Privacy Policy

Account. Creating an account stores your email and password with Supabase Auth. You can instead sign in with Google. Google then shares the account details needed to create the session. Supabase sends the account emails, including address confirmation and password reset.

Profile. You can save a username, bio, timezone, base currency, theme, font, avatar style, and links for X, YouTube, Discord, Telegram, or a website. Onboarding can store the markets you trade, a goal, and whether you want a public profile. A referral stores the code you used and who referred you. On sign-in we record the time, and the IP address from that request the first time we see one for your account. You can also save an EVM wallet address on your profile.

Journal. Trades you log, import, or sync include the instrument, direction, size, prices, fees, profit and loss, dates, notes, tags, ideas, grades, and related fields. Journal entries and daily notes can include a title, writing, mood, session, and tags. Chart screenshots you upload are stored in Supabase Storage. Anyone who has the direct link can open a screenshot, so do not upload anything sensitive. A trade audit log keeps a full copy of a trade before and after each edit, and a full copy when a trade is deleted, until the account is deleted. Accounts you create can include balances, notes, and prop-firm details such as evaluations, rules, payouts, and breaches. Bot settings you save are stored with your account.

Exchange and wallet connections.A connection can store a public wallet address, such as a Hyperliquid, Ostium, or Polymarket address, an API key and secret, or, for Aster, an API-wallet private key. API credentials, including a Polymarket passphrase when you provide one, are encrypted with AES-256-GCM before they are saved. Loggr only makes read requests. You should create read-only keys; we don't need trade or withdrawal permissions.

Telegram and Discord.Linking Telegram stores your Telegram user id. If it is linked, Loggr sends alerts when trades open and close. Close alerts include the account name, entry and exit price, size, leverage, and P&L. Telegram also gets a daily and a weekly P&L summary. Messages you send the bot are used to add or look up trades. Linking Discord stores your Discord user id. You can unlink either connection in Settings. Temporary link codes are deleted after they are used or expire.

Diagnostics and on-device storage. The signed-in app loads Vercel Analytics for page views, and Sentry for errors. Sentry can record a masked session replay when an error occurs. It is set not to send default personal data. Before an event leaves Loggr we remove cookies and fields such as email, notes, balances, and trade details, and we keep only an internal user id. Your browser stores preferences such as theme, selected journals, dashboard layout, and a pending referral code. Prop-firm account id, email, and login link can be saved in the browser; stored passwords from older records are removed. Sign-in uses Supabase session cookies.

Account avatars are generated by DiceBear, a third party. Your browser sends your email address to DiceBear as the seed for that image. A public profile uses your username as the seed instead. Polymarket wallet cards use the wallet address.

Loggr does not offer paid plans and does not collect payment details.

We use this information to run your journal, show the dashboard and calendar, import or sync trades you ask for, send account emails, send Telegram alerts if you link the bot, and send a weekly email summary if you turn that option on. We also use it to keep the service working, investigate errors, operate referrals, and handle support and abuse reports.

We do not sell personal information, and we do not share it with advertisers.

We share information with companies that process it to provide Loggr:

• Supabase stores the database, files, and authentication, and sends account emails.
• Vercel hosts the app and provides product analytics on signed-in pages.
• Google handles sign-in when you choose Continue with Google.
• Sentry receives scrubbed error reports. Its ingest endpoint is in the United States.
• Resend sends the weekly summary when that email is turned on and Resend is configured. Otherwise the same email can be sent through Supabase.
• DiceBear, a third party, receives your email address from the browser when it draws your account avatar.
• Telegram receives trade alerts, P&L summaries, and bot commands if you link it. Discord receives the link only if you connect it.

When you connect an account, Loggr requests fills, balances, or positions from that venue: Aster, Binance, BingX, Blofin, Bybit, Coinbase, Gate.io, Hyperliquid, KuCoin, Lighter, MEXC, and Polymarket. The connection test for Hyperliquid and Lighter runs in your browser and calls Hyperliquid and Lighter directly, so those services see your IP address. A public profile is visible to anyone who opens it. The next section says what that includes.

Loggr admins, including the operator, can view your email, signup IP address, last login time, recent trades, Telegram ID, XP, and referral info. That access is for support and abuse prevention.

Your profile is private until you turn on a public profile. A public page can show your username, bio, avatar, color accent, social links, and the date you joined. You choose the rest: profit and loss, win rate, a trade list, summary stats, counts of active, evaluation, and funded accounts, and short posts you publish.

The public trade list shows instrument, direction, status, and dates. Profit and loss and fees appear only if you leave that switch on. Prices, position size, notes, screenshots, and account names stay off the public page. Appearing on the leaderboard is a separate choice, and it requires a public profile.

Loggr only makes read requests. You should create read-only keys; we don't need trade or withdrawal permissions. Aster uses an API-wallet private key. That key is encrypted the same way as other API secrets and decrypted on the server when a sync runs. You can disconnect an exchange at any time, which deletes the stored credentials.

Removing a Polymarket wallet stops Loggr from tracking that address. The encrypted keys stay in the database. Email support@loggr.trade if you want those keys purged.

We keep your journal for as long as your account exists. Trashed trades are removed from trash after 7 days. The trade audit log keeps a copy until the account is deleted.

In Settings you can delete your account. That deletes your login and the profile, accounts, trades, notes, and connections tied to it. If deletion doesn't complete for any reason, email support@loggr.trade and we'll remove your account and data manually. Deleting the account does not remove uploaded screenshots from storage.

Database backups are stored as gzip files. A mirror copy of a backup is not deleted on a schedule. Point-in-time snapshot tables of trades, journals, and exchange connections are kept with no set expiry. Backups and snapshots may hold copies of your data for longer than the live account. They are protected by access controls. Email support@loggr.trade if you want those copies removed.

In Settings you can download your trades as CSV or JSON, and a JSON backup of your accounts, trades, and daily notes.

The site is served over HTTPS. Session cookies are marked secure in production. Database rows are protected so a signed-in user reads their own data. Exchange secrets are encrypted as described above. These steps reduce risk. They are not a promise that unauthorized access cannot happen.

Loggr is not for anyone under 18. We do not knowingly collect information from children.

Loggr is operated from India. Supabase, Vercel, Google, Sentry, Resend, DiceBear, and the exchanges you connect can process information in other countries, including the United States.

If this policy changes, we will update this page and the date at the top.

Questions about this policy can go to support@loggr.trade.