Privacy policy
Last updated: 21 October 2026
Summary in plain language
We collect what we need to run your account, send your signals and process your payments. We never store passwords in readable form, we do not sell your data, and we do not use tracking or advertising cookies. Only results you have consented to are published, and they are anonymous unless you choose otherwise.
1.Who we are
PipLadder is operated by [operator legal name and registered address to be completed]. You can contact us at support@pipladder.com.
2.Data we collect
Account data: email address, username and a hashed password (we store a bcrypt hash, never the password itself).
Trading profile: portfolio size, leverage, risk profile, the pairs you follow and any limits you set.
Notification addresses: your verified email address and, if you enable them, your phone number and Telegram chat ID.
Payment records: plan, method, amount, reference code, and the PayPal transaction ID or blockchain transaction hash you submit.
Results data: your closed and open baskets, used to produce your results.
Technical data: IP address and browser user agent stored with your login session, and short-lived rate-limit counters that protect sign-in and sign-up.
3.Why we use it
To provide the Service and your signals, to send account and security emails, to process and verify payments, to prevent abuse, to publish results you have consented to, and to meet legal obligations.
4.Who processes data for us
Vercel hosts the application. Neon hosts the PostgreSQL database. Resend delivers email. Twilio delivers SMS and WhatsApp messages only if those channels are enabled. Telegram delivers messages if you link Telegram. PayPal processes PayPal payments under its own terms.
Bitcoin and TRON transactions are recorded on public blockchains by design; anyone can see a transaction, including its addresses and amount.
Market data providers (OANDA, Twelve Data, Frankfurter and calendar and news feeds) receive no personal data from us.
5.Public results
Only results you have consented to are published. A published period shows a display name (Anonymous unless your profile is Public) and trading figures. It never shows your email address or internal user ID.
6.How long we keep data
Account and trading data are kept while your account exists. Login sessions expire after 30 days of inactivity or sooner. One-time email and phone codes expire within 24 hours or less. Payment records are kept for the accounting and tax period required by law. [Retention periods to be confirmed by the operator.]
7.Your rights
You can ask to access, correct, export or delete your personal data, and to object to some processing. Contact us at support@pipladder.com. [Add jurisdiction-specific rights, for example under the GDPR or CCPA, once the operator and jurisdiction are confirmed.]
8.Cookies
We use one essential session cookie that keeps you logged in (named pl_session in development and __Host-pl_session in production). We do not use tracking, analytics or advertising cookies.
9.Security
We use HTTPS, hash passwords and one-time tokens, store only hashes of session and reset tokens, and rate-limit sign-in and sign-up. No system is perfectly secure, so keep your own credentials safe.
10.Children
PipLadder is not intended for anyone under 18.
11.Changes
We may update this policy and will notify material changes by email. See also our terms of service.