Privacy & retention

This private research application has no public registration, analytics, advertising, exchange credentials or order placement.

On your device

The imported Bitcoin database stays in this app’s private browser storage. Chart settings, drawings, indicator inputs, script drafts, presets and backtest results also save on this device. The application requests persistent storage, but you or the operating system can still remove website data. Keep the original database in Files.

In your account

When online and signed in, workspace changes sync to a user-scoped Cloudflare D1 database. The latest 20 committed workspace versions are retained for recovery. Backtest results are stored separately without automatic expiry. Failed uploads remain pending locally. A workspace is limited to 512 KiB; a saved account backtest is limited to 1.5 MiB. The application displays sync failures. The historical price database is not uploaded.

Independent backups

“Export backup” saves a JSON file containing your current workspace and locally stored backtests. It does not contain the price database or account password. Keep this file independently of your browser. Before restoring settings, the app saves a local recovery snapshot. Local recovery snapshots are retained until website data is cleared.

Sign-in and offline access

Passwords are derived on your device with a per-account salt and PBKDF2-SHA512. The server stores a one-way verifier. Authentication uses an HttpOnly, Secure, SameSite cookie, with a 30-day rolling session. No credentials or session tokens are saved in localStorage. Login attempts are rate limited using hashed identifiers.

“Offline access” remembers your account identity on this personal device. It allows access to its locally saved workspace when the server cannot be reached; it never grants access to server data. Local browser data is not encrypted by this application. Use an iPad passcode and do not enable offline use on a shared device. Signing out requires a connection to revoke the server session; it disables remembered offline access but retains local research for your next sign-in.

Cloudflare and market data

The deployment uses Cloudflare for hosting, sessions and research backups, subject to the account’s service limits and availability. Cloudflare may process infrastructure request metadata. Kraken receives requests for live market data. The dashboard does not send your strategy source to Kraken. No historical database or strategy source is sent to third-party AI services.

The administrator can export or delete account records from Cloudflare D1. On the Free plan, D1 additionally provides seven days of point-in-time recovery; this is a disaster-recovery window, not an expiry for your current records. Maintaining hosting, domain access and independent database exports is the administrator’s responsibility.

Backtest limitations

PineTS is an independent Pine runtime. TradingView parity is not certified. Backtests use OHLC candles, configured commission and slippage, and the engine’s order-fill assumptions. Intrabar execution and liquidity cannot be reconstructed from OHLC alone. Custom scripts can contain lookahead or other biased logic. The report records execution assumptions and warnings. Results are simulations, not live trades.