Privacy Policy

Effective September 28, 2026

This Privacy Policy explains what information Ledgerline, operated by WiseWinkLLC ("we", "us"), collects, why, and the choices you have. It applies to the Ledgerline web application.

1. Information we collect

Information you give us

• Account details: your username, the email address you register with, and your password, which we store only as a salted Argon2id hash, never in readable form.
• Records you enter: margin calculations and trades, spot positions, prices, amounts, balances, deposits, transfers, withdrawals, descriptions, tags, milestones, your trading plan, and account settings such as account size and daily loss limit.
• Alert settings: whether you want email alerts, and the Telegram chat ID you enter.
• Files you upload: trade screenshots attached to your Trade Log, and backup files you choose to restore.

Information collected automatically

• Security data: failed sign-in attempts are stored with the username and IP address for a short time, to lock out repeated password guessing. We record your sign-up and last sign-in time.
• Cookies: one session cookie (HttpOnly) keeps you signed in and carries a security token against cross-site request forgery. We don't use advertising or analytics cookies.
• Password reset links: when you ask for one, we store a scrambled (hashed) copy of the link's code, when it expires and whether it was used.
• Portfolio snapshots: once a day we record your spot portfolio's total cost, market value and realized P&L so Analytics can show its history.
• Browser storage: your light/dark theme choice is kept in your browser's local storage.
• Server logs: our web server may log IP addresses, request paths and errors to keep the Service running and secure.

2. How we use it

• to provide the Service: store your records, calculate balances, P&L and analytics, and show notifications;
• to secure accounts, prevent abuse, and troubleshoot problems;
• to let an administrator of this Ledgerline installation manage accounts (admins can see usernames, email addresses, sign-up and last sign-in dates, and how many records each account has);
• to comply with legal obligations.

We don't sell your personal information, don't use it for advertising, and don't share your trading records with anyone except as described below.

3. Third parties

• CoinGecko: to show live prices, our server requests prices for the coins in your positions, and your browser loads the price ticker directly from CoinGecko's public API, so CoinGecko receives your IP address as part of that request. We don't send them your account details.
• Content delivery networks: some page styles, icons and scripts load from jsDelivr, which likewise receives your IP address and browser information.
• Email and Telegram: password-reset links and alerts you turn on are sent through our email provider and, if you add a chat ID, Telegram. They receive the message, your email address or chat ID.
• Hosting: the Service and its database run on servers we control or rent; the hosting provider processes data only to run that infrastructure.
• Legal requirements: we may disclose information if required by law or to protect the rights and safety of our users or the Service.

4. Retention and deletion

We keep your data while your account exists. Items you delete go to Trash, where you can restore them or remove them permanently. Failed sign-in records are kept only as long as needed for lockout. To have your account and all its data deleted, contact us (see below).

5. Your choices and rights

• Access and portability: download a full copy of your data at any time from Profile › Backup & restore.
• Correction: edit or delete your records directly in the app.
• Deletion: request deletion of your account as described above.

Depending on where you live, you may have additional rights under local law; contact us to exercise them.

6. Security

We use hashed passwords, CSRF protection, secure session cookies, sign-in rate limiting and per-account data isolation. No system is perfectly secure, so please use a strong, unique password.

7. Children

The Service is not intended for anyone under 18, and we don't knowingly collect their information.

8. Changes to this policy

We may update this policy and will change the effective date above when we do. Material changes will be highlighted in the Service.

9. Contact

Privacy questions or requests can be sent to WiseWinkLLC through the contact channel you used to get access to Ledgerline.