Privacy Policy

MicaraTrades stores the journal you write and the email address you sign in with, uses a single cookie to keep you signed in, and sends data to exactly four companies — each one needed to run the service, none of them for advertising. We do not sell data, we do not run ad trackers, and your journal is never published.

The controller of your data is Micara Labs, reachable through micaralabs.com. The rest of this page is the detail behind that summary.

Everything falls into three groups:

• Account data. The email address you sign in with, and — if you choose Google sign-in — your name and email as Google provides them.
• Your journal. Trade entries, uploaded chart screenshots, notes, playbooks, trading accounts and their settings, imported CSV data, and goals. All of it exists because you typed or uploaded it.
• Technical data. Ordinary server logs (IP address, request time, browser type) kept briefly for security and debugging.

• No broker credentials or account access — the product has no broker connection at all, so there is nothing to hand over.
• No advertising or cross-site trackers — no ad pixels, no fingerprinting, no third-party analytics that follow you around the web.
• No payment card details — when paid plans are live, Paddle processes payment as merchant of record; card numbers never reach our servers.
• No passwords — sign-in is by email link, so there is no password for us to store or leak.

Only to run the product:

• storing and displaying your journal back to you;
• computing your statistics — entirely from your own entries;
• signing you in and sending transactional email (sign-in links, service notices);
• running the AI features you invoke (detailed in the next section);
• keeping the service secure and diagnosing faults.

We do not sell personal data, we do not share it for advertising, and we do not use your journal to train AI models. If you opt into the anonymous leaderboard, only the aggregate figures you chose to share are shown, with no identity attached; you can opt out again at any time.

Some features are powered by a large language model from Anthropic. When — and only when — you invoke one of them, the data that feature needs is sent to Anthropic for processing:

• Screenshot reading: the chart or position-panel image you upload.
• Playbook coach and Micara AI assistant: the relevant journal context — trades, playbook text, statistics — needed to answer you.

Nothing is sent in the background: if you do not use the AI features, no data goes to Anthropic at all. Declining is as simple as not clicking them; the rest of the product works fully without.

The app uses cookies solely to keep you signed in — session authentication. That is the entire list. There are no advertising cookies, no tracking cookies, and no third-party cookies, which is also why you will not find a cookie-consent banner here: nothing on the site needs one.

This marketing site stores one value in your browser's local storage: your light/dark theme choice. It never leaves your machine.

Four companies, each for one job:

• DigitalOcean — hosting. The servers and database the service runs on.
• Resend — transactional email. Delivers sign-in links and service notices to your inbox.
• Anthropic — AI processing, only for the features you invoke, as described above.
• Paddle — payments, once paid subscriptions are live, acting as merchant of record.

Each processes data only to provide its service to us. If this list changes, we will update this page before the change takes effect.

• Your journal and account: for as long as your account exists. A lapsed subscription does not delete anything — you drop to the free tier with your data intact.
• Server logs: kept briefly for security and debugging, then rotated out.
• Backups: deleted data leaves routine backups as they expire on their regular cycle.

Wherever you live — and as a matter of legal right if you are in the EU, EEA or UK under the GDPR — you can:

• Access — see the personal data we hold about you;
• Rectification — correct anything inaccurate (journal entries you can simply edit yourself);
• Erasure — have your account and its data deleted;
• Portability — take your data with you in a machine-readable format;
• Objection and restriction — object to or restrict processing where the GDPR provides for it.

To exercise any of these, contact us through micaralabs.com. If you are in the EU, EEA or UK and believe we have not handled your data properly, you also have the right to complain to your local data-protection authority — though we would ask you to raise it with us first.

Export: your trades can be exported as CSV from inside the app at any time, no request needed. For a fuller export of everything on your account, ask us.

Deletion: ask through micaralabs.com from the email address on the account, and we will delete the account and all of its data — journal, screenshots, playbooks, the lot. Deletion is permanent; export first if you want to keep anything.

Traffic is encrypted in transit with TLS, sign-in links are single-use and short-lived, access to production systems is restricted, and data is backed up regularly. No system is perfectly secure, but the passwordless design removes the most common failure mode outright: there is no password database to breach. If we ever learn of a breach affecting your data, we will tell you.

MicaraTrades is a tool for people who trade, and it is not directed at children. Do not use the service if you are under 16 (or under the age at which you can consent to data processing where you live, if higher). If we learn we hold an account for a child, we will delete it.

If what we collect, or who processes it, changes, this page changes first and the date at the top moves. For material changes — a new subprocessor, a new category of data — we will also notify you by email or in the app before the change applies to you.

Privacy questions, rights requests, or anything unclear on this page: contact Micara Labs through micaralabs.com.