Privacy Policy
How we handle your data
This Privacy Policy explains how we collect, use, and protect your personal information when you use our website. By accessing our service, you agree to the collection and use of information in accordance with this policy.
Last updated: May 2026
Collection of personal information
We collect personal information only when it is necessary to provide certain services.
StopLossFX does not create an application account when you connect Google Drive. It reads the connected Google email address in your browser only to show which Drive account is active.
We do not collect, request, or store any additional personal information beyond what is described in this policy.
Collection of non-personal information
When you visit the website, our servers automatically record information that your browser sends.
This may include your device's IP address, browser type and version, operating system, language preferences, pages visited, time spent on pages, and other usage statistics.
This data is used solely for operating and maintaining the service.
Trading data
The website allows users to input trading-related information such as trade entries, account size, risk percentage, and instrument selection.
This information is written directly to Google Sheets and Google Drive files stored in your own Google account.
You may also choose to share read-only access to your Trading Journal with other Google users via the Share panel. This is entirely optional and user-initiated.
StopLossFX servers do not receive, store, or process your trading data at any point.
Financial tool usage
The tools provided are designed to assist with trading calculations and journaling.
We do not collect, store, or analyze your trading strategies, open positions, or financial account information on our servers.
Cookies & local storage
The website uses browser storage technologies (such as localStorage and cookies) to improve the user experience.
These may store small pieces of information such as interface preferences or session state.
OAuth access tokens granted by Google are held in browser memory during your session only and are never written to persistent storage on StopLossFX servers.
Third-party services
StopLossFX integrates with Google for OAuth authorization and access to Google Drive and Google Sheets; see the dedicated section below for full details.
Each service operates independently and is subject to its own privacy policy.
We recommend reviewing their policies to understand how your information is processed by them.
Data security
We take reasonable technical and organizational measures to protect information from unauthorized access, disclosure, or misuse.
All communication between your browser and StopLossFX servers uses HTTPS.
Google API calls are made directly from your browser using short-lived OAuth access tokens; those tokens are never transmitted to or stored on our servers.
Changes to this policy
This Privacy Policy may be updated from time to time to reflect changes in our practices or applicable law.
Any changes will be posted on this page with an updated effective date.
Continued use of the service after changes are posted constitutes your acceptance of the revised policy.
Google API Services & User Data
Disclosure required for Google OAuth API verification
StopLossFX's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Data Accessed
When you connect Google Drive, StopLossFX requests only https://www.googleapis.com/auth/drive.file. This scope allows the app to create, read, update, delete, and manage permissions on the specific Drive and Sheets files that StopLossFX creates or that you explicitly select with Google Picker.
The app reads the connected account email address only to display the active Drive account. It also accesses the specific Drive files and Sheets described here and, when you use journal sharing, the reader permissions attached to the journal (email address, display name, and permission ID).
We do not access, read, or interact with any other files, folders, or data in your Google account.
Data Usage
Google Drive access is used for three purposes, all at your explicit request: (1) Profile backup: creating and updating a "StopLossFX/Profiles/profiles.txt" file in your Drive, with the ability to re-import a selected backup through Google Picker. (2) Trading Journal: creating "Trading Journal" and "Trading Journal Archive" spreadsheets in your Drive, adding per-profile tabs, appending trade rows, and archiving sheets. (3) Journal sharing: granting or revoking read-only access to your Trading Journal spreadsheet for specific Google accounts you designate by email.
Google sends the share notification email directly; StopLossFX servers are not involved.
Your data is never used for advertising, profiling, or any purpose unrelated to these three features.
Data Sharing
StopLossFX does not share your Google user data with any third party, sell it, rent it, or use it for advertising.
The only sharing that occurs is user-initiated journal sharing: when you explicitly add a person's Google email address in the Share panel, StopLossFX calls the Google Drive Permissions API directly from your browser to grant that individual read-only access to your Trading Journal spreadsheet.
This sharing is entirely within Google's infrastructure; the recipient's email is submitted to Google's API, not to StopLossFX servers.
You remain in full control and can revoke any individual's access at any time from within the app.
Data Storage & Security
StopLossFX does not store any Google user data on its own servers.
All Google API calls (reads, writes, and permission changes) are made directly from your browser using a short-lived OAuth access token held in browser memory for the duration of your session only.
The connected Google email address is also held in browser memory only and is cleared when the Google authorization is invalidated or the page session ends.
Neither the token nor the connected account email address is transmitted to or persisted on StopLossFX servers.
Your trading data, profile files, and the list of people with whom you share your journal reside exclusively within your own Google account and are governed by Google's security and storage practices.
Data Retention & Deletion
Because StopLossFX stores no Google user data on its own servers, there is nothing for us to delete on your behalf.
All files and spreadsheets in your Google Drive remain under your full control and can be deleted directly from Google Drive or Google Sheets at any time.
Shared access permissions you have granted can be revoked individually from the Share panel within StopLossFX, or directly from the spreadsheet's sharing settings in Google Drive.
You can also revoke StopLossFX's entire OAuth access at any time via your Google Account security settings at https://myaccount.google.com/permissions, which immediately prevents the app from making any further API calls on your behalf.
Contact
For any questions regarding this Privacy Policy, data access requests, or deletion requests:
[email protected]