Privacy policy

This policy explains what Trading Signal Discussion stores when you browse or sign in.

Reading the site

You can read posts without an account. The server receives the usual request data needed to answer you, including your IP address. Contact-form abuse controls store a hash of the IP address, not the raw address, with the message.

Google sign-in

If you continue with Google, we receive the account identifier, email address, display name, and profile image URL that Google provides. We store those so we can recognize you and show a name next to comments. You can keep the Google name or choose a custom display name. We do not receive your Google password. Your email is not shown on public posts. Contact messages and complaints require this sign-in and store the account they were sent from.

Session and persistent login

A short-lived session cookie keeps you signed in while you use the site. A separate persistent cookie can keep you signed in for about 90 days. That cookie contains a random selector and a random secret. The database stores only a hash of the secret, plus an expiry, a hash of the browser user agent, and when the token was last used. Logging out of this device revokes that token. Logging out of all devices revokes every token for your account.

What you post

Comments, reactions, and reports are stored with your account id. Reports include the reason and any note you add. Moderators can review them. Deleted comments are hidden from the public feed; the text may remain in the database so moderation history is not destroyed.

Evidence images

Evidence is an external https address. Your browser loads that image from the other host only if you choose View evidence. That host may see your request. We do not download the file onto this server.

Cookies

We use a session cookie and, after you sign in, a persistent login cookie. Both are HttpOnly and SameSite=Lax. They are marked Secure when the site is served over HTTPS. We do not use advertising cookies.

Retention and requests

Account and comment records are kept while the community operates, including records needed for moderation. To ask about your data, use the contact form or the complaint page.