Privacy Policy

Last updated: April 2026

TradeView is built with a privacy-first mindset. We collect the bare minimum needed to provide the Service and nothing more. We do not sell, share, or monetise your data. There are no third-party analytics, no tracking pixels, and no advertising SDKs.

1. What We Collect

Account Information

When you create an account, we generate a random account number. No email, password, phone number or any personal information is required.

Trade Data

If you use paper trading, your simulated trades are stored in our database so you can access your journal and analytics.

If you connect an exchange, we store your publicly available on-chain wallet address or a read-only API key/token to synchronise your trade history. Read-only keys cannot place orders, withdraw funds, or modify your exchange account in any way.

Journal Entries

Notes, tags, and annotations you add to trades are stored to provide your journaling experience.

2. What We Do NOT Collect

  • No analytics or tracking — no Google Analytics, no Mixpanel, no Hotjar, no tracking pixels
  • No cookies for advertising — we use only essential session cookies
  • No personal identification — standard user accounts are anonymous (account number only, no name or email required)
  • No browser fingerprinting
  • No data sold to third parties — ever

3. Wallet Addresses & API Keys

Wallet addresses you provide (e.g. Ethereum, Cosmos, Solana addresses) are publicly available on-chain data. Anyone can look up the same information on a block explorer. We store these addresses solely to fetch your trade history from the respective exchanges.

API keys and tokens are encrypted at rest using AES-256-GCM with PBKDF2 key derivation. They are only decrypted server-side during synchronisation and are never exposed to the frontend or logged.

We only accept read-only credentials. Keys with write, trade, or withdrawal permissions are rejected where detectable.

4. Data Storage & Security

  • All data is stored on our own servers — not shared hosting, not multi-tenant cloud buckets
  • Passwords are hashed with Argon2id (memory-hard, GPU/ASIC resistant)
  • Sensitive credentials encrypted with AES-256-GCM using Argon2id-derived keys — no legacy fallbacks
  • All connections encrypted via TLS/HTTPS

5. Data Retention

Your data is retained for as long as your account is active. If you delete your account, all associated data (trades, positions, journal entries, API keys) is permanently deleted from our database.

6. Third-Party Services

When you sync an exchange, we make API calls to that exchange's servers to fetch your trade data. These requests are subject to the respective exchange's privacy policy. We do not share your data with any other third party.

Price data is fetched from public APIs (Binance, CoinGecko, Hyperliquid) to display live market prices. These requests do not contain any user-identifying information.

7. Your Rights

You can at any time:

  • Export your data — your trades and journal entries are accessible via the application
  • Delete your API keys — remove connected exchanges from the API Keys page
  • Delete your account — permanently removes all your data

8. Children's Privacy

TradeView is not intended for use by anyone under the age of 18. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via the Service. Continued use after changes constitutes acceptance.

10. Contact

Questions about your privacy? Get in touch.