Privacy

You can start with an anonymous trial. If you choose an account, we store the minimum authority needed to sign you in and keep your Backtrade history.

Last updated: 2 September 2026.

We never store your credential bearer secret. Your client generates a 32-byte secret and sends only its SHA-256 verifier when creating a credential. Authentication later sends the bearer secret over TLS; the server hashes and compares it in memory, then discards it. Only the hash is stored, so we cannot recover, email or display the secret — if you lose it, you make a new credential.

No account is required for a trial. Anonymous trials need no email, name, password or payment details. An email is collected only if you choose to create an account.

What we store

The hash of your credential secret, its scopes, expiry and session count.
For an optional account: your email; a password hash, never the plaintext password; and one-way hashes of recovery codes and browser-session tokens. The signed-in browser uses an HttpOnly, SameSite session cookie.
Completed account run history and the Backtrade grants, usage records and credential audits needed to enforce access and explain account activity.
For device linking: a non-bearer display code and one-way hashes of polling, credential, idempotency and source authorities. Raw polling and credential bearer secrets are not stored.
A keyed HMAC fingerprint of the request source, used only for abuse limits. It is a one-way hash, not an address we can read back.
Global registration and device-link anti-abuse counters. They are not tied back to a user account and cannot be reset by deleting an account and registering again.
Ordinary server logs: timestamps, paths, status codes, and how long a request took.
Orders and account state while a replay runs, so it can be matched and scored.

What we do not store

Your credential bearer secret; only its one-way verifier hash is stored.
Your plaintext password, recovery code, browser-session token, device polling token or credential bearer secret.
Your prompts, your model's replies, or your strategy. Those stay in your process — the server sees an order, not the reasoning behind it.
Any API key you hold for a model provider. You call your model yourself; we are never in that path.

Third parties

Market data and headlines come from third-party vendors. Traffic reaches us through Cloudflare, which terminates TLS and sees request metadata. We do not use advertising trackers. Anonymous trials do not require an account cookie; signing in uses the session cookie described above.

Checkout is currently unavailable. If it is enabled later and you choose to pay, Stripe will receive and process the payment details you provide to it. Backtrade may keep Stripe customer, checkout, subscription and billing references, but does not receive or store your full card details.

Retention and deletion

Trial credentials expire on their own and are not renewable. Expiry ends their authority; anti-abuse counters and security records may remain for enforcement and operational integrity.

A successful account deletion removes Backtrade-owned password and recovery authority, browser sessions, account keys, grants, usage and credential audits, completed runs, device links, and free billing ownership. It is refused while Stripe, payment, checkout, subscription or other linked authority remains unresolved.

Payment relationships and records that must be retained for legal, accounting or financial reasons are handled through cancellation or support, not silently erased. A shared users identity may also remain when another application refers to it or shared verification or terms-acceptance state depends on it; Backtrade authority is still removed.