Privacy Policy

TradingTune is a browser extension that automates parameter optimization and backtesting for trading strategies on TradingView, running entirely inside your own web browser. We built TradingTune to be private by design: your trading strategies, parameter ranges, optimization runs, and results are processed locally on your device and are never transmitted to, uploaded to, or stored on any TradingTune server. Running optimizations does require a free account and sign-in, and to enforce the free daily allowance the extension sends us only your account identifier and your per-day optimization-cycle count (see Section 4). This Privacy Policy explains what limited information the TradingTune browser extension and the TradingTune website (tradingtune.com) handle, how it is used, the legal bases we rely on, and the rights you have. Because the extension and the website have different data practices, we describe each separately below.

1. Introduction and scope

This Privacy Policy applies to two distinct things, treated separately because their data practices differ:

• The TradingTune browser extension, a Chrome / Brave (Manifest V3) extension that runs locally in your browser to optimize and backtest trading strategies on TradingView.
• The TradingTune website, the marketing and informational website at tradingtune.com, which is a static website.

"TradingTune," "we," "us," and "our" refer to TradingTune Support Team, the provider of TradingTune. "You" refers to the user of the extension or visitor to the website. TradingTune is an independent product and is not affiliated with, endorsed by, or sponsored by TradingView, Inc. Your use of TradingView itself is governed by TradingView's own terms and privacy policy, which we do not control.

2. Our core principle: local-first, privacy by design

The most important thing to understand about TradingTune is that the extension does its strategy work entirely within your browser.

• Your strategies, the parameter ranges you configure, your optimization runs, and the backtest results are all processed locally on your device.
• This data is stored only in your browser's local extension storage on your own computer.
• Your strategy data stays local and is never sent to us. We operate no backend server that ingests, receives, collects, or stores your strategies, parameters, runs, or results, and there is no cloud sync of your strategies to us.
• Separately, running optimizations requires a signed-in account. To enforce the free daily allowance, we receive only your account identifier and your daily optimization-cycle count. We do not receive your strategy data as part of this. This account and usage data is described in Section 4.

In short: your trading data stays on your machine. We designed the product so that we never need to see it, and we do not; the only extension data we receive is your account ID and your daily cycle count.

3. What the extension accesses, and why

TradingTune is a tool that you operate within your own browser, on the pages you choose to use it on, and at your own direction. To provide its optimization and backtesting features, the extension works with the content of the current page in your browser (the page's DOM) so that, while you are using it, it can:

• display its own controls so you can configure and start a run;
• read and update the strategy input values you are working with; and
• read the results shown on the page so it can summarize and compare them for you.

All of this happens locally, inside your browser, in real time, and only while you are using the extension. The extension also uses your browser's local extension storage to save your settings, configurations, runs, and results so they persist between sessions. That storage lives on your device.

Your control and responsibility. You decide how, when, and where to use the extension. TradingTune provides the tooling only; it does not act on your behalf and does not control any third-party website or service you choose to use it with. You are solely responsible for your use of the extension, including ensuring that your use complies with the terms, policies, and rules of any third-party platform you use it with (for example, TradingView).

What the extension does not do:

• It does not send your strategies, parameters, runs, or results to TradingTune or any third party.
• It does not harvest, log, or transmit your general browsing history, and it does not track the other websites you visit.
• It does not require, request, or store any TradingView API keys or credentials (TradingTune uses no API keys).
• It does not sell your data or share it for advertising.

Running optimizations does require a free account and sign-in: the extension authenticates you and reports your daily optimization-cycle count to enforce the free daily allowance (see Section 4). Even so, it still never uploads your strategies, parameters, runs, or results.

4. Accounts, authentication, and usage data

Running optimizations requires a free account, including on the Free tier. This is the one part of the extension experience where limited data leaves your browser, and it is deliberately narrow.

• Account and sign-in. You create and sign in to an account using Firebase Authentication (a Google service). Authentication issues your account an identifier.
• What we receive and store. To enforce usage limits, the extension reports your daily optimization-cycle count, keyed by your account identifier, to a backend (a Google Cloud Run function) that stores it in Google Firestore. The only extension data we receive is your account identifier and that per-day cycle count.
• Purpose. We use this data solely to enforce the Free tier daily allowance (a cap of up to ten (10) optimization cycles per day) and, in future, to manage subscription entitlement. We do not use it for advertising or profiling.
• Strategy data is not part of this. Your strategies, parameter ranges, optimization runs, and results stay on your device and are never uploaded. They are not sent to Firebase Authentication, Cloud Run, or Firestore.

