Privacy Policy
Summary
TraderSwim is owned by TradeRefined LLC and developed and hosted by itpro360 LLC. It is a market dashboard (the Wall) plus TraderSwim Desk, where signed-in people can connect their own Schwab account to place and track trades. Visitors to the Wall don't need an account and get no cookies from us. Accounts (through Tooly SSO or a local TraderSwim account) are used for Desk and the administrator console. We keep first-party analytics as daily totals, and a security log. We do not sell or share personal information, and we use no advertising or third-party analytics.
What we collect and why
- Analytics (daily totals). When you load a page we add one to that day's counts: page viewed, the referring website's domain name (not the full address), browser family, operating system, device type (desktop, mobile or tablet), country, region/state and city (from Cloudflare's location headers, which Cloudflare derives from your IP address before the request reaches us), and simple actions such as opening a headline, switching the stock index or news tab, toggling full screen or the clock format. To count unique visitors we compute a salted, one-way hash of your IP address with a salt that changes every day; that hash is discarded after the day ends and your raw IP address is never stored for analytics. Purpose: understanding how the site is used and keeping it working.
- Accounts (only if you sign in). See “Signing in” below.
- TraderSwim Desk (only if you use it). To trade through your own Schwab developer app we store, for your account: your Schwab app key and secret and the sign-in tokens Schwab issues (all encrypted on our server), when you connected and when the connection expires, the last four digits and type of each Schwab account you approved plus Schwab's account reference code, which account you trade in, the time you accepted the Desk notice, your trade ideas and notes, your strategy settings (including the margin interest rate and limit you set), your watchlist and trade plans, any Stealth orders you ask Desk to hold (symbol, quantity, your entry, target and stop prices, their progress and the Schwab order numbers involved), the cash-out/deposit/fee entries you add, the expenses you record (date, payee, amount, category, notes and tags) and any receipt photos or PDFs you upload with them, and a record of each order you send from Desk (your typed instruction, a summary, the symbol, the time, Schwab's order number, and Schwab's reason if it refused the order). Your orders, positions, balances, trade history and quotes are read from Schwab when you open a Desk page and kept in a short cache on our server (seconds to two minutes, deleted within a day). We never receive your Schwab password; you sign in on Schwab's own page. Purpose: providing Desk to you.
- Sector data. For the Sectors view our server downloads sector ETF price history from Schwab (through a connected person's app) and crypto category data from CoinGecko, and keeps daily totals of crypto category market caps for 90 days. This is market data, not information about you; nothing about you is sent to CoinGecko.
- Security activity log. Sign-ins (and whether they used Tooly SSO or a local account), sign-outs, sign-ups, failed and refused sign-ins, lockouts, rate-limit blocks, password, authenticator and recovery-code changes and password-reset requests, emails sent or failed, Tooly SSO connections and disconnections, Desk events (accepting the Desk notice, saving a Schwab app key, connecting, disconnecting or the connection expiring, and each order sent, refused or cancelled, recorded without prices or amounts), admin actions, settings changes, data exports, account deletions, and server errors are recorded with the time (UTC), the event, details, the client IP address and the browser's user-agent (device) string. For ordinary visitors, an entry is only created if a request causes a server error. Purpose: security, abuse prevention and troubleshooting.
- Web server logs. Our web server (nginx) records requests with IP address, user agent, page and time. These are standard operational logs used for security and troubleshooting.
- News cache. Our server fetches public headlines from news publishers. No information about you is sent to them.
Signing in
You can sign in in two ways. Neither is needed to use the dashboard.
- Tooly SSO (operated by itpro360 LLC at sso.tooly.fyi). When you choose “Continue with Tooly”, Tooly tells TraderSwim your Tooly user ID (
sub), email address, name, profile photo address and your roles. TraderSwim stores these on your TraderSwim user record (updated at each sign-in), with the time you accepted these terms, your theme choice and the times you were first and last seen. Your Tooly password and authenticator codes are entered only at Tooly and are never seen by TraderSwim. If Tooly confirms who you are but you can't get in (for example a missing role), we keep the details listed under “How long we keep it” so an administrator can help, and the refusal page shows you the reference code. Tooly's own handling of your data is described in the Tooly SSO Privacy Policy. - Local TraderSwim account. TraderSwim stores your email, a salted hash of your password (never the password itself), your authenticator secret, one-way hashes of your recovery codes, a one-way hash and expiry time of any password-reset link you asked for (removed once used), failed-attempt counters, the time you accepted these terms, your theme choice, and when you were first and last seen.
Your sign-in history is the set of entries about you in the security log above. Account records are kept until the account is deleted; a short deletion record (who, when, IP and device) is kept for 12 months.
Email we send
TraderSwim sends only a few emails, all tied to your account or the site's security, and no newsletters or marketing:
- Password reset for local TraderSwim accounts, when you ask for it on the sign-in page: a one-time link valid for 60 minutes (we store only a one-way hash of it), and a short notice after the password is changed.
- Break-glass alert: when the emergency administrator account signs in, a notice goes to the site's contact address.
- Test emails an administrator sends from the admin console.
