The short version
- Your journal is yours. No other user can see it: no public pages, no leaderboard, no sharing of your trades. We access the database only when it’s needed: to fix a problem you reported, for security, or because the law requires it. We don’t sell your data, we don’t run ads, and we pass nothing to brokers, prop firms or other users.
- We collect what the service needs: your account, what you write or import into the journal, and the technical data that keeps it running. With Google sign-in we receive only your name, email address and profile picture.
- The AI features send what they need to Groq, our AI provider, always from our server: statistics the app has already calculated, the names of your setups and your rules for the day, the text you ask it to interpret or correct, the audio you dictate. Never your name, email address or picture. They are on the paid plans only.
- Pro and Elite are not on sale yet. You can join a waitlist with a free account, and we email you when your plan opens. Newsletter emails only if you tick the box, and you can stop them any time.
- Autosync reads files, not your broker. The widget reads the fill files DeepCharts already saves on your computer: no broker password, no connection to your broker, no orders.
- No advertising or tracking cookies. Our public pages are measured with Vercel Web Analytics, which uses no cookies and shows us only aggregate numbers.
- Your journal is stored in the EU (Frankfurt), by Supabase. Supabase and most of our other providers are US companies, and the transfers to those that work for us rely on the EU-US Data Privacy Framework or on Standard Contractual Clauses.
- You stay in control. Export everything as a JSON file and delete your account from the app whenever you want. For anything else, write to support@deliriumoftraders.com.
1. Who we are
Delirium of Traders is a trading journal for futures traders, including traders on prop firm accounts: a website, a web app and a desktop widget for Windows. It is run by Lorenzo De Poli, in Italy, who is the controller of your personal data: the one who decides why and how it is used. In this policy, “we” means the business behind Delirium of Traders, and “you” means you, the person using it.
- Controller: Lorenzo De Poli, Italy
- Email: support@deliriumoftraders.com, for privacy questions, support and complaints alike
We have not appointed a data protection officer (DPO): the law doesn’t require one for a business like ours.
What this policy covers
The website at deliriumoftraders.com (home page, feature pages, sign-up and these legal pages), the web app with your journal, the Windows widget with Autosync, and the emails between us.
We serve traders all over the world, but we are based in the European Union, so the GDPR (the EU General Data Protection Regulation) applies to the data of every user, wherever you live. The rules for using the service are in the Terms of service.
2. What we collect
Most of it comes from you; the rest comes from your computer through the widget, from your browser, and from Google and Whop when you choose to use them.
Your account
From you, when you sign up and use the app:
- your email address;
- your password (at least 8 characters). It is handled by the sign-in service of Supabase, our database provider, and stored only as a hash (a scrambled, one-way version of it): nobody can read it in plain text, not even us;
- the optional fields of the sign-up form, Code (a community or discount code) and Community (the community you come from). Today a code is simply saved with your account;
- if you join the waitlist for Pro or Elite (by clicking “Join the waitlist” on the site, or from inside the app), the plan you are waiting for and the date you joined;
- if you tick “Send me occasional news and offers”, your consent and the date and time you gave it;
- your plan;
- your preferences, such as language (English or Italian), light or dark theme and date format;
- the date you created your account and the date of your last sign-in.
Signing in with Google
From Google, only if you choose “Continue with Google”: your name, email address and profile picture, and nothing else. See Signing in with Google.
Whop verification
From Whop, only if you are a member of the Blood, Sweat & Scalp community and verify your membership in Settings to get the Elite plan free: your Whop user ID, your Whop username and whether your membership is active. We send nothing to Whop.
Your journal
From you: everything you write in the app or import into it.
- Trades: instrument, direction, quantity, entry and exit prices and times, commissions, P&L, grade, tags, notes, screenshots, and the day’s candles saved with the trade.
- Trading accounts: name, capital, prop firm, rules and groups.
- Setups, prop challenges and their rules, your diary and your pre- and post-session notes, notes, daily rules, Backtester scenarios and the history of your imports.
- From the widget: notes and the day log. In the app and in the widget: the text you dictate.
