Privacy Policy
Last updated 20 September 2026
This policy explains what TradeMai collects, why, and what you can ask us to do about it. It covers https://trademai.com and the practice app on it.
Who we are
TradeMai is a trading practice and backtesting tool. You can reach us at support@trademai.com about anything in this policy.
What we collect
When you sign in with Google: your Google account ID, email address, name and profile picture. We ask Google for nothing else, and we never see or store your Google password.
What you create in the app: practice accounts, orders, trades, drawings and settings. Today these are stored in your own browser, not on our servers. If you clear your browser data they are gone, and we cannot recover them. When we move this to our servers so your work follows you between devices, this policy will be updated first.
Preferences: the language, the light or dark theme, and the time zone you pick, stored in your browser.
Server logs: when you load a page or the app asks for market data, our servers record the request, the time, your IP address and your browser's user agent. These logs exist to keep the service running and safe, and are kept for a short period.
Why we use it
To sign you in and keep you signed in.
To show your practice accounts and trades back to you.
To keep the service available, investigate faults and prevent abuse.
To answer you when you write to us.
We do not sell your data, and we do not use it to profile or advertise to you.
Cookies
We use a small number of cookies and browser storage entries, all necessary for the site to work:
rl_session — proves you are signed in. It is signed, HttpOnly, and lasts 30 days or until you sign out.
rl_oauth — a short-lived cookie during the Google sign-in itself. It lasts ten minutes.
Browser storage — your theme, time zone and practice data, kept in your browser only.
We do not use advertising cookies. If we ever add analytics that need consent, we will ask first.
Who else is involved
Google handles the sign-in. Your use of a Google account is governed by Google's own privacy policy.
Vercel hosts the website and processes the requests to it.
DigitalOcean hosts the server that stores market data and answers the app's requests.
Dukascopy is the source of the historical market data. We fetch published price history from them; they receive nothing about you.
These providers process data on our behalf so the service can run. We do not share your information with anyone else unless the law requires it.
Where your data is
The website runs on Vercel's global network. The market data server is in Singapore. Your Google profile stays in the signed cookie in your browser and in server logs as described above.
How long we keep it
The session cookie expires after 30 days, or immediately when you sign out.
Server logs are kept for a short period for security and troubleshooting, then deleted.
Practice data stays in your browser until you clear it, or until you ask us to delete a server-side account once that exists.
Your choices
Sign out at any time from the menu in the app or the header on the site; that removes the session cookie.
Clear your browser data to remove the preferences and practice data stored there.
Write to support@trademai.com to ask what we hold about you, to correct it, or to have it deleted. We will answer within 30 days.
You can also remove our access from your Google account at any time, in your Google account's security settings.
Children
The service is not intended for anyone under 18, and we do not knowingly collect their data.
Changes
If this policy changes, the date at the top changes with it. If the change is significant, we will say so on the site.