Privacy Policy

1. What we collect

Account details you provide (name, email), workspace and layout data you save, and run/backtest history tied to your account. We do not sell personal data to third parties.

2. Third-party data providers

If you connect a market-data provider, we store only what's needed to authenticate requests on your behalf (see the Security page). We do not share your connected credentials with any other party.

3. Data retention

Delivery events and run audit logs are retained on a fixed schedule and purged automatically afterward. Workspace and account data is retained until you request deletion.

4. Your rights

You may request a copy of your data or request deletion at any time via the contact page.

5. Cookies and browser storage

Necessary, always on, and set without asking because the site does not work properly without them. None of them identifies you across sites.

• cv_ab_home, a cookie that records which home page you were shown (an experiment name and a variant such as h1.b) so the page does not change between visits. It lasts 30 days from your first visit and holds no identifier. If you later sign up, the same value is saved with your access request so we can measure sign-ups per home page.
• cv_consent, your cookie choice (granted or denied), kept in browser storage.
• candleviews-theme, your light or dark theme, kept in browser storage.
• Sign-in storage, the session data our sign-in provider (Firebase) keeps in your browser while you are signed in, and your saved workspace cache.

Optional, only if you choose Accept all: analytics cookies and storage from PostHog, described next. There are no marketing or advertising cookies.

6. Product analytics (PostHog)

We use PostHog for product analytics on this site and in the terminal. Before you choose, only anonymous events are sent, held in memory with no cookie or browser storage: page views, tagged with the home page variant you saw, and one anonymous “which home page was shown” event. If you choose Accept all, we also record clicks and a few product events, and set a cookie so visits can be linked together. If you choose Necessary only, nothing further is sent and PostHog does not load on later visits. When you are signed in we attach your account id only, never your email, symbols, code or chat text. Session recording is off. You can change your mind at any time with the Cookie settings link in the footer, which clears your stored choice and asks again.

7. Error diagnostics (Grafana Faro)

We use Grafana Cloud Frontend Observability to find and fix bugs. It receives JavaScript errors, unhandled promise rejections, console errors, the page address and your browser version. In the terminal it also receives performance traces of calls to our own API, tagged with your account id and nothing else personal. It sets no cookies and keeps no data in browser storage.

8. Changes to this policy

This policy may change as the product changes. Material changes will be reflected by updating the "last updated" date above.