Privacy policy

The data controller is Ferdinando Febbraio, operating FebbJournal, Italy. You can reach us at support@febbjournal.app.

• Account data: email address, password (stored only as a secure hash by our authentication provider), name, username, language and time zone.
• Sign-up answers you choose to give: trading style, market, edge, goals and how you found us.
• Journal content you enter: trades, prices, sizes, results, notes, grades, emotions, screenshots and other images, daily and weekly reflections, strategies and settings.
• Technical data: session cookies, IP address and request logs kept by our hosting and database providers for security and troubleshooting.

We do not use advertising, tracking pixels or third-party analytics, and we never sell your data.

• To provide the journal you asked for: your account, storing and syncing your entries, statistics computed from them (performance of a contract, Art. 6(1)(b) GDPR).
• To keep the service secure: sign-in protection, invite-only access, rate limits and abuse prevention (legitimate interest, Art. 6(1)(f)).
• To send the emails the service needs, such as sign-up confirmation and password reset (performance of a contract).
• To comply with legal obligations where they apply (Art. 6(1)(c)).

We use a small number of providers that process data only on our instructions:

• Vercel Inc. (United States): hosting of the website; its server functions run in Frankfurt, Germany.
• Supabase Inc. (United States): database, authentication, file storage and transactional emails; the database is located in Frankfurt, Germany.

Your data is stored in the European Union. Both providers are U.S. companies, so limited access from outside the European Economic Area (for example for support or security) is possible; such transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified, and on the European Commission's Standard Contractual Clauses.

We only use what the service needs to work, so no consent banner is required:

• Session cookies set by our authentication provider to keep you signed in.
• A language cookie (fj-lang), a short-lived sign-up cookie (fj-signup-record) that carries your sign-up answers until your account is ready, and a one-minute cookie (fj-email-confirmed) that shows the email-confirmed notice.
• Your browser's local storage, which keeps a copy of your journal and preferences so the app stays fast and works offline. Signing out removes that copy; only a few display preferences of the device stay.

We keep your data for as long as your account exists. When you ask us to delete your account, we delete your data within 30 days, except where the law requires us to keep something longer.

You can ask to access, correct, delete or restrict the processing of your data, object to it, and receive it in a portable format. You can download a full copy of your journal at any time from Settings › Data & privacy. For anything else, write to support@febbjournal.app.

You also have the right to lodge a complaint with a supervisory authority; in Italy this is the Garante per la protezione dei dati personali (garanteprivacy.it).

FebbJournal is meant for adults only. You must be at least 18 years old to use it.

If we change how we process your data, for example by adding a provider, we will update this page and its date before the change takes effect. See also our terms and risk disclaimer.