Privacy Policy

1. Information We Collect

Verstats is designed to operate with minimal data collection. Whether you use the platform as a guest or with a signed-in account, we only collect what's necessary to provide the service:

• Account Data: If you create an account, we collect your email address and the authentication details required to secure your login.
• Uploaded Trading Reports: MetaTrader 4 or MetaTrader 5 HTML (.htm) reports that you upload. These contain your trading history, execution data, and potentially broker information.
• Token and Transaction Records: Your current token balances, and a record of any token pack purchases — the transaction identifier, the pack purchased, and the date.
• Usage Data: Standard server logs including IP addresses, browser types, and timestamps, used to monitor performance, apply usage limits, and prevent abuse.

We never see or store your payment details. Card numbers and billing information are handled entirely by our payment provider (see section 4).

2. How We Use Your Data

We use the data within your uploaded reports strictly for the following purposes:

• To parse, analyse, and render your trading performance dashboard and Monte Carlo simulations.
• To generate a shareable URL for a report, so you can share it if you choose to.
• To calculate the token cost of an analysis, which is based on the number of trades in your report.
• To apply usage limits and detect abuse, using IP address for guests without an account.

We do not use your trading data to train models, build aggregate datasets for sale, or for any purpose beyond running Verstats for you.

3. Guest Use Without an Account

You can use Verstats without creating an account. If you do, we identify you only by IP address, purely to apply daily usage limits. There is no profile, no email, and no history tied to you.

Files uploaded as a guest are still written to our storage infrastructure in order to be processed, but they are not linked to any account or personal identity. Guest analyses are not saved and cannot be shared — closing the tab means you would need to upload again.

4. Third-Party Infrastructure

We rely on a small number of providers to run Verstats. Each holds only what it needs:

• Google Cloud Platform: hosts our application and stores uploaded report files. Google Cloud maintains industry-standard security and encryption protocols.
• Supabase: our database and authentication provider, holding account records, token balances, and transaction history.
• Paddle: our payment provider, acting as merchant of record for all purchases. Paddle collects and processes your payment and billing details directly under their own privacy policy. We receive only a transaction identifier, the pack purchased, and confirmation of payment — never card details.

We do not sell, rent, or otherwise share your trading data with proprietary trading firms, brokers, advertisers, or data brokers.

5. Cookies and Authentication

Verstats does not use marketing cookies, third-party analytics trackers, or cross-site tracking scripts.

We use strictly necessary, secure HttpOnly cookies solely to manage your session and keep you signed in. These cannot be accessed by client-side scripts and are never used to track your behaviour across the internet. Our payment provider may set its own cookies during checkout, governed by its privacy policy.

6. Retention and Deletion

Uploaded reports and their results are retained while your account is active, so you can return to them. Transaction records are retained for as long as required for tax and accounting purposes, which may outlast your account.

To delete a specific report, or your account and all associated data, email us with the report URL or your account email. We will confirm once it's done. Deleting your account does not automatically refund unused tokens — see our Refund Policy.

7. Your Rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to certain processing. Email us and we'll action any such request. Verstats is operated from Singapore, and your data is stored on infrastructure that may be located outside your country of residence.

8. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our technology or legal requirements. Any updates will be posted directly to this page with a revised date.