Privacy Policy

Who we are

Tradune ("Tradune", "we", "us") is an independent project, not a registered company, providing an educational portfolio analytics workspace at tradune.com and app.tradune.com. If you have a question about this policy or your data, email [email protected].

What we collect

• Account info via Google sign-in — your name, email address, and avatar, provided by Google when you sign in.
• Account info for email and password accounts — if you register with an email address instead, we store that email address and a one-way hash of your password (we never store the password itself), the short-lived verification codes we email you to confirm the address (they expire), and the refresh sessions that keep you signed in on each device.
• Portfolio data you enter — holdings, trades, and watchlists you add so the app can show your own analytics.
• Product-update emails — if you join the product-updates list, we keep your email address, with your consent, and use it for product updates and pricing news. You can unsubscribe anytime.
• Usage analytics — via Google Analytics 4, which uses cookies and identifiers to help us understand how the site and app are used.
• Session recordings & heatmaps — via Microsoft Clarity, which records how pages are used: pointer movement, scrolling, clicks and a replayable reconstruction of the page as you saw it, plus aggregate heatmaps. It runs on tradune.com but not on any page under /tools/ — the free calculators, where you may type deposit amounts, portfolio values or holdings, load no session recording at all. Where a form on a recorded page asks for personal data, such as the email field on our early-access form, that field is masked in the recording.

What we do not do

• We do not sell your personal data.
• We do not trade on your data.
• We do not share your portfolio data with third parties, except processors we use to run the service (see below).

Data location & processors

We rely on a small number of processors to run Tradune:

• Our hosting provider, which stores application data and runs the service.
• Google, for sign-in (OAuth) and usage analytics (GA4).
• Cloudflare, which sits in front of tradune.com and app.tradune.com as a proxy and content-delivery network, so it handles the requests your browser sends to us (including IP address and request details) and may log them for security and traffic reporting. We may also use its Turnstile challenge on sign-in and sign-up forms to tell people from bots.
• Microsoft, for session recordings and heatmaps on tradune.com (Microsoft Clarity). Clarity is not loaded on the /tools/ calculators.
• Telegram, only if you choose to connect it for alerts — no Telegram data is collected unless you opt in.

The free calculators

The calculators under /tools/ run entirely in your browser. The figures you type are not sent to our servers or to analytics: the pages make no network request with them, write them to no storage, and put them in no URL. The one exception is the portfolio grader’s optional “Import these holdings into Tradune” button: if you click it, the tickers and weights you entered (never sectors) travel to app.tradune.com in the link’s fragment — the part after #, which browsers do not send to servers — and the app keeps them in that browser tab’s session storage for up to 24 hours, until you import or dismiss them. Those pages do load Google Analytics 4, which records the pageview and whether a calculator was started and produced a result — never the numbers themselves. Microsoft Clarity session recording is not loaded on those pages.

Cookies & local storage

Google Analytics 4 sets cookies (named _ga and _ga_…) that carry a random identifier so visits can be counted; they are shared between tradune.com and app.tradune.com so one visit across both reads as one journey. Microsoft Clarity sets its own cookies (_clck, _clsk) on pages where it runs. Both load when a page loads — there is no consent banner today. The app also keeps your sign-in session and a few interface preferences in your browser’s local storage, which is needed for the app to work. You can block or delete cookies and local storage in your browser settings, or use a tracking blocker; the marketing pages still read normally without them.

Retention & deletion

You can ask us to delete your account and data at any time: send a support ticket from inside the app, or email [email protected]. Unsubscribing from the product-updates list removes your email from that list.

Your rights

You can ask what personal data we hold about you, ask us to correct it, and ask us to delete it. We honour these requests for everyone, wherever you live, and we will not treat you differently for asking. To make a request, email [email protected] from the address on your account so we can match it.

Children’s privacy

Tradune is not directed at children under 13. Our audience is adult, individual investors, and the product is not designed or marketed to minors.

Changes to this policy

If we change this policy, we’ll post the updated version on this page with a new "last updated" date.