Privacy Policy

• Account information. Your email address and password when you sign up. Your password is sent securely to our authentication provider to create your account; depending on how you sign up, it may pass through our server on the way. EdgeGhost does not retain or log your password. You may also give us a display name, the trading platform you use, and how you heard about EdgeGhost. If you sign up through a link that includes campaign tags (utm_source, utm_medium, utm_campaign), we may save them with your account to understand how people find EdgeGhost.
• Trading data you import. When you upload a CSV export, we extract executions, trades, and account summaries from it and keep the file name. This data can include account names or identifiers, instruments, timestamps, prices, quantities, fees, and profit and loss. We do not keep a copy of the uploaded file itself.
• Journal content. Notes, tags, journal entries, and screenshots you upload.
• Feedback and support messages you send in the app or by email.
• Billing information. If you subscribe, payment is handled by Stripe on Stripe’s checkout page. We never receive or store your card number. We store your Stripe customer ID and your subscription status and dates.

Direct Sync is an optional feature, currently in limited testing, that lets you connect a NinjaTrader or Tradovate account using OAuth.

• You sign in on the provider’s own site. EdgeGhost never asks for, receives, or stores your NinjaTrader or Tradovate password.
• What we store when you connect: an access token and, if the provider issues one, a refresh token. Both are encrypted on our servers before they are stored and are never sent to your browser. We also store connection details: which provider you connected, the provider’s numeric user ID for your login, the provider API hosts assigned to your connection, token expiry times, connection status, and timestamps.
• Read-only access. EdgeGhost uses this connection only to read data. EdgeGhost does not place, modify, or cancel orders and does not move funds.
• What we read. Connecting today establishes the connection only and does not import trades. As synchronization features launch, EdgeGhost will use your authorization to read the account and trade-history information needed to build your journal. We will update this section before that data is collected.
• Disconnecting. To disconnect and have us delete a connection’s stored tokens, email support@edgeghost.com.

• Sign-in cookies that keep you logged in. See “Cookies and browser storage” below.
• Analytics. On edgeghost.com we use Google Analytics to understand how visitors use the site, such as page views, sign-up button clicks, completed sign-ups, and completed imports (including which broker format was used). Google Analytics uses cookies and collects device, browser, and approximate location information. You can opt out with Google’s Analytics opt-out browser add-on or by blocking cookies.
• Error and performance monitoring. We use Sentry to find and fix errors. Error reports can include technical details such as browser type, the page or request involved, and a stack trace. We configure Sentry not to send default personal information, we remove credentials, tokens, and OAuth values before reports are sent, and we do not record sessions.
• Server logs kept by our hosting provider, which can include IP address, browser user agent, and request details.

• To create and secure your account and sign you in.
• To import, reconstruct, and display your trading sessions and analytics.
• To run broker connections you choose to authorize.
• To process subscriptions and show your billing status.
• To respond to support requests and feedback.
• To understand how the website is used and to find and fix bugs.
• To notify our team about new sign-ups and feedback.

We do not sell your trading data or use it for advertising.

We share information only with service providers that help us run EdgeGhost:

• Supabase: database, authentication, and file storage.
• Vercel: website and application hosting.
• Stripe: subscription checkout and billing. We share your email address and an internal account ID with Stripe to create your billing record.
• Sentry: error and performance monitoring.
• Google: website analytics (Google Analytics).
• Email delivery provider: sending account emails such as sign-up confirmation and password reset.
• Discord: private internal notifications to our team about new sign-ups (name, email, trading platform, referral source, and campaign source (utm_source) if present) and about feedback you submit in the app, which includes your message and feedback type, your account email and role, the page you were on, and technical identifiers (environment and request ID).
• NinjaTrader / Tradovate: only when you choose to connect an account through Direct Sync.

We may also disclose information when required by law or to protect the rights and safety of EdgeGhost and its users.

• Necessary: authentication cookies that keep you signed in, and a short-lived cookie used once to confirm a completed email sign-up.
• Preferences: your browser’s local storage keeps settings such as your theme, selected account, P&L time window, and dismissed banners. This stays on your device.
• Analytics: Google Analytics cookies (_ga and _ga_*) on edgeghost.com.
• We do not use advertising or retargeting pixels.

Some links to NinjaTrader are affiliate links, and EdgeGhost may earn a commission if you sign up through them. Other sites have their own privacy policies.

We keep your account data while your account is active.

• Delete imports: you can delete any import, or all imports for a broker account, from the Imports page. This permanently removes the related executions and rebuilds your trade history.
• Delete your account: email support@edgeghost.com from the email address on your account. Within 30 days, we will process your request and delete account data under our control, including imported trading data, journal content, uploaded screenshots, and stored broker connections and tokens, except records we are required or permitted to keep for legal, tax, billing, security, or fraud-prevention purposes.

Some records may remain with service providers after deletion, such as billing records Stripe keeps for tax and legal purposes, and logs or backups that expire on those providers’ own schedules.

We use access controls, including database row-level security, so each user can access only their own data. Broker tokens are encrypted before they are stored. No system is perfectly secure, and we cannot guarantee the security of information transmitted over the internet.

You can change your display name and password in Settings, delete imports at any time, cancel your subscription in the billing portal, and request a copy or deletion of your data by emailing support@edgeghost.com. Depending on where you live, you may have additional rights under local law.

EdgeGhost is operated from and intended for users in the United States. Your information may be processed by service providers in the United States and other locations where they operate.

EdgeGhost is not intended for anyone under 18, and users must be at least 18 to create an account.

We will update this page when our practices change. We may notify you by email or in the app when material changes are made, where appropriate or required by law.

Questions about this policy: support@edgeghost.com. See also our Terms of Service.