1. Who We Are

Winners Journal ("we", "us", "our") is a trading journal platform operated by Daryosh, based in Doha, Qatar. Our service is available at winners-journal.com.

If you have any questions about this policy, contact us at: hello@winners-journal.com

2. What Data We Collect

We collect only what is necessary to provide the service:

• Account data: Name, email address, and password (encrypted by Supabase Auth — we never see your plaintext password).
• Trading data: Trade records you import or enter manually, including pairs, P&L, dates, notes, tags, and setups.
• Profile data: Optional settings you provide such as account size, risk per trade, and location.
• Usage data: Basic logs to identify errors and improve the platform. We do not use third-party analytics trackers.

3. How We Use Your Data

• To provide, operate, and improve the trading journal service.
• To send account-related emails (confirmation, password reset).
• To respond to your support requests.
• To calculate your trading statistics and display your journal.

We do not use your data for advertising. We do not sell your data to any third party. We do not share your trading data with anyone.

4. Data Storage and Security

Your data is stored in Supabase (hosted on AWS in Europe). All data is encrypted in transit (TLS/HTTPS) and at rest. Row-Level Security (RLS) is enforced on every database table — your data is only accessible by your account.

We do not store payment card details. Payments are handled by Stripe, which is PCI-DSS compliant.

5. Cookies and Local Storage

We use browser localStorage to store your theme preference (dark/light) and session tokens provided by Supabase. We do not use advertising cookies or tracking cookies. We do not use Google Analytics or similar tracking services.

6. Data Retention

Your data is retained for as long as your account exists. If you delete your account, all associated data (trades, notes, tags, rules) is permanently deleted within 30 days. You can request deletion at any time by emailing us.

7. Your Rights

You have the right to:

• Access all data we hold about you (export available from your account).
• Correct inaccurate data.
• Delete your account and all associated data.
• Object to processing (by deleting your account).

To exercise any right, email hello@winners-journal.com

8. Third-Party Services

We use the following third-party services that may process your data:

• Supabase — Database and authentication (supabase.com/privacy)
• Cloudflare — Hosting and CDN (cloudflare.com/privacypolicy)
• Stripe — Payment processing (stripe.com/privacy) — only when you subscribe to a paid plan

9. Children's Privacy

Winners Journal is not intended for users under 18 years of age. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this policy as the service evolves. We will notify you of significant changes by email. Continued use of the service after changes constitutes acceptance of the updated policy.