Privacy policy

1. About this policy and contact

This policy describes information handled when you visit stresslesstrader.com and www.stresslesstrader.com, use our reflection practices or trading journal, sign in, listen to our podcasts, or email us. Stressless Trader is an independently operated project based in Israel. “We” and “our” refer to the operator of this website; Stressless Trader is the project name, not a registered company.

For privacy questions or requests, email [email protected]. Please do not send passwords, payment details, account statements, or sensitive personal reflections with a general enquiry.

The site provides educational reflection exercises, not therapy, crisis monitoring, investment advice, brokerage services, or trading signals. We do not monitor your notes or trading accounts.

2. Your reflections and device storage

• Unsaved drafts: typed reflections, selected feelings and practice choices are held in memory in the current tab. Refreshing or closing it clears that working draft. They are not submitted to our server, Google Analytics, or an AI service.
• Saved reflections: “Save on this device” stores the reflection you approve, its title and timestamp in this browser’s local storage. The site supports up to 200 saved entries. Practice reflections do not have account sync. Optional account sync applies only to the separate trading journal.
• Downloads: downloading a reflection creates a separate text file on your device. Deleting the entry in the site does not delete that file or copies you share.
• Language: an explicit language choice is stored in this browser. Without a saved choice, the site uses a supported browser language or English. Translation files are bundled with the site.
• Audio: podcast files are served by this website; optional ambient sound is generated in your browser. We do not request microphone access or record audio.

Other people using the same browser profile may read saved reflections. Browser or device backups may also retain local data, depending on your settings. Private browsing or clearing site data may remove saved entries. Use “My reflections” to read, download or delete entries. These local features work whether you accept analytics or not.

Storage is separate for each website address. Notes saved at the previous nip.io address or on the www address do not automatically appear at stresslesstrader.com.

3. Optional Google Analytics

If you save your preferences with the Google Analytics toggle on, we use Google Analytics 4 to understand basic visits and improve the website. Analytics may process a cookie identifier, general device and browser information, language, visit time, session and engagement information, and approximate location derived by Google from your network connection. Google receives your IP address as part of the connection; Google states that GA4 does not log or store individual IP addresses.

Our integration reports only a generic website page or this privacy page. We remove URL queries and fragments from the page address sent to Analytics and send an empty referrer. We do not send your reflection text, selected feelings, practice answers, saved notes, email address, trading information or a user account ID. We have disabled enhanced measurement, including automatic form, download, outbound-link, search, scroll and video tracking. No custom practice events or session recordings are installed.

Google signals and advertising personalization are disabled in our tag. Advertising consent is denied. We do not use these analytics for remarketing, targeted advertising, or decisions about individual visitors.

Your choice: Analytics starts only after you save your preferences with its toggle on. The toggle starts on for a new choice, but this alone does not start analytics. If you decline or do not choose, no Google Analytics script or analytics request is loaded by this integration. You can reopen “Analytics preferences” in the footer or here and turn the Google Analytics toggle off and save your preferences at any time. This stops subsequent collection by this integration and removes its accessible first-party analytics cookies; it cannot recall requests already sent or erase historical reports. Your saved reflections are not affected.

We remember your choice for 180 days on this browser and website address. If storage is unavailable, your choice applies only to the current page. A new browser, address, expired choice or cleared site data may show the choice again. Browser-level tracking blockers may prevent analytics even after you accept.

See Google’s privacy policy, how Google uses information from partner sites, and Google’s Analytics opt-out browser add-on.

4. Hosting, security and email

Website delivery: the site is hosted on a virtual private server and delivered through Cloudflare. These systems necessarily process network information such as IP address, requested URL, request time, browser information and connection/security details to deliver pages and audio, prevent abuse and diagnose errors. This operational processing is separate from optional Google Analytics. Ordinary website access logging is disabled on our server. Error, infrastructure and Cloudflare security records may still exist.

Email: if you contact [email protected], Cloudflare Email Routing forwards your message to our Gmail inbox. Cloudflare and Google process the sender and recipient addresses, message content, attachments and delivery/security metadata to route, store and protect that correspondence. We use messages to respond and handle support or privacy requests. Email is voluntary; we cannot reply without a return address. Do not send private journal entries unless you specifically want us to receive them.

Purposes and legal grounds: where a legal basis is required, optional analytics relies on your consent. Necessary delivery, security and handling ordinary enquiries rely on our legitimate interests in operating a reliable site and responding to you, subject to your rights. We may retain or disclose limited information where required by law or necessary to address legal claims. Device storage for reflections and language supports features you request. Account authentication, journal storage and cross-device sync are used to provide the service you request; where applicable, this relies on performance of our agreement to provide that service. We use limited security information to protect accounts and prevent abuse based on our legitimate interests. You do not have to provide reflection text or agree to analytics to use the site.

We offer optional Google sign-in accounts for journal sync. We do not sell personal information, take payments, connect to brokerage or trading accounts, or use reflection or journal data to train AI. Service providers receive only the information involved in delivering their respective services. We may disclose information in response to a lawful request, to protect rights and security, or as part of a lawful transfer of the project, with notice where required.

Trading journal, Google sign-in and sync

Device-only use: you can use the journal without an account. Entries and images are kept in this browser’s IndexedDB database (stressless-trader.journal). They are not uploaded until you sign in and explicitly choose to copy device-only entries to your account. Unsaved drafts remain in tab memory.

Google sign-in: we use Google’s Firebase Authentication to identify your account. Google processes sign-in information, including your email address, basic profile, account identifiers, IP address and browser information. We receive your Firebase user ID and basic Google account information, such as your name, email and profile image if supplied. We display your email to identify the active journal; the sync database associates entries with your Firebase user ID. We do not receive your Google password or request access to Gmail, Drive, contacts or your other Google files. Your login can remain active across visits until you sign out or clear browser data.

