Privacy Policy

• We collect only what we need to run EdgeLog.
• Your trades and journal entries are private. We never sell them.
• We do not use your data to train AI models.
• You can export everything or delete your account at any time.

From Google sign-in: your name, email address, and Google account ID. We never see your Google password.

What you create: trades, accounts, strategies, journal entries, habits, screenshots, and tags you add to the Service.

Operational data: session cookies, IP address, user-agent, and timestamps for the sole purpose of running and securing your account (e.g. detecting new-device sign-ins).

Billing data (if you subscribe): we use Polar.sh (cards), QPay (Mongolia), or NowPayments (crypto). We never see or store your card number — only the success/failure result and the last few characters needed to show the receipt.

To provide the Service: render your dashboard, save your trades, send transactional email (e.g. new-device alerts, billing receipts), and process payments.

To keep accounts secure: detect unusual logins and prevent abuse.

To improve the Service: aggregated, anonymous usage counts (e.g. number of trades logged this month). We do not profile you for advertising.

We share data only with the third parties needed to run EdgeLog:

• Google — for sign-in (no data flows back to ads).
• Resend — for transactional email delivery.
• Polar.sh / QPay / NowPayments — for billing if you subscribe.
• Cloudflare — DNS only.
• Umami — privacy-friendly, cookieless analytics on public pages.

We do not sell your data. We do not share it with advertisers.

EdgeLog runs on a single VPS in Tokyo (Contabo). Database backups are encrypted at rest. We do not currently transfer your data to other regions for processing.

Active accounts: we keep your data as long as your account is active.

Deleted accounts: 30-day grace period (so you can restore by replying to the confirmation email), then permanent purge.

Billing records: retained as long as required by tax law (typically 5–7 years), even after account deletion.

We use a single first-party session cookie (tj_session) to keep you signed in, plus a short-lived OAuth state cookie during sign-in. We do not use tracking or advertising cookies.

You can at any time:

• Export all your data as JSON from Settings → Security.
• Delete your account from Settings → Security (30-day grace).
• Email us to request access, correction, or earlier deletion.

EdgeLog is not intended for users under 18. If we learn we have collected data from someone under 18, we will delete it.

We may update this Policy. Material changes will be communicated via email or in-app notice before they take effect.

Privacy questions, access requests, or complaints? craftzbay@gmail.com.