Privacy Policy
Effective 20 October 2026
The short version
We hold your email address so you can sign in, and the practice trades you place so the platform can show them back to you. We do not track you, we do not run advertising or analytics, and we do not sell or share your data with anyone for their own purposes.
What we collect
- Your email address, which you give us when you sign in. It is the only thing we ask for — there is no password, no name, no payment details.
- Your practice sessions: the instrument and period you replay, and the simulated orders you place, including entry and exit prices and the resulting profit or loss. These are simulated trades against historical data. No real money and no real orders are involved at any point.
- Technical logs kept by our hosting provider, which include IP addresses and request timestamps. These exist for security and troubleshooting and are not used to build a profile of you.
Why we hold it, and on what basis
We use your email to create your account and send you a sign-in link. We store your sessions so the platform can show your open positions, history and performance. Under the UK and EU GDPR our lawful basis for both is performance of a contract — we cannot run your account without them. Technical logs are kept under legitimate interests, namely keeping the service secure and working.
Cookies
We set one cookie, which records that you are signed in. It is strictly necessary for the platform to work and is deleted when your session expires. We use no analytics, advertising or tracking cookies, which is why you are not being asked to dismiss a cookie banner.
Who processes it for us
We use a small number of service providers who process data strictly on our instructions:
- Vercel — hosting and request logs
- Neon — the database holding your account and sessions
- Resend — delivering your sign-in emails
Vercel and Neon store data on servers in the United States, so your account and your practice sessions are transferred outside the UK and EEA. Resend is configured to process your sign-in emails in its EU (Ireland) region, though mail may be routed through its infrastructure elsewhere. Where data leaves the UK or EEA we rely on the providers' standard contractual clauses.
How long we keep it
We keep your account and sessions for as long as your account exists. Ask us to delete it and we will remove your account and your trading history. This platform is currently an invite-only preview, and we may delete preview accounts and their data when the preview ends — we will tell you before we do.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, or to restrict or object to how we use it. Email privacy@replayprotrader.com and we will respond within 30 days. If you are in the UK or EEA and think we have handled your data badly, you can also complain to your national data protection authority.
Changes
If we change this policy materially we will update the date above and ask you to accept the new version the next time you sign in.