, starting a checkout.

It also records the path taken through the app — which controls were used, in what order, and where a page was scrolled. That is a list of actions with times against them. Nothing on your screen is captured, and text typed into the app is hidden before it leaves the browser, so passwords and email addresses are never part of it.

For a signed-in account this is linked by an internal identifier, not by your email address. Section 4.1 of the Privacy Policy describes it in more detail.

Dictation

The journal has a Dictate button that turns speech into text using your browser's own speech recognition. In Chrome and Edge that means the audio goes to Google to be transcribed; it is not processed on your device.

Nothing is sent unless you press that button, and no audio recording is kept — by us or by the page. Only the resulting text, stored like the rest of your notes. Browsers without speech recognition, such as Firefox, do not show the button.

Security

Everything is encrypted in transit.
Data we hold is encrypted at rest.
Passwords are hashed and cannot be read back, by us or by anyone with access to the database.
Access to the database is restricted.

How long things are kept

An active account — while it is open, plus 90 days after cancellation
A deleted account — purged within 30 days of the request
An account left unused — deleted after two years without a sign-in
Payment records — kept seven years, for tax and legal compliance
Support messages — kept three years
A file you send us — deleted within 30 days
A tester application and check-in — while the tester program runs, or sooner if you ask

What you can do about it

See it. Everything we hold about the account is visible in your account area.
Export it. Your settings, and your trades and journal, can be exported at any time.
Correct it. Get in touch and we will fix anything that is wrong.
Turn sync off, and your settings stay on your device.
Delete the account. How to delete your account explains what goes and what cannot be undone.

Permissions the app asks for

In a browser: audio playback, so alarms can make a sound; notifications, which are optional; local storage, so your settings survive a reload.

Installed from an app store: the same, plus internet access for sign-in and sync, and storage for local settings and sounds.

Never asked for: camera, microphone, location, contacts, phone, SMS or calendar. The Dictate button uses the browser's own speech recognition and asks separately, at the moment you press it.

Children

Chart Ding is not intended for anyone under 13, and we do not knowingly collect data from children. If you are a parent and believe your child has given us data, contact us and we will remove it.

If this changes

If we change what we collect or what we do with it, we will update this page and its date, describe the change in the Privacy Policy, and email you where the change is a material one.

Questions

Use the contact form for anything on this page, including a request to see, export or delete what we hold.

Chart Ding is a market clock with customizable alarms for traders — candle-close alerts, world market sessions, and holiday warnings. Open the app.

Nothing on this website is trading or investment advice. Chart Ding is a market clock and alarm tool — it does not recommend trades, evaluate strategies, or take account of anyone's circumstances. Nothing here should be construed as a recommendation or relied on as the basis for a trading decision. Consult a licensed professional before placing real money at risk. Trading involves risk of loss.