Privacy policy

OptionTrigger — Privacy policy Last updated: October 7, 2026

1. Who operates this service and what this notice covers

OptionTrigger is a personally operated project. Contact the operator at contact@optiontrigger.com for support or privacy requests. The initial launch is intended for adults in the United States; this is a launch plan, not a claim that access is geographically restricted. This notice covers the new OptionTrigger website, account and license services, Desktop app and chart integrations.

The current website uses separate test accounts and Stripe test payments, with no real payment collected. This notice describes that service and the data used by compatible app builds. It does not replace the privacy notice or contracts for the existing service. A change to real payments or material data practices will be disclosed before it takes effect.

2. Account, payment, license and support information

We receive the email address you submit, your account identifier, authentication and recovery activity, and account status to register you, verify access, send service emails and help with your account. Passwords and authentication requests are handled by Supabase Auth through the service; do not send your password to support.

Stripe hosts payment entry and processes payment information. Our service receives customer, checkout, subscription, invoice and payment identifiers and status, plan and billing-period information needed to verify payment and issue the correct license. We do not receive full payment-card numbers or card security codes. Current checkout uses test mode; never enter a real card on the test site.

Device activation uses device identifiers, activation records and token hashes. Where device-bound licensing is enabled, the service also processes public keys and key fingerprints, expiry and revocation status, and rotation and replay-prevention records. Device private keys are not sent to our account service. These records support authorization, device management and fraud prevention; they are not optional analytics.

When you explicitly confirm the Terms of Service and Risk Disclosure, the account service records your account identifier, document version and content fingerprint, confirmation time, language and confirmation surface. Local app confirmation is stored separately on your device and is not proof of a verified website identity.

We receive messages and attachments you choose to send for support or privacy requests. Redact broker identifiers, financial details and credentials before sharing an incident export. Do not send a password, private key or full card number.

3. Local trading data

Broker connections, trading plans, orders, positions and trading logs are processed by the local app and Backend. The account and optional analytics services do not automatically upload those trading records or broker login credentials. Information you deliberately include in a support message is an exception to that normal local workflow. Your broker and TradingView independently process information under their own terms and privacy practices.

4. Website requests, cookies and optional analytics

Cloudflare and other service infrastructure receive technical request information, such as IP address, request time, URL, browser information and security or error information, to deliver the website and protect the service. Downloading files also creates infrastructure requests. A limited analytics payload does not make all technical requests anonymous.

On the customer domain, Cloudflare also inserts its Web Analytics performance beacon. It reports website page views and browser performance measurements separately from the optional PostHog events. Analytics preferences control PostHog, not this Cloudflare performance monitor. The monitor is not an advertising pixel; this notice does not treat it as a guarantee that all infrastructure requests contain no identifying information.

Essential cookies support login, session refresh, email confirmation, account recovery and checkout continuity. Login-cookie lifetime follows the authentication token; refresh cookies last up to eight hours, email-flow cookies up to fifteen minutes and recovery cookies up to ten minutes. Logging out clears the service login cookies. Local app settings and local confirmation records can remain on your device after website logout.

Optional PostHog website events are disabled unless you choose Allow analytics in Analytics preferences. When enabled, a random visitor cookie lasts up to eight hours. PostHog receives selected page categories and account-verification, checkout, payment-verification and license-issuance events, with a monthly/annual plan category where relevant. The payload excludes names, email addresses, form contents, full URLs or query strings, card details, broker identifiers, orders and positions. We do not use session recording or automatic capture of every click. IP geolocation and person-profile processing are disabled for these events, and the analytics payload overrides its IP field with 0.0.0.0. The visitor identifier still links events and is not a guarantee of irreversible anonymity.

Use Analytics preferences to keep analytics disabled or withdraw permission at any time. Disabling removes the visitor cookie and stops subsequent optional events from that browser; it does not automatically erase events already received. Contact us for an existing-data request. Declining analytics does not block accounts, subscriptions or required legal confirmation. Clearing cookies also removes the optional visitor identifier.

California tracking disclosure: the site currently does not change its behavior automatically in response to browser Do Not Track or Global Privacy Control signals. Optional analytics require the separate website choice described above. We do not use cross-site advertising pixels, build cross-site advertising profiles or sell personal information. External services you open, including Stripe Checkout, TradingView, your broker and Discord, have their own tracking practices.

5. Service providers and other disclosures

Cloudflare provides website delivery, request protection, business-request forwarding and R2 file/catalog delivery. Supabase provides authentication, database storage and server-side account, billing and license functions. Mailgun delivers account verification and recovery emails using the OptionTrigger sending domain. Stripe handles payments, subscription billing and billing management. PostHog processes the limited optional events described above when enabled. Providers may process technical or account information necessary to perform these roles and maintain their own security records.

We may disclose relevant information when legally required or to address fraud, security incidents or legal claims. We do not provide trading records to advertisers. Support information is shared only as needed to investigate your request or meet a legal requirement. This notice does not promise that every provider or request is processed only in the United States.

6. Retention, security and your requests

Account, billing, license and confirmation records are retained while needed to provide access, resolve support or payment issues, prevent abuse and meet applicable recordkeeping requirements. Provider logs and backups may have different retention periods. There is no automatic promise that all records disappear when you uninstall the app, cancel a subscription or withdraw analytics permission.

Email contact@optiontrigger.com to request access, correction or deletion of information associated with you, or to ask about retention. You do not need to create a new account to make a request. We may verify control of the relevant email or account before disclosing or changing private records; never email a password. We handle requests manually and explain any information that must be retained and the reason. Applicable statutory rights and response deadlines take priority. Some records may remain for legal, security, payment-dispute or backup purposes. Removing an account and cancelling recurring billing are separate actions; use billing management to stop renewals.

We use access restrictions and secure transport for account services, and local protections appropriate to compatible app builds. No software or infrastructure can guarantee perfect security. Report a suspected incident using the contact email and avoid including secrets in the initial message.

7. Adults, updates and contact

The service is intended for people aged eighteen or older and is not directed to children. Contact us if you believe a child has submitted account information. We will review the report and take appropriate action.

We update the date on this page when this notice changes. Material changes will be communicated through the website or account contact before new practices take effect, with a separate choice when required. Optional analytics choice is separate from agreement to the Terms of Service. This notice preserves rights available under applicable law and does not claim that every privacy law applies to every user.

Privacy and support contact: contact@optiontrigger.com. Public updates: https://x.com/EthanJiangTrade. Videos: https://www.youtube.com/@EthanJiangTrades. Community: https://discord.gg/NxF4gAs8th. Use email for private account, billing and privacy requests; do not post these details publicly. X, YouTube and Discord process messages and technical data under their own policies when you open their services. These contact links do not embed a social feed or video player on this website.