Privacy Policy

This policy explains what information TraderStack (“we,” “us”) collects when you use the site, how we use it, and the choices you have. It’s written to be read, not just filed — if anything is unclear, email privacy@traderstack.in.

Scope

This policy covers TraderStack’s website and API. It doesn’t cover the privacy practices of the third-party resources (brokers, tools, courses, communities) listed in our directory — check their own policies before using them.

Information we collect

Account information

• Name, email address, and password (stored as a salted hash, never in plain text).
• If you sign in with Google, basic profile information (name, email, avatar) provided by Google’s OAuth flow.
• Optional profile details you add yourself, such as a bio or avatar image.

Content you create

• Resources you submit, ratings and rating-dimension scores, comments, bookmarks, and flags.
• Files you upload (such as avatar or resource images), stored in our cloud object storage.

Technical & usage information

• IP address, browser and device type, and general location inferred from IP.
• Pages viewed, features used, referring pages, and timestamps of activity.
• Authentication tokens stored in HTTP-only cookies to keep you signed in.

Analytics & cookies

We use PostHog, a product analytics tool, to understand how people use TraderStack — which pages get visited, which features get used, and where people get stuck — so we can improve the product. PostHog may set cookies or similar identifiers in your browser and records events such as page views and clicks; it does not receive your password or payment information.

We also use strictly necessary cookies to keep you logged in (short-lived access tokens and longer-lived refresh tokens). These aren’t optional — they’re what let the site remember who you are between requests. You can control non-essential analytics cookies through your browser’s cookie settings; blocking them won’t affect your ability to use core site features.

How we use information

• Operate core features — accounts, submissions, ratings, comments, search, and notifications.
• Maintain trust and safety — reviewing flagged content, investigating abuse, and enforcing our Community Guidelines.
• Understand and improve the product using aggregated usage analytics.
• Send transactional email — verification, password resets, and notifications you’ve opted into.
• Detect, prevent, and respond to fraud, security incidents, and rate-limit abuse.
• Comply with legal obligations.

Sharing with third parties

We don’t sell your personal information. We share it only with:

• Infrastructure providers — our database, cache, and cloud object storage (AWS S3) providers, who process data on our behalf.
• Google — if you choose to sign in with Google OAuth.
• PostHog — for the product analytics described above.
• Email delivery providers — to send transactional emails.
• Legal authorities — where we’re required to by law, or to protect the rights, safety, or property of TraderStack or our users.

Data retention

We keep account and content data for as long as your account is active. If you delete your account, we remove or anonymize personal information within a reasonable period, except where we’re required to retain records (for example, audit logs of moderation actions, or data needed to resolve disputes and enforce our agreements).

Your rights & choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information (most of this you can edit directly in account settings).
• Request deletion of your account and associated personal data.
• Export a copy of your data.
• Object to or restrict certain processing, including analytics.

To exercise any of these, email privacy@traderstack.in. We’ll respond within a reasonable timeframe and may need to verify your identity first.

Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), hashed passwords, short-lived access tokens with separately stored refresh tokens, rate limiting, and optional two-factor authentication for admin accounts. No system is perfectly secure, and we can’t guarantee absolute security.

Children’s privacy

TraderStack is not directed at children and is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we’ll remove it.

International transfers

Our infrastructure and service providers may process data in countries other than your own. Where required, we rely on appropriate safeguards to protect data transferred internationally.

Changes to this policy

We may update this policy as TraderStack evolves. If we make material changes, we’ll update the “last updated” date above and, where appropriate, notify you directly.

Contact us

Questions about this policy or your data? Email privacy@traderstack.in.