Privacy policy

What TrueTickCollector does with your personal data, in the sense of the General Data Protection Regulation (GDPR): which data, why, for how long, with whom, and your rights.

1. Data controller

The data controller is the publisher of the site, Valérian L'HEUDE, reachable by email at contact@truetickcollector.com.

For any question about your data, and to exercise your rights: contact@truetickcollector.com.

2. The data processed

Your account on the site: display name, email address, password kept only in hashed form, never in clear, language, time zone, style and mode of the pages and, if you turn it on, the key of your one-time code.
The data of your MetaTrader accounts, sent by the EA: account number, broker, server, name of the holder, currency, leverage, version of the EA, trades, open positions, pending orders, balance operations and equity snapshots.
The MetaTrader statements you upload to compare them with the collected trades, and the trade reports you ask for.
The emails the site sends you (alerts, reports, security messages), with the log of their sending.
Your exchanges with the administrator on the support page.
If you link your Telegram: the identifier of the chat, the name of your Telegram account and the messages sent there.
Your sign ins: the date of each one, the IP address and the identification of the browser it comes from, for the list of your active sessions in your profile.
The log of actions: every action done in the site, who did it, when, and from which IP address.
If you create your area online: the IP address and the date of your acceptance of the terms of use, kept to prove that acceptance.
If you sign in with Google: the identifier of your Google account and the email address it gives. Google then knows that you sign in to TrueTickCollector.

Failed sign in attempts are counted to block repeated attempts; the count per network address is kept in memory only, one hour at most.

3. Why, and on what basis

Providing the service you ask for: collecting your accounts, computing and showing your figures, sending the emails and the messages you chose, answering your support requests. Basis: the performance of the contract between you and the service (GDPR, article 6, paragraph 1, b).
Protecting your accounts and the service: log of actions, list of sign ins, blocking of repeated attempts, IP addresses. Basis: the legitimate interest of the service in its security (GDPR, article 6, paragraph 1, f).

No data is sold or transferred, nor used for advertising or profiling.

4. Who receives your data

The administrator of the service, to run it and to answer support requests.
Google, through its Gmail service, by which the emails of the site are sent: it receives the address of the recipient and the content of each email.
Telegram, only if you link your Telegram account: it receives the messages you chose to receive there, amounts included. The messages of a Telegram bot are not end to end encrypted; no API key, no password and no sign in link is ever sent there.
TradingView, only if you click “Show the TradingView chart” on the Chart page of your area: the chart then loads from TradingView, which receives your IP address, the data of your browser, the language, the display mode, the time zone of your profile and the requested symbol (the one of your last closed trade, when it is a currency pair or a metal), and sets its own cookies in the frame of the chart. Nothing is sent to TradingView before that click.

Transfers outside the European Union: Google may process the emails of the site outside the European Union, in the United States in particular; this transfer is covered by the Data Privacy Framework between the European Union and the United States and by the standard contractual clauses of Google.

If you link your Telegram account, at your request, the messages you chose to receive there may be processed by Telegram outside the European Union; this transfer is necessary for the service you ask for (GDPR, article 49, paragraph 1, b).

If you show the TradingView chart, at your request, the data it receives may be processed by TradingView outside the European Union, in the United States in particular; this transfer is necessary for the service you ask for (GDPR, article 49, paragraph 1, b).

5. For how long

Your account on the site, the data of your MetaTrader accounts, your emails, your Telegram messages, your support exchanges and your sign ins: as long as your area exists. They are erased with it, or with the collected account you delete.
The text of an uploaded statement and the content of a report: kept 30 days; past that delay, they are no longer shown and are erased as soon as you open the page "My trade report" or "Check my statement", and deleting your area erases them at once; the outcome of the comparison stays on the page "Check my statement".
Your Telegram unlinked: TrueTickCollector keeps neither the chat nor the Telegram name any more.
The log of actions: when your area is deleted, it keeps only the act of deletion, with nothing that names you.
The backups of the server, and the copy the publisher keeps of them outside the server, keep erased data until they are replaced by more recent backups; they serve only to rebuild the server after a failure.
An area left without activity is not purged: its data are kept as long as it exists, and you can erase everything at any time from the site.

6. Your rights

Access: your data can be read in your area; to receive a complete copy, write to the address above.
Rectification: your password, your language and your preferences can be changed from your profile; for any other data, write to the administrator.
Erasure: delete a collected account, or your whole area, from the site; the erasure is immediate and final.
Portability: the page "My trade report" gives you your trades in a file you take away.
Objection and restriction: write to the address above.

An answer is given to you within one month. If it does not satisfy you, you may lodge a complaint with the French data protection commission (CNIL), www.cnil.fr.

7. Cookies

The site sets only the cookies it needs to work: no tracker, no advertising, no audience measurement. None of them therefore asks for your consent. They are valid for this site only.

truetick_session: Keeps you signed in. Lasts the time of a sign in, set by the administrator (twelve hours at most by default), and goes away when you sign out.
truetick_csrf: Protects the forms of the pages used before sign in (sign in, forgotten password) against a sending from another site. One hour.
truetick_attente: Tells the one-time code screen why a sign in that was waiting for it was closed. One hour.
truetick_motif: Tells the sign in screen why you arrive there. Two minutes.
truetick_espace: Remembers the area, client or administration, of your last sign in, to lead you to the right sign in screen. One year.
truetick_langue: Remembers the language of the pages seen before sign in. One year.
truetick_theme: Remembers the light or dark mode of the pages seen before sign in; the local storage of the browser keeps a copy of it (truetick-theme). One year.
truetick_theme_choisi: Marks a mode chosen on the sign in screen, for the sign in that follows. One hour.
truetick_theme_public: Remembers the light or dark mode of the home page and of the legal pages, set only when you click the mode button. One year.

The site sets no cookie for TradingView. If you click “Show the TradingView chart” on the Chart page, TradingView sets its own cookies in the frame of the chart, under its own policy: the site has no access to them.