Legal bases (GDPR / UK GDPR). We process your account identifier and cycle count on the bases of performance of a contract (Art. 6(1)(b)), to provide the Service you have signed in to use and to administer your tier, and our legitimate interests (Art. 6(1)(f)), to enforce usage limits, prevent abuse, and keep the Service sustainable.

Retention. We keep your account identifier and cycle count while your account is active. When your account is closed, or after it has been inactive for a period, this data is deleted or anonymized, except where we must retain limited records to comply with law or prevent abuse.

5. What the website collects

The TradingTune website (tradingtune.com) is a static website, separate from the extension, and does not have access to anything inside the extension or to your trading data.

• Analytics: the website uses two analytics tools. Cloudflare Web Analytics is privacy-friendly and cookieless, recording aggregate page views only. Google Analytics 4, provided by Google, measures how visitors use the site (pages viewed, navigation paths, and on-page interactions such as clicks) so we can improve it; it sets first-party cookies (named _ga and _ga_*) in your browser and is loaded only after your first interaction with the page. We do not use it for cross-site advertising. You can opt out using Google's browser add-on at https://tools.google.com/dlpage/gaoptout, or by blocking analytics at the browser or extension level.
• Cookies: the website uses strictly necessary cookies plus the first-party analytics cookies set by Google Analytics described above. We do not display a cookie banner; where consent is legally required for analytics cookies, we rely on the legal bases in Section 8, and you may opt out as described above. We do not use cookies for advertising.
• Waitlist: if you choose to join the waitlist and submit your email address, that email is collected and processed by Kit (ConvertKit) so we can notify you about the launch and send product updates. Providing it is optional and based on your consent; you can unsubscribe at any time using the link in any email we send.
• Server logs: our hosting provider, Cloudflare, may generate standard server logs (such as IP address, browser type, and pages requested) for delivering the website, security, and abuse prevention, retained only as needed.

6. Payment data (Pro tiers)

Payments for the paid Pro tiers ($29/month, $299/year, $599 lifetime) will be processed by a third-party payment provider (such as Stripe or a Merchant of Record), which acts as an independent controller and/or our processor for payment handling. Paid plans are not yet active; this section describes how billing will work once paid Pro is enabled.

• You provide your payment details directly to the payment processor, not to us, and they are handled under that processor's own privacy policy and terms.
• TradingTune does not receive or store your full payment card number, card security code, or full banking details.
• What TradingTune typically receives is limited to information needed to grant and manage your license, such as your email address, your subscription or purchase status, and a license key or token, plus limited transaction metadata for accounting and support.

If your purchase is handled by a Merchant of Record, that entity may be the seller of record and may handle tax and billing under its own policies.

7. Pro license and email handling

If you purchase a Pro tier, your license may be tied to an email address and/or a license key. We use this limited information only to issue, validate, and manage your license; to provide support relating to your purchase; and to send essential transactional messages (such as your license key, renewal or expiration notices, or important service changes). We do not send marketing emails without an appropriate legal basis or your consent where required, and we keep this information to the minimum necessary.

8. Legal bases for processing (GDPR / UK GDPR)

For users in the EEA and the UK, and because TradingTune is local-first the personal data we actually process is minimal, we rely on:

• Performance of a contract (Art. 6(1)(b)): to provide the Service you sign in to use, administer your account and tier, provide the Pro tier, manage your license, and process payment through our processor.
• Legitimate interests (Art. 6(1)(f)): to operate, secure, and maintain the website and licensing system, enforce usage limits, prevent fraud and abuse, and provide support.
• Consent (Art. 6(1)(a)): where required, for non-essential cookies or analytics, or optional marketing. You may withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)): to comply with legal, tax, and accounting requirements.

The extension's processing of your strategy data happens locally on your device and is under your control; we do not receive that data on our servers. The only extension data we receive is your account identifier and your daily optimization-cycle count, as described in Section 4.

9. How we use data

We use the limited data described here only to provide and maintain the extension and website; create and authenticate your account and enforce the Free tier daily allowance using your account identifier and daily optimization-cycle count; grant and manage Pro licenses and process payments; respond to support and send essential transactional messages; maintain security and prevent fraud; and comply with law. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not disclose your trading strategies, parameters, or results to anyone, because we never receive them in the first place; the only extension data we receive is your account ID and your daily cycle count.