Trades can also come from CSV files you import (today from DeepCharts / Rithmic) or through Autosync. Images and screenshots are kept in Supabase’s file storage. As a safety net, the app also keeps the last 30 versions of each item.
The journal is for your trading: please don’t put sensitive information in your notes, such as anything about your health, and don’t put in information about other people.
Autosync and AI features
On the paid plans: your fills, from the files DeepCharts saves on your computer (see Autosync and the widget), and what each AI feature needs (see The AI features).
Emails and support
We send service emails, such as the sign-up confirmation, password resets and invitations, through Resend, from noreply@deliriumoftraders.com. If you are on a waitlist, we also email you when your plan opens: you asked for that email by joining.
News and offers (our newsletter) reach you only if you ticked the box at sign-up. Every such email has a link to stop them, and you can also switch them off in Settings → Account → Newsletter. If you never ticked the box, you get none.
When you contact us, by writing to support@ or through the support form in the app (sent through Resend), we receive your email address, your message and whatever else you choose to tell us. Emails to support@deliriumoftraders.com are forwarded by Cloudflare Email Routing to our Gmail mailbox, hosted by Google, and our replies are sent through Resend.
Payments
Pro and Elite are not on sale yet, so today we take no payments and collect no payment data. Before paid plans open, we will update this policy to say which payment provider handles them and what it shares with us.
Website statistics
From your browser, on our public pages only, without cookies: see Website statistics.
Technical logs
From your browser or device, automatically. Vercel (which hosts the site, the app and our server functions) and Supabase (database and sign-in) process your IP address, your browser and the data of each request, to make the service work and keep it secure.
3. Signing in with Google
“Continue with Google” is an optional way to create your account and sign in, on the website and in the widget. You can always use an email address and a password instead.
What we receive
Only your name, email address and profile picture. We ask Google for the basic scopes only: openid, email and profile. We get no access to your Gmail, contacts, Drive, calendar or anything else in your Google account. You sign in on Google’s own page, so your Google password is never shared with us.
How we use it
- to create your account and recognize you each time you sign in;
- your name and picture may appear in your profile inside the app;
- your Google email address becomes the email of your account, so it is also where our service emails go and, only if you join a waitlist or tick the newsletter box, the email that tells you your plan has opened and our newsletter.
If your Google email address matches an account you already have, both ways of signing in lead to that account: no duplicates.
If you sign up with Google, the optional sign-up fields (code and community, the waitlist you joined, if any, and your newsletter choice) wait in your browser for a few moments while you are on Google’s page, then are attached to your new account.
How we store and share it
Your name, email address and picture are stored with your account in our database, run by Supabase, which also handles the sign-in itself. Resend uses your email address to deliver our service emails. None of the AI features sends your name, email address or picture to Groq: what each one sends is listed in The AI features. We don’t sell this data, we don’t use it for advertising, and we don’t share it with anyone except the providers that run the service for us, as far as they need it, or when the law requires it.
Delirium of Traders' use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Removing access and deleting the data
You can remove Delirium of Traders’ access to your Google account at any time from your Google Account permissions page. Removing access there doesn’t delete your Delirium of Traders account or the name, email address and picture we already received. To have them deleted, delete your account from the app, or write to us and we will do it for you (see How long we keep it).
Google is an independent controller for your Google account and its sign-in page, and its own Google Privacy Policy applies there.
4. The AI features
Some features of the paid plans use artificial intelligence to write text or to turn your voice into text. All of them go through Groq (Groq, Inc., USA), our AI provider. We call Groq only from our own server, never from your browser, and Groq processes the data on our behalf, to produce the answer.
| Feature | What it sends to Groq |
|---|---|
| The Coach’s summary | Statistics the app has already calculated from your trades (results, times, percentages), the names of your setups and your rules for the day. Not your notes |
| Hello Trader (opening and closing your day) | The same kind of figures, setup names and daily rules needed to write that text |
| The rule interpreter (Backtester and widget) | The text of the rule you write in words |
| The button that corrects what you wrote (✦) | The text you ask it to correct |
| Voice dictation | The audio you record, that is your voice, which comes back as text |
Groq never receives your name, email address or picture, nor even the identifier of your account.
