Tradecraft

Privacy Policy

Last updated: 30 September 2026

This policy explains what personal data Tradecraft handles when you use tradecraftlearning.com (the website and the course app), why, who helps us process it, and your rights. We collect only what we need to run the course.

1. Who is responsible

Tradecraft, run from Switzerland, is responsible for the processing described here. You can reach us at support@tradecraftlearning.com about anything in this policy.

2. What we collect, and why

Your account

Your email address, and a password, which our sign-in provider (Google Firebase) stores in a protected form that we can’t read. If you sign in with Google, Google shares your email address and basic profile (name and profile picture) with our sign-in provider; we don’t use the name or picture. We also keep technical details of the account, such as when it was created and last used. Why: to give you an account, keep it secure and let you sign in on your devices.

Your progress

What you do in the course: lessons read, answers, flashcard schedules, scores, settings and saved positions in the payoff lab. It’s stored in your browser and in your account, so it follows you across devices. Why: to provide the course.

Your subscription

Your plan, its status and dates, and the customer and subscription references Paddle sends us. We don’t receive or store your card details. Paddle, our reseller and merchant of record, collects your payment and billing details (for example your name, billing country, card details and IP address, which it needs to take the payment and charge the right tax) and processes them as an independent controller under its own Privacy Notice. Why: to know which plan you have, open the course, and let you manage your subscription.

Emails

If you write to us, we keep your message and email address to answer you. We send you the emails needed to run your account and subscription, such as confirming your email address, resetting your password or telling you about a price change. We don’t send you marketing emails unless you’ve agreed to receive them.

Technical data

When you use the site, our hosting and service providers process technical data such as your IP address, browser and device type, and the pages requested. Why: to deliver the site, keep it secure and prevent abuse.

Visit statistics

We use Vercel Web Analytics to count visits. It uses no cookies and doesn’t identify you: it records the page visited, the site you came from, your approximate location (country, region and city), and your browser, operating system and device type. It tells visits apart with a temporary identifier that is discarded after 24 hours. Before a visit is recorded, we remove the parts of the address that could be personal, such as codes from the links in our emails. Why: to understand how the site is used and improve it.

3. Legal bases

Where the EU or UK GDPR applies, we rely on: the performance of our contract with you (account, progress, subscription, service emails); our legitimate interests in running, securing and improving the site (technical data, visit statistics, answering your messages); and your consent where we ask for it.

4. Cookies and browser storage

We don’t use advertising cookies or tracking pixels. The app stores data in your browser that it needs to work: your progress and settings, and your sign-in session with our sign-in provider. When you open Paddle’s checkout, Paddle may use cookies or similar technologies under its own policy.

5. Who processes your data

We use these service providers, which process data on our behalf or, for Paddle’s checkout, as an independent controller:

We don’t sell your personal data, and we don’t share it with anyone else unless the law requires us to.

6. International transfers

Some of these providers process data outside Switzerland and the European Economic Area, for example in the United States. Where that happens, we rely on the safeguards the providers offer, such as standard contractual clauses or, where applicable, the EU-U.S. and Swiss-U.S. Data Privacy Frameworks.

7. How long we keep data

8. Security

Connections to the site are encrypted, and our database rules let each account read only its own data. No system is perfectly secure, so please use a strong password that you don’t use elsewhere.

9. Your rights

Depending on the law that applies to you, including the Swiss Federal Act on Data Protection and the EU or UK GDPR, you can ask for access to your personal data, correction, deletion, a copy in a portable format, and restriction of or objection to its processing, and you can withdraw a consent at any time. You can do much of this yourself in the app: download a backup of your progress (Progress page), change your password and delete your account (Account page). For anything else, write to support@tradecraftlearning.com. You can also complain to a data protection authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU or the UK, the authority where you live.

10. Children

Tradecraft isn’t intended for children under 16, and we don’t knowingly collect their personal data.

11. Changes to this policy

We may update this policy. We’ll publish the new version on this page with its date, and tell account holders by email about significant changes.