English
This notice covers tradofe.com and the Trade Buddy Chrome extension (together, “Tradofe”). It explains what information we process, why we process it, and with whom it may be shared.
1. Information we process
- Account and profile information: email address, profile details you provide, and authentication identifiers. If you choose Google sign-in, Google provides the authentication information needed to create or access your Tradofe account.
- Trading information: while a supported TradingView or Tradovate page is open, Trade Buddy reads relevant account and trade information available to the page, such as account identifiers, orders, fills/executions, positions, instrument, direction, quantity, prices, timestamps, balance and profit/loss values. It uses this information locally for account monitoring and the protection rules you configure.
- Interaction signals: while Trade Buddy is active on a supported trading page, it locally evaluates repeated clicks, mouse movement patterns and rapid chart timeframe changes to show an optional break reminder. These interaction signals are not sent to Tradofe.
- Extension data: your Tradofe extension token, profile identifier, selected journal, protection settings and recent account/position identifiers. The token and selected account-linked settings are stored in AES-GCM encrypted form; their working copies and temporary financial snapshots or chart images use Chrome session storage. Session data is cleared when Chrome restarts or the extension reloads/updates. Selected settings and journal data are sent to Tradofe when needed for the service.
- Journal entries and screenshots: when you confirm a detected trade or submit a trade through the extension, the selected trade details (such as symbol, direction, entry/exit, quantity, result, P&L and notes) are sent to your Tradofe journal. A chart image is sent only when you attach or capture one for that entry.
- Website information: information and content you provide or create on Tradofe, including profile details, journals, posts, comments, messages, groups, watchlists and settings. Basic technical and security records may also be processed to operate and protect the service.
Trade Buddy reads relevant page responses; it does not collect your broker password, send orders, or place, change or cancel trades. Its protection features may block a new order action locally when you enable a rule. Reading begins only after you accept the data-use consent shown inside the extension.
2. How we use information
We use information to provide the Tradofe journal, display account information and protection status, apply the rules you configure, sync your selected journal data and settings, authenticate your extension, provide support, and maintain service security and reliability. We do not sell Trade Buddy trading data or use it for targeted advertising or credit decisions.
3. Chart images and sharing
Trade screenshots attached to journal entries are stored in Supabase Storage’s public post_images bucket. The image file can be opened by anyone who has its exact URL, even when the associated journal entry is not shared. This does not publish the journal entry or automatically add it to the Tradofe feed.
“Share card” download creates a file on your device. A feed post is created only after you choose “Share to Feed” and submit the post. Feed copies are separate from journal entries and must be deleted separately. Avoid attaching screenshots that contain information you do not want accessible through a shareable URL.
4. Service providers and sharing
Tradofe uses Supabase for authentication, database and file storage; the Supabase project is configured in the EU West region. Tradofe’s application and API are hosted on Oracle Cloud infrastructure. Google processes sign-in when you choose Google authentication. Whop and/or Lemon Squeezy may process payments, depending on the checkout flow offered to you. These providers process information under their own terms and privacy policies.
We do not sell personal or trading information. We share information with service providers only as needed to operate the features described here, when you choose to publish content, or when required to protect the service or comply with law. Direct and group messages are visible to the participants in those conversations. Posts and trade cards you submit to the feed may be visible to other Tradofe users according to the feed’s functionality.
5. Storage, retention and your choices
Trade Buddy stores ordinary preferences in Chrome local storage. The extension token and selected account-linked settings are stored there only as an AES-GCM encrypted envelope; decrypted working copies, monitoring snapshots and chart images use Chrome session storage and are cleared when Chrome restarts or the extension reloads/updates. The encrypted state is restored only after you accept the in-extension disclosure. Tradofe stores only a hash of each extension token; tokens expire after 90 days. Journal entries remain in your account until you delete them or request deletion. Deleting a journal removes its trade entries and attempts to remove their attached image files; separately published feed posts are not removed with the journal.
You can stop further extension access by disabling or removing Trade Buddy. To request access to, correction of, or deletion of account information, or to request earlier revocation of an extension token, email us. We may retain limited records where necessary for security, legal compliance or service recovery.
6. Security and independent services
Data sent between the extension and Tradofe uses HTTPS. The extension token and selected account-linked state are encrypted at rest with AES-GCM using separate non-extractable keys held in the extension’s IndexedDB; Tradofe stores only a token hash. This reduces exposure from plaintext storage inspection but cannot protect against a compromised extension runtime or device. We apply access controls to account and journal records. No online service can guarantee absolute security. Trade Buddy is not affiliated with, endorsed by, or sponsored by TradingView or Tradovate. Their services are governed by their own terms and privacy policies.
7. Chrome Web Store Limited Use
The use of information received from Chrome APIs and website content accessed by Trade Buddy is limited to providing or improving the extension’s disclosed journal and trading-discipline features, consistent with the Chrome Web Store User Data Policy, including the Limited Use requirements.
8. Contact and updates
For privacy questions or requests, contact onur.yzcc1@gmail.com. We may update this notice when our data practices or services change; the latest version will be published on this page.