CandlemindLog in

Privacy Policy

Last updated: 2026-10-15

Data controller: Raul Garcia Fernandez, Request on mail, Request on mail. Contact: [email protected].

Data we process

  • Account data: name, email and password (stored hashed with scrypt), and verification codes (stored hashed, valid for 10 minutes).
  • Usage data: lessons, simulated trades, scores, progress, IP address for security limits and access dates.
  • Subscription data: Stripe customer and subscription identifiers. Card details are handled only by Stripe and never reach our servers.
  • Profile picture, if you choose to upload one.
  • Video replays of closed trades (winning or losing) generated in the simulator (containing no personal data).
  • Market Lens explanations of each trade (the market data around it and the simulated order), your time-zone offset to send reminders at a sensible hour, and coin purchase records (pack, amount, date).
  • If you arrived through a creator’s link: the identifier of that affiliate, and the amount of your payments needed to calculate their commission. The affiliate only sees aggregated figures (clicks, sign-ups, paying users and commissions), never your name or email.
  • If you make your profile public: the public name you choose for your profile address.
  • Your country is auto-detected from your browser language/CDN at signup (editable in your profile) — used for the country league, national ranking, and streak reminder timing.
  • To prevent affiliate fraud: an anonymous device identifier stored in a cookie and the IP address of your sign-ups and log-ins, kept while your account exists.
  • If you apply to the affiliate program: the details you send in the form (name, email, channel, audience and message).

Purposes and legal basis

  • Providing the service and keeping your progress (performance of a contract).
  • Security, abuse prevention and aggregated internal statistics (legitimate interest).
  • Transactional emails: verification codes, sign-in alerts and receipts (performance of a contract).
  • Reminder emails about your own account (streak at risk, lives refilled, inactivity and a weekly report). You can switch them off at any time from your profile or with the one-click link in every reminder (legitimate interest).
  • Anonymous publication of trade replays on social media (legitimate interest; the replays contain no personal data).
  • Paying commissions to the creator who referred you and preventing affiliate fraud (legitimate interest).
  • Showing your public profile, only if you turn it on (consent, which you can withdraw at any time from your profile).

Retention

For as long as you keep your account. Trade replays and Market Lens explanations are deleted after 30 days unless selected for publication. Purchase records are kept as long as required by tax law.

Recipients

Our hosting provider, our email provider (Spacemail) to deliver codes and notifications, and Stripe for payments. We do not sell data to third parties.

Cookies and local storage

We use strictly necessary cookies: one keeps you logged in, one remembers a device you chose to trust so we don’t ask for an email code every time, a random device identifier used only to prevent affiliate fraud and, only if you open a creator’s affiliate link, a signed cookie with that affiliate’s identifier that expires after 30 days. Your chart preferences (candle colors, indicators, position sizing) are kept in your browser’s local storage. We do not use advertising or third-party analytics cookies. Fonts and libraries are served from our own server.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to [email protected], and you may lodge a complaint with the Spanish Data Protection Agency (aepd.es) or your local supervisory authority.