10. Third parties and sub-processors

• Accounts and usage data: Google (Firebase Authentication, Cloud Run, Firestore), for account sign-in and to store your account identifier and daily optimization-cycle count.
• Payment processing: not yet integrated. The Pro tiers are pre-launch; when paid plans go live, a third-party payment processor will be listed here for payments and, where applicable, billing and tax.
• Website hosting: Cloudflare, for hosting the static website.
• Analytics: Cloudflare (Cloudflare Web Analytics, cookieless) and Google (Google Analytics 4), for aggregate and event-level visitor metrics.
• Email / support: support is handled in-house at [email protected]; waitlist sign-ups and the launch and product-update emails are processed and delivered by Kit (ConvertKit, by Kit.com, Inc.).

Each processes data under its own privacy terms. We do not share your trading strategy data with any of them, because that data never leaves your browser.

11. Data retention and security

Retention. Extension data (settings, runs, results) is stored locally in your browser for as long as you keep it; you can delete it at any time, and we do not retain it because we never receive it. Account and usage data (your account identifier and daily optimization-cycle count) is kept while your account is active and is then deleted or anonymized when your account is closed or after a period of inactivity, except where limited records must be retained to comply with law or prevent abuse. License and payment-related data (such as your email, license key, and transaction records) is retained while your license is active and thereafter only as long as necessary for support, fraud prevention, and legal, tax, and accounting compliance, after which it is deleted or anonymized. Website server logs are retained only as long as needed for security and operations.

Security. We take reasonable technical and organizational measures to protect the limited data we handle. The local-first architecture itself reduces your exposure: because your strategy data and results stay on your own device and are never centralized on our servers, there is no central store of your strategies for us to lose or for an attacker to target. The account and usage data we do hold (your account identifier and daily cycle count) is handled by Google (Firebase Authentication, Cloud Run, Firestore) under its own industry-standard controls, and payment data is handled by our payment processor under its own controls (such as PCI-DSS). No method of transmission or storage is 100% secure, but we work to protect the information involved.

12. Your privacy rights

Depending on where you live, you may have the following rights. Because the extension stores most data locally, you can also control it yourself at any time.

EEA / UK (GDPR / UK GDPR): the rights to access, rectification, erasure, data portability, to object to processing based on legitimate interests, to restrict processing, to withdraw consent, and to lodge a complaint with your local supervisory authority.

California (CCPA / CPRA): the rights to know, delete, and correct personal information, to opt out of the sale or sharing of personal information for cross-context behavioral advertising (we do not sell or share it in this way, so there is nothing to opt out of, but you retain the right), and to non-discrimination for exercising your rights.

Self-service control (everyone): because the extension keeps your strategies, settings, runs, and results in your browser's local storage, you can clear that data yourself at any time by removing the extension and/or clearing its local storage through your browser's settings.

How to exercise your rights: contact us at [email protected]. We will respond within the timeframes required by applicable law and may need to verify your identity first. You may use an authorized agent where the law permits.

13. International data transfers

TradingTune is available worldwide. The limited data we handle may be processed in countries other than your own, including by our third-party providers. Where data is transferred out of the EEA or the UK, we rely on appropriate safeguards as required by law, such as Standard Contractual Clauses, the UK International Data Transfer Addendum, and/or adequacy decisions. Contact us for more information about these safeguards.

14. Children's privacy

TradingTune is intended for adults and is not directed to anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us at [email protected] and we will take appropriate steps to delete it.

15. Chrome Web Store / limited use compliance

The TradingTune extension complies with the Chrome Web Store Developer Program Policies, including the Limited Use requirements, and follows Manifest V3 standards. The extension's access to page content (the TradingView DOM) and local storage is limited to providing and improving the extension's user-facing features, optimization and backtesting on TradingView. The only data the extension transmits to us is your account identifier and your daily optimization-cycle count, used solely to authenticate you and enforce usage limits; we do not receive your strategies, parameters, runs, or results. We do not sell this data and do not transfer or use it for any unrelated purpose, including advertising, credit assessment, or building user profiles. The extension's data handling is consistent with the disclosures in this Privacy Policy and on the Chrome Web Store listing.

16. Changes to this policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date above and post the revised version on tradingtune.com. If the changes are material, we will provide a more prominent notice where appropriate (for example, via the extension or by email to Pro users where we have a license email on file). Your continued use after an update takes effect constitutes acceptance of the revised policy, where permitted by law.

17. Contact / data controller

The data controller responsible for your information is TradingTune Support Team, email [email protected]. An EU/EEA representative under Art. 27 GDPR has not been designated; the controller is contactable at [email protected]. This Privacy Policy is governed by the laws of the jurisdiction of the operator's principal place of business, without prejudice to any mandatory consumer or data protection rights you have in your country of residence.