What sync sends: while signed in, saving an entry sends its symbol, trade date/time, direction, outcome, written actions, feelings, results, lessons, timestamps, entry identifiers and attached chart image to our authenticated journal service over HTTPS. Existing device-only entries are copied only when you select and confirm “Copy device-only entries to account”; local originals remain. Pending changes sync when you reconnect or reopen the journal. We store the journal text and images privately on our own hosting server, separately from public website files. We do not use Firebase Storage, Firestore or another Google database for these journal contents.

Access and security: each request is checked against the signed-in account. Images are retrieved through authenticated requests, not public image links. We process and resize uploaded images for safe storage and remove image metadata. This is not end-to-end encrypted storage: authorized website operators and infrastructure providers may access stored data when needed to operate, protect or support the service. Notes are not routinely monitored, analysed by AI, used for advertising, or shared with other users. The journal page has no analytics integration.

Copies on your devices: account entries and images are also cached in your browser so pending saves can survive connection failures. Signing out hides the account journal but does not erase this cache. Anyone with access to your device or browser profile may be able to inspect local data. On a shared device, sign out and clear site data; download any pending changes you want to keep first. Clearing site data removes local drafts, caches and unsynced changes but does not delete entries already synced to the server. Downloaded JSON backups include images and notes and remain until you delete the files.

Retention and deletion: synced entries remain until you delete them or delete your journal account. Entry deletion is sent to the server and other devices when online. “Delete account and synced journal” requires Google reauthentication and removes the journal text and images from active storage, then requests deletion of the Firebase sign-in account. We retain minimal account/entry identifiers, deletion markers and revision numbers to prevent old offline devices from restoring deleted content. Other devices remove synced copies when they next connect; separate backups, device-only originals and recovered conflict copies remain under your control. We do not currently create separate application backups of journal content; infrastructure providers may retain operational copies under their own policies. Keep your own export if you need an independent backup.

Firebase states that it retains authentication IP logs for a few weeks and other authentication information until user deletion, after which removal from live and backup systems may take up to 180 days. See Firebase’s privacy and security information and Google’s privacy policy. Deleting your Stressless Trader sign-in account does not delete your Google account. Contact [email protected] if an account deletion cannot finish.

Optional charts and snapshots

TradingView charts load when you select or enter a symbol, or open a saved entry. TradingView receives the requested symbol, IP address and browser information and may use its own storage. We do not send journal notes or attached images to TradingView. Its camera feature may create an image hosted by TradingView; avoid including private account information. See TradingView’s privacy policy.

Our direct chart capture asks you to share this journal tab, crops the capture to the chart, attaches one image locally, and stops the capture afterward. Supported desktop browsers provide this feature; existing images can also be attached. An attached image is uploaded to our hosting only when you save it to a signed-in account or copy a device-only entry into that account.

5. Cookies and how long information lasts

GA4 event and user data retention is set to two months, with reset on new activity disabled. Aggregated reports may be retained longer; this setting does not delete all aggregate statistics. See Google’s retention explanation.

Support correspondence is kept while needed to answer your request and maintain an appropriate record, then reviewed for deletion. Legal obligations or disputes may require longer retention. Operational and provider security logs follow the relevant service’s retention settings and policies; we do not promise immediate deletion of provider logs or backups. Downloaded files and copies you share remain until you or the recipient remove them.

6. Your choices and privacy rights

You can decline or withdraw analytics consent, clear cookies/site storage through your browser, and delete or download saved reflections using “My reflections.” In the journal you can export entries, delete individual entries, sign out, or use “Delete account and synced journal.” Clearing browser data alone does not delete the server copy. Withdrawing consent does not affect processing that already occurred lawfully. Clearing all site data also removes saved reflections and your language choice.

Depending on the law that applies to you, you may have rights to access, correct or delete information we hold about you, object to or restrict certain processing, receive a portable copy, and complain to a privacy authority. In Israel, rights include access and correction subject to legal conditions. If applicable, you may contact the Israeli Privacy Protection Authority or your local supervisory authority.

Send requests to [email protected]. Explain the request and relevant dates; we may ask for proportionate information to verify it. We will respond within the applicable legal time limit. We cannot access or recover reflections that exist only on your device, and we may be unable to identify a particular visitor in aggregate analytics. We will explain any limits or lawful exceptions.

The site does not sell data or share it for cross-context behavioural advertising. Global Privacy Control or “Do Not Track” signals do not replace the site’s explicit analytics choice; analytics remains off unless you accept it.

7. Providers and international processing

Cloudflare provides DNS, website delivery, security and email routing. Google provides Firebase Authentication for optional journal sign-in, optional Analytics, and Gmail for correspondence. Our hosting infrastructure runs the website server. Those services may process information outside your country, including in the United States and other places where their infrastructure and support teams operate, with different privacy laws.

Where international-transfer rules apply, processing must use the relevant provider’s available contractual safeguards or another valid transfer mechanism. See Cloudflare’s privacy policy, Cloudflare’s data processing addendum, Google’s data processing terms, and Google’s privacy policy. Links to other websites are governed by their own policies when you choose to visit them.

8. Children, security and policy changes

The site is intended for adults aged 18 and over and is not directed at children. We do not knowingly seek children’s personal information. If you believe a child has provided personal information to us, contact us so we can assess and address it.

We use HTTPS to protect information in transit and limit collection, but no website or email service can guarantee absolute security. Protect your device and browser profile, especially if you save reflections on a shared device. Private notes are not monitored; if you need urgent assistance, contact local emergency services or a trusted person.

We may update this policy as the service or applicable requirements change. The date above identifies the current version. We will provide additional notice and request a new choice where a material change requires it.