Cookie Policy

These make the Service work and cannot be switched off from inside it. They include: an httpOnly authentication cookie that keeps you signed in, which expires after about seven (7) days or when you log out; a lightweight session hint so the interface knows whether to show a signed-in view; security and anti-abuse cookies, including those set by our CDN and bot-protection provider to block automated attacks and rate-limit abuse; and a short-lived token that protects forms against cross-site request forgery. Legal basis: performance of our contract with you and our legitimate interest in keeping the Service secure. Blocking these prevents sign-in and core features from working.

These remember how you like the product set up, and most of them live in your browser's localStorage on your own device rather than being sent to us: interface language and theme; chart timeframes, scale mode, indicator and layout choices; your saved drawings and custom timeframes; onboarding and course completion flags so we do not show you the same guide twice; and dismissed notices. They persist until you clear your browser storage. Legal basis: our legitimate interest in remembering your settings, or your consent where your jurisdiction requires it. Clearing them simply resets the interface to defaults.

These tell us whether an advertisement or a partner link actually led to a sign-up, so that we pay affiliates correctly and do not waste money on advertising that does not work. They include: an affiliate referral cookie holding a partner code, lasting about sixty (60) days; an advertising click identifier such as the Google click ID, lasting about ninety (90) days; and a first-touch source cookie recording how you first arrived. Conversion data we send to advertising platforms is aggregated, hashed, or pseudonymised — we do not send them your chart uploads, journal entries, or analysis content. Legal basis: your consent where required, otherwise our legitimate interest in measuring our own marketing. You can withdraw at any time by clearing cookies and using the opt-out controls described in section 5.

We do not use advertising cookies to build cross-site behavioural profiles of you, we do not sell or share personal information for cross-context behavioural advertising as those terms are defined under California law, we do not embed social-network tracking pixels on the app, and we do not use cookies to collect special-category data such as health, biometrics, or political opinions. We do not use your uploaded charts or journal data for advertising purposes at all.

Every major browser lets you see which cookies are set, delete them individually or all at once, block third-party cookies, and browse in a private window that discards them when you close it — look under Settings, then Privacy. You can opt out of personalised advertising through Google Ads Settings and through the industry opt-out pages operated by the Digital Advertising Alliance, the Network Advertising Initiative, and Your Online Choices in Europe. Where your jurisdiction recognises a Global Privacy Control or similar browser signal, we treat it as a valid opt-out request. Clearing site data in your browser also clears the preference storage described in section 2.

We have deliberately kept our cookie use narrow enough that a full-screen consent wall would cost you more than it protects: we run no third-party advertising network on the app, no cross-site behavioural profiling, and no data sales. The identifiers that do require consent in some jurisdictions are limited to the attribution and measurement cookies in section 3, which are set only when you actually arrive from an advertisement or a partner link, and which you can refuse and delete using the controls in section 5. We keep this under review and will introduce a consent interface if our cookie use changes or if the law applying to you requires it.

If we add, remove, or change the purpose of a cookie category, we will update this page and change the "last updated" date above. Material changes — for example introducing a new category that needs your consent — will be announced by email or an in-product notice before they take effect.