The text models, and the speech-to-text model used for dictation (Whisper), are open models that run on Groq’s own servers: your data goes to Groq, not to the companies that originally released those models.
- On the Free plan there are no AI features, so nothing is sent to Groq.
- Dictated audio goes to Groq, so don’t dictate anything you wouldn’t write in your notes.
- How Groq handles data: Groq’s privacy policy.
5. Autosync and the widget
The widget is a desktop app for Windows, included in the paid plans, for notes, trades, screenshots, the day log and daily rules during the session. It signs in to the same account as the web app, with email and password or with Google, and saves what you do straight into your journal, in our database run by Supabase.
Downloading it
You download the widget from GitHub. GitHub receives only the technical data of the download, such as your IP address and browser, and none of your account data. For the download, GitHub is an independent controller: see the GitHub General Privacy Statement.
What stays on your computer
The widget keeps on your computer your session, its settings and the data it needs to work.
Autosync
With Autosync, the widget reads the fill files DeepCharts already saves on your computer, rebuilds your trades from them and sends the trades to your journal. From those files it takes the instrument, side, quantity, price, time, commissions and the account name as it appears in the platform. It reads only those files, and only the last seven days of them.
- No broker password, no connection to your broker, no orders.
- It works only while the widget is open, and for now only with DeepCharts.
6. Website statistics
To understand how people use our public pages (the home page, the feature pages, the sign-up page, these legal pages and the 404 page) we use Vercel Web Analytics. It doesn’t run inside the app: your journal is never part of these statistics.
According to Vercel’s documentation:
- it uses no cookies;
- it tells visits apart with a scrambled code made from the request (a “hash”), which is thrown away after 24 hours;
- it has no identifier that follows you from one website to another;
- the data is used only in aggregate form.
Each data point contains the date and time, the page address, the referrer (the page you came from), the extra parameters at the end of the page address, after the “?” (filtered), your approximate location (country, region, city), and your operating system, browser and type of device.
On top of page views, we record a few events of our own:
- clicks on the Start for free and Sign in buttons and on the buttons for the Pro and Elite plans (today “Join the Pro waitlist” and “Join the Elite waitlist”), with the page and section the click came from;
- “pricing seen”;
- how far down a page you scroll (25, 50, 75 or 100%);
- “sign-up form sent”: only that the form was sent, never what you typed in it.
Vercel keeps this data, in aggregate form, for up to 12 months. We rely on our legitimate interests, and you can object (see Why we use your data).
7. Cookies and browser storage
We don’t use advertising or tracking cookies. The website and the app keep a few small things in your browser’s storage:
| What | Where | Why |
|---|---|---|
| Your sign-in session from Supabase (sb-…-auth-token) | localStorage | Keeps you signed in |
| App preferences (theme, language, the section you were in…) | localStorage | Remembers your choices |
| _dot_iscrizione_google | localStorage, for a few moments | Holds your optional sign-up fields (code, community, waitlist, newsletter choice) while you sign up with Google |
| A check for an existing session, on the website’s pages | Stores nothing new | Reads the session above, to show “Open your journal” instead of “Sign in” |
| A note that you have already seen the animated intro on the website’s Widget page | sessionStorage | Remembers it for the rest of your visit |
All of these are either strictly necessary to give you the service you asked for, such as keeping you signed in, or remember choices you made yourself, such as language and theme. Under Art. 122 of the Italian Privacy Code (Legislative Decree 196/2003), which applies the EU ePrivacy rules, and the Garante’s cookie guidelines of 10 June 2021, this kind of technical storage doesn’t need your consent, so there is no cookie banner. Our website statistics use no cookies at all (see Website statistics). The website and the app host their font and code themselves: their pages send no request to Google Fonts or to other outside services, apart from the ones described in this policy. You can clear this storage from your browser settings at any time; clearing the session signs you out.
