🔐 Privacy Policy
Last updated: 11 July 2026 · How MySen Trading collects, uses and protects information. Short version: we collect what the site needs to run and stay secure, we don't sell it, we don't run third-party ad or analytics trackers, and you can delete yours at any time.
1. Who we are (data controller)
MySen Trading is an independent, educational site operated from the United Kingdom. The site operator is the data controller responsible for the personal data described here. Because the operator is UK-based, the UK GDPR and Data Protection Act apply; where you are in the EEA, the EU GDPR applies to your data. You can reach the operator through the Message the admin form on your profile; a public contact address will be published when the site's domain goes live.
2. What we collect
Account data (members): email address, display name, a securely
hashed password, and any optional profile content you add (intro, bio, avatar photo, service intros).
Content you publish: Trade Share posts, comments, reactions, chart snapshots, follows, collaboration
requests, and messages you send to the site admin.
Visit & security logs (all visitors): IP address, browser user-agent, pages requested, referrer and
time. We derive an approximate location (country and town) from the IP address. These logs power the site's
security monitoring and internal statistics.
Payment data (only if paid billing is later switched on): handled entirely by our payment processor (Stripe)
— we never see or store your full card details. Paid tiers are currently on a free trial with no payment taken.
Preferences: chart settings (style, candle width, background), MergeX chart templates including their saved
indicators, drawings, favourite timeframe and language choice are stored locally in your own browser (localStorage)
and never leave your device. Clearing your browser storage removes them.
3. Why we can use it (legal bases)
We process personal data on these lawful bases: contract — to give you the account and features you sign up for; legitimate interests — to keep the site secure, prevent spam and abuse, understand aggregate usage, and improve the service, balanced against your rights; consent — where we ask for it (for example any optional marketing email), which you can withdraw at any time; and legal obligation — where the law requires us to retain or disclose data.
4. Cookies
We use a small number of first-party cookies only: a membership session cookie (keeps you signed in, 30 days) and an administrative cookie on staff browsers. No third-party advertising, remarketing or cross-site tracking cookies or pixels are set.
5. How we use information
To operate the features you use (membership, community, charts); to keep the site secure (detecting scrapers, intrusion attempts and abuse — aggressive crawlers are blocked outright); to understand aggregate usage (visitor statistics); to apply jurisdiction restrictions (see §10); and to respond when you message us. We do not sell or rent personal data, and we do not use it for third-party advertising.
6. Who processes data for us
We keep third-party sharing to the minimum needed to run the site: hosting — the site runs on cloud infrastructure (DigitalOcean), which stores the data on our behalf; market data is fetched server-side from public financial data providers (Yahoo Finance and, where enabled, Twelve Data, Alpaca or Finnhub) — your identity is never part of that request; geolocation — visitor IP addresses may be sent to a lookup service (ip-api.com) solely to resolve country/town for our security log and jurisdiction gate; payments (only if billing is switched on) — Stripe; and fonts/chart libraries load from public CDNs (Google Fonts, unpkg), which see standard web-request metadata. News headlines link out to their original publishers. These providers act under their own privacy terms.
7. International transfers
The site's servers and some of the providers above may be located outside your country, including outside the UK/EEA. Where personal data is transferred internationally, we rely on appropriate safeguards (such as providers' standard contractual clauses or equivalent protections) so your data keeps an adequate level of protection.
8. Retention
Visit logs are kept ~30 days, problem pings ~60 days, and security/intrusion logs ~90 days, then deleted automatically. Account and content data stay until you remove them. We may keep certain data longer where required for legal, tax, accounting, fraud-prevention or security purposes, after which it is securely deleted or anonymised.
9. Public content — please note
Anything you publish in community areas (Trade Share posts, comments, snapshots, and your public profile fields) is visible to other visitors and may be indexed or cached by search engines. Your email address is never shown unless you choose to. When you message another member, the recipient keeps their own copy, which remains even if you delete yours. Be mindful of what you share publicly. You control your page's visibility in your privacy settings.
10. Your rights & controls
From your profile you can edit your details, control who sees your page and bio, selectively erase your activity (posts, reactions & comments, messages, connections, snapshots), or permanently delete your entire account — self-service, no request needed. Under the UK/EU GDPR you also have the rights to: access a copy of your data; have it rectified or completed; request erasure; restrict or object to processing (including a right to object to direct marketing at any time); data portability; and to withdraw consent where we relied on it. To exercise these, use the profile message form. If you have a concern you may also complain to a supervisory authority — in the UK, the Information Commissioner's Office (ICO); in the EEA, your local data protection authority.
11. Security
Traffic is served over TLS (HTTPS); passwords are stored only as salted hashes, never in plain text. The site runs active security monitoring: known scrapers and scanners are blocked, probing requests are logged, repeat offenders are banned by IP, and request rates are limited. No system is perfectly secure — use a unique email and be mindful of what you publish in community areas, which are public by design.
12. Legal disclosure & business transfers
We may disclose personal data where necessary to comply with a legal obligation, court order or lawful request, or to enforce our Terms, protect our rights, safety or property, or prevent fraud or abuse. If the site or its assets are ever transferred to another operator, user data may be part of that transfer, and it would remain subject to a policy no less protective than this one.
13. Jurisdiction & children
MySen Trading is not directed at or available to residents of the United Kingdom, and is offered only where lawful — see our Terms for eligibility; we may use approximate location (from your IP) to apply these restrictions. The site is not directed at children and trading content is inherently adult-oriented — do not use the site if you are under 18. We do not knowingly collect data from children under 18 or any special-category (sensitive) personal data; if you believe we have, contact us and we will delete it.
14. Changes & contact
We may update this policy; the date above changes when we do, and we will flag any significant change where required. Privacy questions: members can use the Message the admin form on their profile. A public contact address will be published when the site's domain goes live.
See also the Terms & Conditions and the Risk Disclaimer.