Last updated: 2026. This Privacy Policy explains how TraceTrade handles your information. By creating an account or using the application, you agree to the practices described below.
The data controller for TraceTrade is Bthrive Digital LLC, represented through the brand bthrivestudio.com.
TraceTrade is built around a local-first architecture. Your trades, wallets, and journal data are stored in your browser’s local storage by default and are never transmitted to our servers in readable form. Account authentication and an optional encrypted cloud backup are the only features that involve our servers.
If you choose to sign in with Google, Google Identity Services authenticates you directly in your browser. We request the standard openid email profile scopes and receive from Google an ID token containing only:
sub);We do not request access to your Gmail, Drive, contacts, calendar, or any other Google data, and we never see your Google password. Google’s processing of your data is governed by the Google Privacy Policy.
Alternatively, you can create an account with a username (@id) and a password. In that case we store only your username, a bcrypt hash of your password (the password itself is never stored in clear text), and your plan information. No email address is collected for @id accounts.
For all accounts we store: a unique internal identifier, your plan (free, trial, or pro), trial/subscription expiry dates, and creation/update timestamps.
If you explicitly enable cloud backup, your entire journal (wallets, trades, tags, settings) is encrypted in your browser before it leaves your device using AES-256-GCM with a key derived from your 4-digit passcode via PBKDF2 (100,000 iterations, SHA-256). Our servers receive and store only this encrypted blob. We have no access to your passcode and no technical means to decrypt your backup. If you lose your passcode, the backup cannot be recovered — by us or by anyone else.
In the standard configuration of TraceTrade, we do not collect, process, or store:
Because your trading data primarily remains on your device, its security also depends on the security of your device and browser. We recommend keeping your operating system and browser up to date, using device-level encryption, and setting a strong device lock.
TraceTrade lets you export your data as JSON (optionally encrypted with a 4-digit passcode), CSV (read-only report, cannot be re-imported), or PDF, and to re-import JSON backups.
You are solely responsible for your exported files and for the import/export process. This includes, without limitation: choosing whether or not to encrypt an export, keeping your encryption passcodes secret and safe, verifying the integrity of a backup before importing it, and maintaining your own copies. Bthrive Digital LLC cannot be held responsible for any loss, corruption, partial transfer, or unrecoverable encryption of data occurring during or as a result of an export, an import, a restore, or the use or storage of exported files — including loss of passcodes — regardless of the cause. See the Legal Notice for the full disclaimer.
TraceTrade itself does not use tracking cookies or advertising technologies. Authentication uses a token stored in your browser’s local storage (not a cookie). The Google sign-in button is served by Google and may set or read cookies on accounts.google.com in accordance with Google’s own policies. The application also loads the Inter font from Google Fonts, which may receive your IP address as part of normal web delivery. You can control cookies and site data through your browser settings.
TraceTrade relies on a small number of third parties: Google (authentication and fonts) and our hosting provider (server infrastructure). We are not responsible for the privacy practices of third-party websites, brokers, or resources that may be linked from the application, and we encourage you to review their policies.
Depending on your jurisdiction (including under the GDPR if you are in the European Economic Area), you may have rights regarding your personal data, including the right to access, correct, delete, or restrict its processing, and the right to data portability. Because most TraceTrade data is stored locally on your device and encrypted with keys only you hold, you can exercise many of these rights directly by clearing your browser storage, deleting exported files, or deleting your cloud backup and account. For any request directed to us, please contact us through bthrivestudio.com.
Account data is kept for as long as your account exists. You can delete your cloud backup at any time from within the application, which permanently removes the encrypted blob from our servers. To request deletion of your account and associated data, contact us through bthrivestudio.com. Data stored only on your device is removed when you clear your browser storage or uninstall the application.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date and, where appropriate, by providing notice within the application or on the publisher’s website. Continued use of the application after an update constitutes acceptance of the revised policy.
If you have any questions about this Privacy Policy or your privacy rights, please contact Bthrive Digital LLC via bthrivestudio.com.