Privacy Policy

This Privacy Policy applies to account registration and sign-in, profiles, strategies, comments, saved content, trading records, AI chart review, support emails, and cookies and similar technologies on Strategy Archive. Davide Rogai, based in Italy, is the data controller and independent operator of this website.

Depending on how you interact with the Services, we may collect the following categories of personal information:

2.1 Information You Provide Directly

• name
• email address
• username
• authentication details handled by Supabase
• profile information
• messages, support requests, and communications
• comments, strategies, uploads, and other content
• preferences and account settings

2.2 Information Collected Automatically

• IP address
• browser type and version
• device identifiers
• operating system
• referral URLs
• language settings
• pages viewed and features used
• clicks, interaction data, and session data
• timestamps
• diagnostics, crash logs, and performance info
• approximate location inferred from IP
• cookie IDs and similar identifiers

2.3 Information From Third Parties

We may receive personal information from:

• Google Analytics, where you have consented to analytics;
• Google sign-in, if you choose it, including the profile details provided during authentication through Supabase;
• CookieYes, which records cookie choices and consent-related information;
• Google AdSense, for advertising reporting and consent-dependent advertising;
• Adsterra, for consent-dependent advertising and ad-performance reporting on School articles and the Trading Calculator;
• other users when they interact with your public strategies or profile.

2.4 AI Features

When you use the AI Market Analyzer, our server verifies your account through Supabase and processes your chart screenshot, selected market and timeframe, generated analysis, and request metadata. The screenshot and chart-analysis context are sent to OpenAI to generate the review. We do not send your Supabase account identifier to OpenAI as part of that request.

You should not upload screenshots or files containing sensitive personal information, account numbers, broker account details, full names, addresses, financial account credentials, private keys, passwords, or other confidential information.

We collect personal information:

• directly from you when you provide it;
• automatically through necessary logs and, with your consent, Google Analytics cookies and similar technologies;
• from the authentication, consent, and advertising services described in this policy.

We may use personal information to:

• provide, operate, maintain, and improve the Services;
• create and manage user accounts;
• authenticate users and secure accounts;
• process user requests;
• provide customer support;
• communicate with you about the Services;
• send service-related notices and updates;
• remember service preferences and cookie choices;
• analyze usage, performance, and trends;
• prevent fraud, abuse, unauthorized access, and other harmful activity;
• enforce our Terms and policies;
• comply with legal obligations;
• establish, exercise, or defend legal claims;
• moderate public content and handle corrections or reports;
• provide AI screenshot review and educational analysis when you request it;
• display and measure advertising subject to your consent choices.

For users covered by the GDPR, the legal basis depends on the purpose. Accepting optional cookies is separate from registering an account or requesting support.

We may use cookies, pixels, local storage, SDKs, tags, and similar technologies to:

• operate core site functionality;
• remember user preferences;
• keep users logged in;
• secure the Services;
• analyze traffic and performance;
• understand usage patterns;
• measure campaigns;
• personalize content and marketing where applicable.

Google Analytics is our only web analytics service. Google Tag Manager deploys the Google and CookieYes tags. Google AdSense is used for advertising. School articles and the Trading Calculator also use Adsterra banner, popunder, and Social Bar advertising. Adsterra provides ad measurement, not a second website analytics dashboard. CookieYes manages consent choices and, where enabled, the IAB advertising-vendor preference panel. A Google Funding Choices cookie may remain from an earlier consent setup; CookieYes manages current preferences.

Optional analytics and advertising storage is denied by default until a consent choice is available. CookieYes communicates your choices to Google Consent Mode. Depending on Google's tag configuration, limited consent-status or cookieless measurement requests may still occur while storage is denied; refusing cookies does not mean that every network request is stopped.

Adsterra tags do not load until CookieYes reports advertising consent. Their delivery domains include bauval.org and abscloud.org; advertisements may contact further partners. Advertising requests can disclose IP address, browser and device details, the page URL, identifiers, and ad interactions. Our integration does not explicitly pass account details, chart uploads, or calculator input values to Adsterra as an advertising payload.

A first-party notice-version record also distinguishes a new advertising choice from a preference saved before Adsterra was introduced. This record contains no visitor identifier and does not override CookieYes: rejected, expired, or missing advertising consent keeps the ads blocked. See the Cookie Policy for this local-storage record and its removal.

Popunder ads may open another tab or window after an interaction, and Social Bar ads may display overlays. Withdrawing advertising consent after these page scripts start reloads the document to stop active scripts; it does not automatically close previously opened advertising tabs. Calculator inputs may need to be re-entered after a reload.

You can accept, reject, or customize optional cookies and change or withdraw consent at any time. Necessary authentication and security storage is not used for optional advertising. Withdrawal changes future processing and does not undo lawful processing that already occurred.

