Privacy Policy

Last updated: January 2025

Hardcore Trading ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform at hardcoretrading.com ("Platform").

1. Data Controller

The data controller responsible for your personal data is:

Hardcore Trading
Email: privacy@hardcoretrading.com

2. Data We Collect

Data Type	Examples	Purpose
Account Data	Email, password (hashed), nickname, country	Account creation and authentication
Trading Data	PnL history, session efficiency, transaction counts	Performance tracking and gamification
Broker Credentials	API keys, session tokens (encrypted)	Connecting to your broker for data sync
Technical Data	IP address, browser type, device info	Security, debugging, and optimization

3. Legal Basis for Processing (GDPR)

We process your data based on:

• Contract: To provide our services (account, tracking, rankings)
• Legitimate Interest: Platform security, fraud prevention, improvements
• Consent: Where explicitly given (e.g., optional features)

4. How We Use Your Data

• Authenticate and manage your account
• Display your trading performance and statistics
• Calculate rankings, badges, and rewards
• Sync data from connected brokers
• Send service-related emails (password reset, confirmations)
• Improve and secure the Platform

We do NOT:

• Sell your personal data to third parties
• Use your data for advertising or marketing without consent
• Share your trading data publicly without your permission

5. Data Sharing

We may share data with:

• Broker APIs: To retrieve your trading data (read-only)
• Hosting Providers: Secure servers that store our database
• Email Services: For transactional emails (e.g., Nodemailer/Gmail SMTP)
• Legal Authorities: If required by law

All third parties are bound by data protection agreements.

6. Data Retention

Data Type	Retention Period
Account Data	Until account deletion + 30 days
Trading History	Until account deletion
Broker Credentials	Until disconnected or account deletion
Server Logs	90 days

7. Data Security

We implement appropriate security measures including:

• Password hashing (bcrypt)
• Encrypted broker credentials
• HTTPS encryption in transit
• HTTP-only, secure cookies for authentication
• Access controls and monitoring

8. Your Rights (GDPR)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing based on legitimate interest
• Withdraw Consent: Where processing is based on consent

To exercise these rights, contact: privacy@hardcoretrading.com

9. International Transfers

Your data may be processed in countries outside your residence. We ensure appropriate safeguards (e.g., Standard Contractual Clauses) are in place for any transfers outside the EEA.

10. Children's Privacy

The Platform is not intended for users under 18 years of age. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Privacy Policy. Significant changes will be notified via email or Platform notice. Continued use after changes constitutes acceptance.

12. Contact & Complaints

For privacy inquiries:

Email: privacy@hardcoretrading.com

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection authority.

← Back to entry