On Google’s sign-in page and on Whop’s pages, their own cookies and rules apply.
8. Why we use your data
The GDPR allows us to use personal data only with a legal basis (Art. 6(1) GDPR). These are ours:
| What we use it for | Legal basis |
|---|---|
| Your account and sign-in (email and password, or Google), your journal, imports, the widget and Autosync | Contract (Art. 6(1)(b)) |
| The AI features and voice dictation, when you use them | Contract (Art. 6(1)(b)) |
| Checking your Blood, Sweat & Scalp membership with Whop | Contract (Art. 6(1)(b)) |
| Managing your plan | Contract (Art. 6(1)(b)) |
| Keeping you on the waitlist and emailing you when your plan opens | Steps you ask for before a contract (Art. 6(1)(b)): you asked by joining the waitlist |
| The newsletter (news and offers), only if you ticked the box | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Service emails and answering your support requests | Contract, including steps you ask for before signing up (Art. 6(1)(b)). If you don’t have an account and write about something else: our legitimate interest in answering people who contact us (Art. 6(1)(f)) |
| Anything the law requires us to keep or disclose | Legal obligation (Art. 6(1)(c)) |
| Security, technical logs and preventing abuse | Legitimate interests (Art. 6(1)(f)) |
| Aggregate website statistics, without cookies | Legitimate interests (Art. 6(1)(f)) |
| Knowing which community you came from (the optional Code and Community fields) | Legitimate interests (Art. 6(1)(f)) |
| Defending our rights in a dispute | Legitimate interests (Art. 6(1)(f)) |
Our legitimate interests, in plain words: keeping the service and your journal safe from attacks and misuse; knowing which pages and buttons work, so we can improve the site, without cookies and without following you around; knowing which communities bring people to us; answering people who write to us; and being able to show what happened if there is ever a dispute. Each uses little data, in ways you would reasonably expect.
Your right to object: you can object at any time to any use based on our legitimate interests, by writing to support@deliriumoftraders.com. We will then stop, unless we have compelling legitimate grounds that override your interests, such as stopping an attack, or we need the data to establish, exercise or defend legal claims (Art. 21 GDPR).
We rely on your consent only for the newsletter. You give it by ticking the box at sign-up (it is never ticked for you), and you can withdraw it at any time, in Settings or with the link at the bottom of every newsletter email. Withdrawing it doesn’t make earlier emails unlawful, and it changes nothing else in your account (Art. 7(3) GDPR). We use no cookies that aren’t necessary.
10. Transfers outside the EU
Most of our providers are based in the United States, and Vercel serves the site and the app through a worldwide network, so your data may be processed outside the European Economic Area. Supabase stores your account and your journal in the European Union (Frankfurt, Germany).
For the providers that process data on our behalf, these transfers rely on one of the following:
- the EU-US Data Privacy Framework, which the European Commission has officially recognized as protecting data adequately (an “adequacy decision”), for providers certified under it. You can look up any company on the official Data Privacy Framework list;
- the Standard Contractual Clauses approved by the European Commission: data-protection terms included in the contracts that govern how these providers handle data for us.
To get a copy of the safeguards that apply to a provider, write to support@deliriumoftraders.com. We will send it to you or tell you where the provider publishes it.
11. How long we keep it
| Data | How long we keep it |
|---|---|
| Your account and your journal, including the data received from Google or Whop and the versions the app keeps | As long as your account exists, on any plan. When you delete your account from the app, all of it is deleted from our database right away, the history of versions and your screenshots included, and it disappears from our backups within 7 days. |
| Your place on a waitlist | As long as your account exists, like the rest of your account data. You can leave the waitlist at any time in Settings → Plan, or ask us to take you off it by writing to support@deliriumoftraders.com |
| Your newsletter consent and its date | Until you withdraw it or delete your account. When you withdraw it, we keep the date you did so, as proof that we respected your choice, for as long as your account exists |
| Support messages | As long as we need to answer and follow up your request, and no longer than 24 months after the conversation ends |
| What the AI features send to Groq (statistics, setup names and daily rules, the text you ask it to interpret or correct, dictated audio) | Groq processes it on our behalf to produce the answer. How long Groq keeps it is set by Groq’s own terms: see Groq’s privacy policy. The text you dictate, once it is in your journal, is kept like the rest of it. |
| Website statistics | In aggregate form, for as long as Vercel keeps them: up to 12 months |
| Technical logs | A short time, under Vercel’s and Supabase’s own rules |
If the law ever requires us to keep something after you delete your account, we keep only that, and only for as long as the law requires.