Email is sent through Tooly Mail Relay, a mail server operated by itpro360 LLC on the same server as TraderSwim, which passes each message to SMTP2GO or Amazon Web Services (Amazon SES) for delivery; an administrator may also send through SMTP2GO or Amazon SES directly. These providers receive your email address and the message to deliver it, under their own privacy policies; link and open tracking is turned off. Our security log records each email sent or failed (time, recipient address, type of email and the service used, never the message body or links), kept 12 months like the rest of the log. Replies go to the site's contact address.
Cookies and browser storage
Visitors get no cookies from us, so there is no cookie banner. If you sign in, we set one strictly necessary session cookie, which ends when you sign out, after 12 hours (1 hour for the emergency administrator account), or after 2 hours without activity. Your theme choice (Light, Dark or Auto), 12/24-hour clock choice, chosen stock index, currency-converter amount and forex strip scroll/static choice are saved in your own browser's local storage. These are strictly necessary preferences, not tracking: they never leave your device and you can clear them in your browser settings.
Third parties your browser contacts
The stock and crypto heat maps, the currency strip and the currency charts are embedded from TradingView. When the page loads, your browser connects directly to TradingView, which receives your IP address and browser details and may set its own cookies under its own privacy policy. Clicking a headline opens the publisher's website (for example CNBC, MarketWatch, Yahoo Finance, CoinDesk, Cointelegraph or Decrypt), which has its own policy; we open links without sending a referrer. All traffic to TraderSwim passes through Cloudflare, which acts as our network and security provider. Our server also downloads public daily exchange rates for the currency converter (from the free currency-api service via jsDelivr or Cloudflare Pages); no information about you is sent when it does. Your converter amount and the strip’s scroll/static choice are saved only in your browser.
Schwab (TraderSwim Desk)
When you use Desk, our server connects to the Charles Schwab Trader API on your behalf with your own developer app, to read your accounts, positions, orders, trade history and quotes and to place or cancel the orders you confirm. Connecting sends your browser to Schwab's sign-in page. Schwab handles your data under its own privacy policy and terms; TraderSwim is not part of Schwab and Schwab doesn't endorse it.
Who can see the data
Your Desk data is shown only to you; the admin console shows administrators only counts (how many people use Desk or are connected, how many orders were sent today) and the security-log events above. The people who run the server have technical access to its data files, which is why Schwab keys and tokens are stored encrypted. Only TraderSwim administrators (people with the TraderSwim admin role in Tooly SSO, or a local admin account) can view the analytics, the user list and the security log, in the admin console, which requires two-step sign-in. You can see your own account and sign-in history on the My account page. Cloudflare processes traffic on our behalf. We disclose information to authorities only when legally required. We don't sell it or share it with advertisers.
How long we keep it
- Daily visitor hashes: until the end of that day.
- Analytics daily totals (including country, region and city counts): about 120 days.
- Account records: until the account is deleted (by you, or by an administrator); deletion records: 12 months.
- Refused Tooly sign-ins (your Tooly user ID, name, email, photo address, roles, the reason and a reference code, kept so an administrator can grant you access): until your next successful sign-in, or 90 days.
- Security activity log: 12 months, then deleted automatically.
- Desk data (Schwab keys and tokens, watchlist and plans, strategy, ledger, order records, expenses and receipt files): until you remove it (deleting an expense deletes its receipt file) (Desk → Schwab → Remove app key, or deleting ideas and entries) or delete your account. Schwab tokens stop working after 7 days or when you disconnect. Order records keep the latest 500. Cached Schwab data: deleted within a day.
- Daily backups of the app's data files (analytics totals, settings, account records and Desk data, but not receipt files or the activity log): 14 days.
- News cache: replaced every few minutes.
- Web server logs: rotated by the server and kept only as long as needed for operations and security.
Your choices and rights
If you have an account, the My account page lets you see your details and sign-in history, export your data as a file (including your Desk watchlist, strategy, ledger, order records and expense list, but not your keys, tokens or receipt files, which you can download from Desk → Expenses), and delete your account in TraderSwim, which also deletes your Desk data and Schwab keys (deleting your Tooly account itself happens at Tooly SSO). Analytics can't be linked back to you. If you believe a security-log entry relates to your IP address, you can ask us for a copy, a correction or deletion (unless we must keep it to protect the service or comply with law); include the approximate time and IP address so we can find it. You can also clear the preferences stored in your browser at any time. Depending on where you live (for example California or the EU/UK) you may have additional rights, which we will honor as required by law.
Security
The site is served over HTTPS through Cloudflare. Every account uses two-step sign-in: Tooly SSO's own, or a password plus authenticator code for local accounts, which lock after repeated failed attempts. Sign-in activity is recorded. Pages use a strict content security policy. No system is perfectly secure, but we work to protect the limited data we keep.
Where data is stored
On a server operated for TradeRefined LLC by its developer, itpro360 LLC, in the United States.
Children
TraderSwim is not intended for anyone under 16, and we don't knowingly collect information about children.
Changes
When we change what we collect or how long we keep it, we update this policy and its effective date and note it in the changelog.
Contact
Questions or requests: [email protected].