Privacy Policy

Last Updated: January 17, 2026

Effective Date: January 17, 2026

Introduction

Your privacy is important to pnfTrading.com ("we," "us," or "the Service"). This Privacy Policy explains how we collect, use, store, and protect your information when you use our Point & Figure charting application.

By using pnfTrading.com V2, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Personal Information

We collect minimal personal information:

Email Address (if you create an account)
Display Name (optional, for account personalization)
OAuth Provider Data (if you sign in with Google)

1.2 Usage Data

We automatically collect certain information when you use our Service:

Browser Type and version
Device Information (type, operating system)
IP Address (for analytics and security)
Pages Visited and time spent
Chart Configurations (stored locally on your device)

1.3 Local Storage Data

The following data is stored locally on your device using browser storage (localStorage and IndexedDB):

Chart State (symbol, timeframe, box method, etc.)
OHLCV Data Cache (historical price data)
Symbol Lists (cached for performance)
Drawing Objects (trendlines, fibonacci, etc.)
User Preferences (theme, settings)

> Important: This data is stored only on your device and is not transmitted to our servers.

2. How We Use Your Information

We use collected information for the following purposes:

Provide and Maintain the Service - Core charting functionality
Improve User Experience - Optimize performance and features
Analytics - Understand usage patterns (via Google Analytics)
Error Tracking - Monitor and fix bugs (via Sentry)
Security - Detect and prevent abuse
Communication - Send important updates (if you have an account)

3. Data Storage and Security

3.1 Client-Side Storage

Most data is stored locally on your device:

localStorage - Chart state, preferences
IndexedDB - OHLCV data cache, symbol lists
Session Storage - Temporary session data

3.2 Server-Side Storage

If you create an account, we store:

Email Address (encrypted)
Authentication Tokens (hashed)
Account Metadata (creation date, last login)

Storage Provider: Supabase (PostgreSQL database)

Location: United States

Encryption: Data encrypted at rest and in transit (TLS/SSL)

3.3 Security Measures

We implement reasonable security measures:

HTTPS/TLS encryption for all connections
Password Hashing (bcrypt)
OAuth 2.0 for third-party authentication
Regular Security Audits
Access Controls and monitoring

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

4. Third-Party Services

We use the following third-party services:

4.1 Authentication

Supabase - User authentication and database
Google OAuth - Sign in with Google

4.2 Analytics

Google Analytics 4 - Usage analytics and insights

Data collected: Page views, events, user demographics (anonymized)

4.3 Error Tracking

Sentry - Error monitoring and performance tracking

Data collected: Error logs, stack traces, user actions leading to errors

4.4 Data Providers

We fetch market data from external APIs:

Binance, Bybit, OKX, MEXC - Cryptocurrency data
Bitfinex, Coinbase - Cryptocurrency data
CTrader - Forex and CFD data
Financial Modeling Prep (FMP) - Stock data
DNSE - Vietnam stock data

> Important: API requests are made directly from your browser to these services. We do not proxy or store your API keys on our servers.

5. API Keys and Client-Side Architecture

5.1 Client-Side Only Architecture

pnfTrading.com V2 uses a client-side only architecture. This means:

API keys are stored in your browser (localStorage)
API requests are made directly from your browser
We do not have access to your API keys
We do not store your API keys on our servers

5.2 Security Implications

> ⚠️ Important Security Notice:

> Because API keys are stored client-side, they may be visible to:

> - Browser extensions you have installed

> - Anyone with physical access to your device

> - Malicious scripts (if your browser is compromised)

5.3 Your Responsibilities

You are responsible for:

Keeping your API keys secure
Using API keys with minimal permissions (read-only when possible)
Rotating your API keys regularly
Not sharing your device with untrusted users
Using strong passwords for your accounts

5.4 Recommendations

We recommend:

Use free tier or demo accounts for testing
Enable IP restrictions on your API keys (if supported)
Set rate limits on your API keys
Monitor your API usage for unusual activity
Revoke API keys immediately if compromised

6. Cookies and Tracking

6.1 Essential Cookies

We use cookies and similar technologies for:

Authentication - Keep you logged in
Preferences - Remember your settings
Security - Prevent fraud and abuse

6.2 Analytics Cookies

We use Google Analytics cookies to:

Understand how users interact with our Service
Improve features and user experience
Track conversion and engagement

You can opt out of Google Analytics by installing the [Google Analytics Opt-out Browser Add-on](https://tools.google.com/dlpage/gaoptout).

6.3 Third-Party Cookies

Third-party services (Google, Sentry) may set their own cookies. Please refer to their privacy policies:

[Google Privacy Policy](https://policies.google.com/privacy)
[Sentry Privacy Policy](https://sentry.io/privacy/)

7. Data Retention

7.1 Local Storage

Data stored locally on your device is retained until:

You clear your browser cache/storage
You manually delete the data
The data expires (7-day TTL for cached chart data)

7.2 Account Data

If you create an account:

Active Accounts: Data retained indefinitely
Inactive Accounts: Data may be deleted after 2 years of inactivity
Deleted Accounts: Data permanently deleted within 30 days

8. Your Rights (GDPR/CCPA)

You have the right to:

Access your personal data
Rectify inaccurate data
Delete your data ("right to be forgotten")
Export your data (data portability)
Opt-out of analytics and tracking
Withdraw consent at any time

To exercise these rights, contact us at: [email protected]

9. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. International Data Transfers

Our Service is hosted in the United States. If you access our Service from outside the US, your data may be transferred to and processed in the US, which may have different data protection laws than your country.

By using our Service, you consent to the transfer of your information to the US.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

Posting the new Privacy Policy on this page
Updating the "Last Updated" date
Sending an email notification (if you have an account)

Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions about this Privacy Policy, please contact us:

Email: [email protected]
Website: https://www.pnftrading.com
Address: Wyoming, USA

13. Disclaimer

pnfTrading.com is not an investment, financial, tax, or legal advisor and does not provide personalized investment advice. Trading involves risk and may result in significant financial losses. You are solely responsible for your own trading decisions.