Legal
Privacy notice
Last updated: 26 September 2026 · Covers the live service: calls, anonymous accounts and the weekly results email
The short version
- If you sign up for the weekly results email, we keep your email, the Instagram or X handle you give us (if any), and how you found us. We use them to send that email and product news. Unsubscribe any time.
- Calls you lock are public by design: your nickname, the coin, direction, levels, times, result and receipt fingerprint. That record can't be edited or deleted. It's the point of the service.
- Anonymous accounts give us no email. We store your nickname and a one-way fingerprint of your secret key, never the key itself.
- We don't sell your data, run ads or use tracking cookies.
- You can ask us to show you, correct or delete your data at any time.
- Who we are
- What we collect
- Why
- Who processes it
- How long we keep it
- Your rights
- Anonymous accounts
- What's live
1. Who we are
Traders Ladder is operated by [Company legal name], [registered address], registered under [company number]. We are the controller of the personal data described here. Contact us about privacy at [privacy@yourdomain].
2. What we collect
| When | Data | Where it comes from |
|---|---|---|
| You sign up for the weekly results email (before 26 Sep: the waitlist) | Email address; the Instagram or X handle you choose to claim (optional); the tag in the link you arrived from (for example ?ref=ig); the page that referred you; the time you joined | You and your browser |
| You lock a call | The call itself (coin, direction, target, stop, window, whether you hold the position, your optional reason), the server time, the receipt text and its fingerprint, and the result once it resolves. Published under your nickname. | You, our server and exchange prices |
| You send feedback | Your message, the kind (setup idea, market request or problem), an optional contact you choose to give, and which part of the page you sent it from, with your screen width to help us reproduce problems. Only the team can read it. | You and your browser |
| You reserve an anonymous nickname | Your nickname; a SHA-256 fingerprint of your secret key; the time you reserved it. No email, no name, and not the key itself. | You and your browser |
| You visit the site (visit counting) | One record per page visit and per action you complete (nickname, call, bot, email sign-up, feedback): the link tag or the kind of site that sent you (for example "ig" or "google"), phone, tablet or desktop, and a visitor code. The code is a salted one-way hash of your IP address, browser and today's date, so it changes every day, can't be turned back into your IP, and can't link your visits across days. No cookies and nothing stored on your device. If your browser sends Global Privacy Control or Do Not Track, we don't record anything. | Your browser, automatically |
| You visit any page | IP address and browser details in the server logs of our hosting and database providers, used for security and kept for a short time | Your browser, automatically |
| On your own device | A note in your browser's local storage that you've already joined, so the form shows "Joined". It never leaves your device. | Our page |
A handle you claim is not verified until launch. Claiming someone else's handle doesn't give you their page, because ownership is confirmed through the official Instagram or X sign-in.
3. Why we use it, and on what legal basis
- Sending the weekly results email and reserving your handle. Basis: your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time with the unsubscribe link or by email.
- Running the ladder: storing, scoring and publishing the calls you lock, and showing your founder badge if you have one. Basis: providing the service you asked for (Art. 6(1)(b)).
- Learning which channels bring people in, using the link tag, the referring page and the cookie-free visit counts described above, looked at only in aggregate. Basis: legitimate interest (Art. 6(1)(f)) in understanding our own marketing.
- Keeping the service secure and preventing abuse such as bulk fake sign-ups. When you create a nickname or sign up for email, we keep a salted, one-way hash of your IP address (never the address itself) for 7 days to enforce sign-up limits. Basis: legitimate interest (Art. 6(1)(f)).
We don't use your data for automated decisions that significantly affect you, and we don't sell it or share it with advertisers.
4. Who processes it for us
| Provider | What for | Location |
|---|---|---|
| Supabase Inc. | Database for the weekly email list, anonymous accounts, calls, feedback and visit counts | EU region ([e.g. Frankfurt]) |
| Cloudflare, Inc. | Hosting the website and its domain (Cloudflare Pages and DNS). Cloudflare handles your IP address to deliver the pages and protect the site. | Global network |
| Google (Google Fonts) | Serving the page's typefaces. Your browser requests fonts from Google, which receives your IP address. | Global |
Where a provider processes data outside the EU/EEA, the transfer relies on the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework, whichever applies.
5. How long we keep it
- Feedback: until we've handled it, then up to 12 months. Ask us any time to delete yours.
- Visit counts: 13 months. The visitor code inside them changes daily, so older records can't be tied to a person.
- Email sign-ups: until you unsubscribe or ask us to delete them.
- Anonymous nicknames: until 12 months after launch if the account never locks a call.
- Calls: for as long as the service runs, as part of the public record. If you delete your account, your calls stay but your nickname is replaced with "deleted_" and a number.
- Server logs: as set by our providers, typically no more than 30 days.
6. Your rights
Under the GDPR you can ask us to access, correct, delete or export your data, restrict or object to how we use it, and withdraw your consent at any time. Email [privacy@yourdomain] and we'll reply within one month.
You can also complain to a data protection authority. In the Netherlands that's the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). Elsewhere in the EU, contact your local authority.
7. Anonymous accounts
We designed anonymous accounts so that we know as little as possible:
- Your browser generates the secret key. We receive it once over an encrypted connection, store only its SHA-256 fingerprint, and discard the key.
- Because we don't hold the key, we can't recover it. If you lose it, we can't give you access to the account again.
- You can delete an anonymous account yourself, without contacting us. On the homepage, open "Already have a key? Check it", enter your key, and choose Delete this nickname. Having the key is the proof that the account is yours.
- If we introduce paid extra calls and you pay by card, our payment provider will know who paid. We won't publish that link, and we'll use payment details privately only to stop one person from running several accounts.
8. What's live, and what isn't yet
The ladder went live on 25 September 2026 with anonymous nicknames and locked calls. Not in use yet: Instagram or X sign-in, and paid extra calls. We'll update this notice before adding either.
If you joined the waitlist before 26 September 2026, you agreed to launch news only. We'll send you one launch email with a link to opt in to the weekly results. We won't add you to it automatically.
9. Age
Traders Ladder is for people aged 18 or over. We don't knowingly collect data from anyone younger. If you think a minor has signed up, contact us and we'll delete the data.
10. Changes
If we change this notice we'll update the date at the top. If the change is significant, we'll email everyone on the weekly results list.