01About this policy
This policy explains how Chill Trading ("we", "us") handles personal data. It covers this website, your account, and the chill. desktop software ("chill.").
We are responsible for the personal data described here. We collect what we need to run your account, take payment, and check your license. If your cookie choice allows it, we also measure how visitors use this website and show our ads to people who visited it.
chill. is not for anyone under 18. We do not knowingly collect data from children.
02What we collect
- Account data. Your email address and your password. We store the password only as an Argon2 hash, so we cannot read it.
- Session data. When you sign in, we set a session cookie. It holds a random value. We store only a SHA-256 hash of that value, with your account and an expiry time.
- Usage data. If analytics or marketing is on (see Cookies, analytics, and advertising), Google collects the pages you visit, the page that sent you here, and how you use each page: scrolling, clicks on links to other websites, searches on this website, form use, video plays, and file downloads. It also collects your device, operating system, and browser, your approximate location (city level), and a random identifier stored in a cookie. Google Analytics does not store your IP address.
- Billing data. Stripe processes your card. We receive a record of each payment: the amount, the date, the last four digits and brand of the card, and your billing country. We never receive or store your full card number.
- License checks. chill. checks your license key with our server. Each check sends the license key, a device identifier that chill. creates, the chill. version, and your IP address.
- Crash reports. If you turn them on, chill. sends a report when it crashes. A report holds technical details such as the error, the chill. version, and your operating system.
- Support emails. When you email us, we keep the message, your email address, and our reply.
03What stays on your computer
chill. stores your trading data on your own computer. This includes your orders, positions, Risk guard rules, and journal entries. It also includes the credentials for your broker, data provider, or prop-firm account.
chill. connects directly from your computer to your broker, data provider, or prop firm. Your trading data and credentials do not pass through our servers, and we cannot see them.
Your broker, data provider, or prop firm collects its own data under its own privacy policy.
05How we use your data
We use your data to:
- create your account and keep you signed in
- take payment and send receipts
- check your license and stop misuse of license keys
- fix bugs and improve chill.
- see how visitors use this website, so we can improve it
- show ads for chill. to people who visited this website, and measure those ads (retargeting)
- answer your support requests
- protect our servers and meet our legal obligations
We use your data for analytics and retargeting only as your cookie choice allows. We do not sell your personal data for money. Under some US state laws, retargeting counts as "sharing" personal data or "targeted advertising"; see US state privacy rights.
07How long we keep it
- Sessions end when you sign out or after 30 days. We delete expired sessions every hour.
- Account data stays while your account is open. We delete it within 30 days after you ask us to delete your account.
- Billing records stay for 7 years, because tax law requires it.
- License check records stay for 12 months.
- Crash reports stay for 90 days.
- Support emails stay for 2 years after the last message.
- Analytics data: event data (what you did on each page) stays in Google Analytics for 2 months. Data tied to the random identifier stays for 14 months after your last visit. Reports show only totals, not individual visitors. The analytics cookies expire after 13 months.
- Retargeting audiences: a visitor stays in an audience for up to 180 days after the last visit.
08How we protect it
All traffic to this website uses HTTPS. We store passwords only as Argon2 hashes and session values only as SHA-256 hashes. If someone stole our database, they could not use it to sign in as you.
No system is perfectly secure. If a breach affects your personal data, we tell you as the law requires.
09Your rights
You can ask us to:
- give you a copy of your personal data
- correct data that is wrong
- delete your account and your data
- stop a use of your data that you object to
Email [email protected] from the address on your account. We reply within 30 days. Depending on where you live, you may also complain to your local data protection authority.
Deleting your account ends your plan. See the Refund Policy for what happens to payments.
10US state privacy rights
If you live in California, Colorado, Connecticut, Virginia, or another US state with a consumer privacy law, you have the rights in Your rights. You can also opt out of the sale or sharing of your personal data and of targeted advertising:
- use "Do Not Sell or Share My Personal Information" at the bottom of each page, or turn off Marketing in "Cookie settings"
- turn on Global Privacy Control in your browser; we treat it as this opt-out
- or email [email protected]
For retargeting, we share these kinds of personal data with Google: identifiers (cookie IDs), internet activity on this website, and approximate location. We do not sell personal data for money, and we do not knowingly sell or share the data of anyone under 16. We do not treat you differently for using these rights.
11Contact us
For questions about this policy or your data, email [email protected]. For help with your account or chill., email [email protected].
When we change this page, we update the date at the top. Chill Trading operates chill. under the laws of the State of Delaware, United States.