Privacy Policy

Last updated: 2026

StratForge is operated by an individual developer based in Italy ("we", "us"). This policy explains what personal data we process, why, and the rights you have under the EU General Data Protection Regulation (GDPR). For any privacy request, contact us at the email listed at the bottom of this page.

1. What we collect

Data	Purpose	Legal basis
Email & password (hashed)	Create and secure your account	Contract (Art. 6(1)(b))
Strategies you build & save	Store your work so you can return to it	Contract
CSV data you upload	Run backtests at your request	Contract
Basic technical logs (IP, browser)	Security, abuse prevention, debugging	Legitimate interest (Art. 6(1)(f))

We do not sell your data, and we do not use it to train models or share it with advertisers.

2. CSV and market data you upload

When you import a CSV, it is processed to run your backtest. Uploaded price data and the strategies you create are stored against your account so you can access them later. You can delete them at any time from within the app. We treat your strategies as confidential to your account.

3. Cookies

We use a minimal set of cookies:

Strictly necessary — authentication/session cookies (provided by Supabase) that keep you logged in. These are exempt from consent under EU rules because the service cannot function without them.
Preference — a single cookie that remembers your cookie-banner choice.

We do not currently use advertising or third-party tracking cookies. If that changes, we will ask for your consent first.

4. Who processes your data

Supabase — authentication and database hosting (data processor).
Vercel / hosting provider — serves the application.

These providers act on our instructions under data-processing agreements. Some may process data outside the EU under appropriate safeguards (e.g. Standard Contractual Clauses).

5. How long we keep it

Account data is kept while your account is active. If you delete your account, your personal data and saved strategies are removed within a reasonable period, except where we must retain limited records for legal or security reasons.

6. Your rights (GDPR)

You have the right to access, correct, delete, restrict, or port your data, and to object to processing based on legitimate interest. You can exercise most of these directly in the app, or by contacting us. You also have the right to lodge a complaint with your local data protection authority (in Italy, the Garante per la protezione dei dati personali).

7. Children

StratForge is not intended for anyone under 18. We do not knowingly collect data from minors.

8. Changes

We may update this policy. Material changes will be reflected by the "last updated" date above.