Privacy Policy

This Privacy Policy explains how Mac Real Studios ("we", "us") handles information in connection with Trapper's Edge (the "Service"), a personal trade-planning, position-sizing, and journaling tool. By using the Service you agree to this Policy.

1. Information we collect

• Account information. If you create an account, our authentication provider (Supabase) stores your email address and an encrypted password. We never see your raw password.
• Your journal data. Trades, setups, notes, settings, sector ratings, and session/debrief entries that you create. By default this is stored locally in your browser. If you create a free account and turn on cloud sync, it is also stored in our database (Supabase) so it can back up and sync across your devices. Cloud sync is free and available to any signed-in account — it does not require a paid subscription.
• Brokerage data (optional). If you connect a brokerage account through SnapTrade, we retrieve read-only transaction history (fills) to help you build and review trades. We never receive your brokerage login credentials, and we cannot place or modify trades.
• Payment information. Subscriptions are processed by Stripe. We do not collect or store your card details; Stripe does. We store only a subscription status and identifiers needed to manage your access.
• AI features (optional). The "Edge Intelligence" features run on Google Gemini one of two ways. If you supply your own API key, it is stored only in your browser (local storage), never transmitted to or stored by us, and prompts go directly from your browser to Google. Pro subscribers without a key use our built-in AI instead: prompts pass through our server component to Google, are not stored, and are rate-limited per account.
• Market data key (optional). If you use the market-data regime suggestion, you supply your own Alpha Vantage API key. Like the AI key, it is stored only in your browser and requests go directly from your browser to the provider — we never see the key or the requests.
• Chart screenshots (optional). Images you attach to trades are stored only on your device (browser IndexedDB). They are never uploaded to our servers and do not cloud-sync.
• Weekly email digest (optional, off by default). If you turn on the digest in Settings, we compute a short weekly summary from your synced journal data and email it to your account address. Turn it off in Settings at any time, or via the note in each email.
• Local storage. We use your browser's local storage to keep your data and preferences on your device. We do not use advertising or third-party tracking cookies.

2. How we use information

• To provide and operate the Service (saving, syncing, and displaying your journal).
• To process subscriptions and grant access to paid ("Pro") features.
• To import and reconstruct your brokerage fills into trades for your review, when you connect a broker.
• To send the weekly email digest you opted into (and nothing else — we do not send marketing email).
• To maintain security, prevent abuse, and fix problems.

We do not sell your personal information.

3. Third-party services

We rely on the following processors, each governed by its own privacy policy:

• Supabase — authentication and cloud database (account + synced journal data).
• Stripe — subscription payments.
• SnapTrade — read-only brokerage connectivity (when you connect a broker).
• Google Gemini — only if you opt into AI features; prompts are sent to Google under your own key (free path) or our key (Pro built-in AI) and their terms.
• Alpha Vantage — only if you opt into market-data suggestions with your own key.
• Resend — delivers the weekly email digest, if you opt in.
• Cloudflare — hosting for the small server components that hold our service keys.
• GitHub Pages — hosts the site itself; like any web host, it may log standard request data such as your IP address.
• Cloudflare Web Analytics — privacy-first, aggregate page-view counts. It uses no cookies, no advertising identifiers, and no cross-site tracking.

4. Where your data is stored & how it's protected

Data in transit is encrypted (HTTPS). Cloud-stored journal data is protected by row-level security so that you can only access your own records. Secret keys used to talk to Stripe and SnapTrade are held server-side and are never exposed to your browser. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security.

5. Data retention & deletion

• You can delete your local data at any time via Settings → Data & export → Clear all data.
• You can turn off the weekly email digest at any time in Settings → Profile & cloud.
• You can disconnect your broker at any time, which removes the connection from our systems.
• To request deletion of your account and any cloud-stored data, contact us at support@macrealstudios.com.

6. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. You can export your trade log from the app (CSV/JSON), and you may contact us to exercise other rights. We will respond as required by applicable law.

7. Children

The Service is not directed to anyone under 18, and we do not knowingly collect information from them.

8. Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by notice within the Service.

9. Contact

Questions about this Policy: support@macrealstudios.com.