See our Cookie Policy for the cookie inventory, durations, providers, and browser controls. Google Analytics identifiers are pseudonymous; they should not be described as inherently anonymous.

The providers used by the website have different roles. Some process data on our behalf; others also process data under their own policies.

Capital.com supplies candle data for the market and timeframe selected in the analyzer. Our market-data request does not include your screenshot, Supabase account identifier, or email address.

Your published profile, strategies, and comments are visible to other users. External broker, prop-firm, book, or other affiliate links take you to third-party services, which process visits under their own policies.

We may also disclose personal information where necessary to protect rights, safety, property, systems, users, or the public.

We do not sell your account or contact information for money.

However, some laws define "sale," "sharing," or targeted advertising broadly. Our use of Google AdSense, Adsterra, and their advertising partners may be considered "sharing" or targeted advertising under applicable law. Adsterra's Social Bar is an advertising format, not our installation of a social-network tracking pixel.

Where applicable, users may have the right to opt out of such practices by using available settings, consent tools, or by contacting us at support.strategyarchive@gmail.com.

We use the following retention criteria. Cookie expiry and the retention of data held by a provider are separate matters.

For a deletion request, email support.strategyarchive@gmail.com. We assess which active records, stored media, and provider-held data are involved rather than treating browser cookie deletion as deletion of your account.

Our providers may process data outside Italy and the EEA, including in the United States and other locations described in their policies. Provider data-processing agreements and applicable transfer mechanisms, such as Standard Contractual Clauses or an applicable adequacy decision, govern transfers where required. We do not claim that all website data remains in Italy or the EEA. You may contact us for information about the safeguards relevant to your data.

We use reasonable technical, organizational, and administrative measures designed to protect personal information. However, no method of transmission, storage, or security is completely secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have rights to:

• request access to your personal information;
• request correction of inaccurate information;
• request deletion of personal information;
• request data portability;
• request restriction of processing;
• object to processing;
• withdraw consent where processing is based on consent;
• opt out of certain sale, sharing, or targeted advertising practices;
• appeal certain privacy-related decisions.

To exercise any applicable rights, contact us at support.strategyarchive@gmail.com. We may need to verify your identity before fulfilling a request.

The Services are not directed to children under 13, and we do not knowingly collect personal information from children below that age. If you believe a child has provided personal information to us, contact us and we will take appropriate steps.

If you post content publicly through the Services, that information may be visible to others and may remain publicly accessible even after deletion or account closure due to reposts, backups, caching, legal obligations, or technical limitations.

The Services may link to or integrate with third-party websites, tools, or services. We are not responsible for the privacy practices of those third parties, and you should review their policies separately.

The AI Market Analyzer sends your screenshot and chart context to OpenAI's API. The request uses the API's non-stored-response option; this does not disable OpenAI's separate abuse-monitoring retention. OpenAI states that API inputs and outputs are not used for model training by default unless the API customer opts in. See the official OpenAI data controls for retention and image-safety exceptions. AI outputs may be inaccurate or incomplete and are not financial advice.

We do not intentionally require users to provide sensitive personal information to use AI chart analysis features. Users should remove or hide confidential information from screenshots before uploading them.

If you contact us about AI features or request updates, you can ask us to delete that communication at any time, subject to legal or security retention needs.

We may update this Privacy Policy from time to time by posting a revised version on the Services. The updated version becomes effective when posted or on the stated effective date.

This Addendum applies where required by applicable law.

19.1 Rights for EEA / UK Users

If you are located in the European Economic Area, Switzerland, or the United Kingdom, you may have rights to:

• request access to personal data;
• request correction of inaccurate data;
• request erasure;
• request restriction of processing;
• object to processing;
• request portability of personal data;
• withdraw consent where processing is based on consent;
• lodge a complaint with a supervisory authority.

We process personal data under one or more of the following legal bases: performance of a contract, legitimate interests, consent, legal obligation, and establishment, exercise, or defense of legal claims.

19.2 International Transfers

Where required, we use appropriate safeguards for cross-border transfers of personal data.

19.3 California Rights

If California law applies to you, you may have rights to:

• know the categories of personal information collected;
• know the categories of sources from which personal information is collected;
• know the business or commercial purposes for collecting, using, disclosing, selling, or sharing personal information;
• know the categories of third parties to whom personal information is disclosed;
• request access to specific pieces of personal information;
• request correction;
• request deletion;
• opt out of sale or sharing;
• limit certain uses of sensitive personal information where applicable;
• not be discriminated against for exercising your rights.

19.4 Authorized Agents

Where applicable, you may designate an authorized agent to submit requests on your behalf, subject to verification and applicable law.

19.5 Verification

We may take steps to verify your identity before processing a privacy request and may deny requests where permitted by law.

19.6 Appeal

Where required by law, you may appeal our response to a privacy request by contacting support.strategyarchive@gmail.com.