Privacy Policy

PropAlert (“PropAlert”, “we”, “us”) is a compliance-monitoring tool for funded traders, operated by an individual based in Denmark. This policy explains what personal data we handle, why, and the rights you have over it. Questions? Email contact@propalert.co.

Early access: account sign-ups are not open yet. Until they are, the only data we process from visitors is the basic server logs described below. The rest of this policy covers how PropAlert handles data once you create an account and use the service.

What we collect

• Account details. When you create an account: your name, email address, and password. Your password is never stored in readable form — we keep only a cryptographic hash (scrypt), which cannot be reversed back into your password.
• Trading data you enter. The accounts and rules you set up (prop firm, broker, account size, daily loss limit, drawdown, profit target) and any trades you log (instrument, profit/loss, lot size, dates). You enter this yourself.
• Broker connections (when available). If you connect a trading account, you provide read-only API credentials that let PropAlert read your balance, open P&L, and positions. They do not allow placing, changing, or closing trades. We never trade on your behalf.
• Technical data. A single essential cookie to keep you signed in (see below), and standard server logs kept by our hosting provider (such as IP address and timestamps) for security and reliability.

We do not use analytics, advertising, or tracking tools. We do not build advertising profiles, and we never sell your data.

Why we process it (legal bases under the GDPR)

• To provide the service you asked for — creating your account and showing your compliance status (performance of a contract).
• To keep the service secure and reliable — such as session cookies and server logs (our legitimate interest in a safe service).
• To respond to you when you contact us (legitimate interest / contract).

Cookies

We use one cookie: a secure, http-only session cookie that keeps you logged in. It is strictly necessary for the service to work, so it does not require consent. We use no advertising or non-essential cookies, which is why you won't see a cookie banner.

Who we share it with

We keep your data to ourselves and rely on a small number of service providers (“processors”) to run PropAlert:

• Vercel — website and application hosting.
• Namecheap Private Email — email sent to and from contact@propalert.co.

These providers process data only on our instructions. We do not share your data with advertisers, data brokers, or prop firms.

Where your data is processed

Our hosting provider operates globally and may process data outside the EU/EEA, including in the United States. Where that happens, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep it

We keep your account data for as long as your account is active. If you ask us to delete your account, we delete your personal data except anything we are required to keep by law. You can request deletion any time at contact@propalert.co.

Your rights

Under the GDPR you can: access the data we hold about you; correct it; delete it; export it (data portability); object to or restrict certain processing; and withdraw consent where we rely on it. To exercise any of these, email contact@propalert.co. You also have the right to complain to your data protection authority — in Denmark, that is Datatilsynet.

Security

Passwords are stored only as salted scrypt hashes. Sessions use signed, http-only cookies, and the site is served over HTTPS. No system is perfectly secure, but we take reasonable measures to protect your data.

Children

PropAlert is intended for adults trading funded accounts and is not directed at anyone under 18. We do not knowingly collect data from children.

Changes

We may update this policy as PropAlert develops. We'll post any changes here and update the date above.

Contact

Questions or requests about your data: contact@propalert.co.