Privacy Policy

Last updated: 29 October 2026

This policy explains what information TradeReplay handles when you visit the site, explore as a guest, or use a registered account. TradeReplay is a historical paper-trading simulator. It does not connect to a broker or place real orders.

Information we handle

• Account details: full name, optional display name, email address, date of birth, password-recovery hint, and account creation time. Your login password is stored as a one-way scrypt hash, not as readable plain text. The date of birth and recovery hint are stored and used to verify password-recovery requests.
• Practice and account records: selected stock and timeframe, replay progress, chart drawings, indicator and playback preferences, virtual balance, open positions, simulated orders, completed trades, and ledger entries.
• Guest use: replay state needed to operate a guest session may be held temporarily while the server is running. Guest practice is not saved to a registered account unless you sign in or register.
• Technical and abuse-prevention data: the server may process IP addresses and email identifiers for rate limiting and security. Hosting access logs may record an IP address, request path and time, response status, and browser request details. Rate limiting uses a 15-minute window, and old records are removed during later checks.

How we use information

We use account details to create accounts, sign users in, and support password recovery. We use practice records to save and restore simulations, calculate paper-trading balances and profit or loss, and show your trade history. Technical data is used to operate the website, protect it from abuse, and diagnose errors.

Historical market candles are read from the site's market-data database. They are not account records. TradeReplay does not submit your paper trades to a broker.

Cookies and advertising

TradeReplay uses an essential first-party session cookie to keep a registered user signed in. The cookie is marked Secure, HttpOnly, and SameSite, and a session expires after up to 14 days. The site does not use this cookie to store your password.

TradeReplay includes Google AdSense code. If Google ads are served, Google and its advertising partners may use cookies, web beacons, IP addresses, and browser or device identifiers to deliver and measure ads, limit repeated ads, and personalize advertising based on your settings and activity on this or other sites. Third parties may place or read cookies in your browser in connection with ad serving.

Learn how Google uses information from sites or apps that use its services. You can manage personalized advertising in Google Ads Settings. You can also visit aboutads.info for available opt-out controls.

Before serving personalized ads to users in regions where Google requires a certified consent platform, TradeReplay must configure the applicable consent controls. Ad availability is subject to Google's review and settings.

When information is shared

We use a VPS hosting provider to run TradeReplay and store its account database. Google and its advertising partners may process information as described above when AdSense is used. TradeReplay does not sell account or trading records, and does not share paper orders with a broker because no broker is connected.

Storage, retention, and account requests

Registered account and practice records are kept in the application database. The app currently has no automatic retention schedule or self-service account-deletion feature, so records may remain until manually removed following a request. Server logs are managed by the hosting environment and do not currently have a published retention period. Expired sign-in sessions and old rate-limit records are cleaned up by the application.

To ask about your account information or request correction or deletion, contact the site operator using the privacy contact listed below. Requests are handled manually. Your rights may depend on where you live.

Security

The site uses HTTPS, stores login passwords as one-way hashes, and restricts access to account storage. These measures reduce risk, but no website or data transmission can be guaranteed completely secure. Please do not use your actual password as your recovery hint.

Changes to this policy

We may update this policy when the site or its data practices change. The “Last updated” date at the top shows when this page was most recently revised.