Who we are
Supreme Trading Journal is operated by Jack Love, a sole trader based in Queensland, Australia. We are the data controller for the information described below. You can reach us at support@supremetradingjournal.com.
This policy explains what we collect through supremetradingjournal.com and the Supreme Trading Journal app, and how we use it.
Information we collect
We collect information in a few limited ways:
- Account information. When you create an app account, we collect your email address and the trading data you choose to log (trades, notes, psychology scores, and similar).
- Broker connections. If you connect a trading account, what we hold depends on how you connect it, and the difference matters:
- MetaTrader 4 and 5, by investor password. The investor password is a read-only credential issued by your broker. It can see your account; it cannot place, change or close an order, or move money. That limit is enforced by MetaTrader, not by us. We pass it once to our connection provider, MetaApi, which sets up the connection and returns an identifier. We do not keep the password. To change it you enter it again.
- cTrader, by secure sign-in (OAuth). You authorise access at cTrader; we never see your password. We store the resulting access tokens encrypted, and use them only to import your closed trades.
- TradeLocker, by your login. TradeLocker has no read-only password, so you enter your TradeLocker email, password and server each time you sync. We use them for that sync only, to read your order history, and we do not store them.
- Bybit, Binance and OKX, by API key; Hyperliquid, by wallet address. You create the API key on the exchange, set to read-only. We store the key and its secret encrypted and use them only to import your closed trades; disconnecting deletes them. A Hyperliquid wallet address is public information and is all we need.
- The Expert Advisor bridge. A script in your own terminal sends trades to us using a sync key. No broker credential reaches us at all.
- Payment information. Subscription payments are processed by Stripe. We never see or store your full card number; Stripe handles that under its own PCI-compliant systems.
- Affiliate applications. If you apply to our affiliate programme, we collect the name, email, platform, follower count, and content details you submit through the application form.
- Basic usage data. Standard hosting-level logs (for example, page requests) collected by our hosting provider for security and reliability.
- Page visits on this website. Our own first-party counter records each visit to this marketing site: the page, the referring website, your country, and a hash of your connection that is regenerated every day, so it can count you once per day but cannot follow you between days. No cookie is set. If you arrive through an affiliate's link, the affiliate's code is recorded with the visit, and your browser keeps that code for 30 days (in its local storage, not a cookie) so the affiliate is credited if you join later. The app itself does not run this counter.
How we use information
We use the information above to operate the app and this website: to authenticate your account, process your subscription, respond to affiliate applications, and provide customer support. We do not sell your personal data to third parties.
AI features
Supreme's trade reviews, weekly and monthly reviews, playbook drafting and in-app chat are produced by Anthropic's Claude models. To generate them we send the relevant trading data (trades, notes, psychology scores and the question you asked) to Anthropic's API. We do not send your email address, name or payment details.
Anthropic processes this data to return a response and does not use it to train its models. If you would rather no trading data left our systems for this purpose, simply do not use the AI features; every other part of the app works without them.
Who else processes your data
We use a small number of providers to run Supreme. Each acts on our instructions under its own data-protection terms:
- Supabase (United States): the database holding your account, trades, journals and affiliate records.
- Netlify (United States): hosting for this website, the app and its backend functions.
- Stripe (United States): subscription payments. We never see or store your full card number.
- MetaApi (United States): the MetaTrader connection provider described above. Receives your investor password once to establish a read-only connection, and returns your closed trades and balance.
- Anthropic (United States): the AI models behind the review and chat features.
- Resend (United States): transactional and digest email.
- Sentry (United States and Germany): error monitoring, so we find out when something breaks. Receives error events and device information, not your trading data.
The typefaces on this website are served from our own domain, so no font provider is contacted when a page loads. We do not sell your personal data, and we do not share it with anyone for advertising.
Lawful basis for processing
If you are in the UK or European Economic Area, the UK GDPR and GDPR require us to name a lawful basis for each use:
- To perform our contract with you: running your account, storing and displaying your trades, syncing your broker, generating the reviews you ask for, and taking payment.
- Our legitimate interests: keeping the service secure and working, preventing fraud and abuse, moderating the community, and administering the affiliate programme. We use the minimum data needed for each.
- Optional extras, on until you switch them off: appearing on the public leaderboard, and the weekly digest email. We rely on our legitimate interests for these, and you can switch either off at any time in Settings without losing access to anything else.
- Legal obligation: tax and accounting records relating to payments.
Sending data overseas
Every provider listed above stores and processes data outside Australia, primarily in the United States. Where data is transferred out of the UK or EEA we rely on the Standard Contractual Clauses, or the UK Addendum, in each provider's data-processing terms. For Australian users, this is the overseas disclosure contemplated by Australian Privacy Principle 8.
Data retention
We keep your personal information and trading data for as long as your account is active. If you delete your account (Settings, then Account, in the app), your profile, trades, journals, reviews and related records are permanently deleted and cannot be recovered. When a membership ends, because you cancelled it or because payments kept failing, the account is deleted in the same way once the period paid for runs out; cancelling a free trial deletes it straight away. To keep free trials to one per person, Stripe's record of the email address and card used for a trial is kept and checked when a new trial starts; we never see the card number, only a fingerprint Stripe gives us that recognises the same card. Payment records held by Stripe are retained by Stripe under its own legal obligations. Affiliate applications that are declined are retained only as long as needed to administer the programme.
Data security
We take reasonable technical measures to protect your data, including relying on providers with their own strong security practices (Stripe, Supabase, Netlify). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your rights
Wherever you live, you can ask us to give you a copy of your data, correct it, or delete it. Deletion is also self-service: Settings, then Account, removes your profile, trades, journals and reviews permanently.
If you are in the UK or EEA you also have the right to object to processing based on legitimate interests, to ask us to restrict processing, to switch off the leaderboard or digest at any time, and to receive your data in a portable format. We answer verified requests within 30 days.
Email support@supremetradingjournal.com for any of these. If you think we have handled your data badly, we would rather hear it first, but you can complain to the Office of the Australian Information Commissioner, or in the UK to the Information Commissioner's Office, or to your local EEA supervisory authority.
We do not make automated decisions that produce legal or similarly significant effects about you. The Edge Score and AI reviews are analysis of data you logged, shown to you; nothing decides anything about your account.
Trading data and the leaderboard
Your individual trade data is private and visible only to you. The public leaderboard shows only your chosen username and the aggregate stats tied to that feature, never your underlying trade-by-trade data, and you can remove yourself from the leaderboard at any time in Settings, under Privacy.
Cookies
This marketing website does not use tracking or advertising cookies. The only thing it keeps on your device is an affiliate's code, for 30 days, if you arrived through their link. The app itself uses only the minimal session mechanisms required to keep you signed in.
Children's privacy
Supreme Trading Journal is not directed at, and should not be used by, anyone under the age of 18.
Changes to this policy
We may update this policy from time to time and will notify you of material changes via the app or email. Continued use after changes constitutes acceptance of the updated policy.
Contact
Questions about this policy can be sent to support@supremetradingjournal.com.