12. How we protect it
- Connections to the website, the app and the widget are encrypted (HTTPS).
- Passwords are stored only as a hash (a scrambled, one-way version of them) by the sign-in service: nobody can read them in plain text, not even us.
- Access controls are set up so that each journal can be seen only by the person who owns it.
- Access to the systems behind the service is restricted.
Who can see what
No other user can see your journal: no public pages, no leaderboards, no sharing of your trades.
On our side, the list of sign-ups shows us your email address, plan, the waitlist you joined (if any), your newsletter choice, code, community and sign-up date. Because we run the service, we can technically access the database, and we do so only when it is needed: to fix a problem you reported, for security, or because the law requires it.
If a data breach ever put your rights at high risk, we would tell you, as the GDPR requires.
13. Your rights
Under the GDPR you have these rights over your personal data:
- Access (Art. 15): get a copy of your data and know how we use it.
- Rectification (Art. 16): have wrong data corrected. You can edit your journal yourself; for anything you can’t change, write to us.
- Erasure (Art. 17): have your data deleted. The quickest way is to delete your account from the app.
- Restriction (Art. 18): have us keep your data but stop using it, for example while we settle a question you raised about it.
- Portability (Art. 20): get your data in a file other apps can read. The JSON export in the app is exactly that, and you can download it whenever you want.
- Objection (Art. 21): object to the uses based on our legitimate interests, such as the website statistics (see Why we use your data).
- Withdrawing consent (Art. 7(3)): stop the newsletter at any time, in Settings or with the link in every newsletter email.
- Complaint (Art. 77): complain to a data protection authority.
How to use them
The JSON export and account deletion are in the app. For everything else, write to support@deliriumoftraders.com. We answer within one month. If a request is complex, or we receive many, the GDPR lets us take up to two more months: in that case we tell you within the first month (Art. 12(3)). We may ask you to confirm that the account is yours first.
If you go back to the Free plan, whatever is above the Free limits stays read-only until you upgrade again, but you can still export it, delete your account, or ask us to delete those items.
You can complain to the Italian data protection authority, the Garante per la protezione dei dati personali, or to the authority of the EU country where you live, where you work or where you believe the infringement took place, listed among the EDPB members.
14. What you must give us, and what is optional
As Art. 13(2)(e) GDPR requires, here is what you must provide and what happens if you don’t:
- To have an account you need an email address and a password, or a Google account. Without one of them we can’t create an account.
- Code and Community on the sign-up form are optional: leave them empty and your account works the same.
- The waitlist and the newsletter are optional too: without them you simply get no email about paid plans or news.
- Your journal is up to you: the app works with whatever you choose to put in it.
- The AI features, dictation and Autosync are optional. Data goes to Groq only if you use the AI features or dictation.
- Whop verification is needed only if you are a Blood, Sweat & Scalp member and want the Elite plan free.
15. Automated decisions
We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects on you (Art. 22 GDPR). The AI summaries and the Monte Carlo simulation of the Prop Tracker are information for you to read, not decisions about you.
16. Children
Delirium of Traders is about futures trading, and it is for adults: you must be at least 18 to create an account. We don’t knowingly collect data from anyone under 18. If you think a minor has created an account, write to us so we can delete it.
17. Changes to this policy
We publish every new version of this policy on this page, with its date at the top. If a change affects how we use your data in an important way, we will also tell you by email or in the app before it takes effect.
18. Contact
For any question about this policy or your data, or to use your rights, write to support@deliriumoftraders.com. Our full details are in Who we are.