Privacy Policy

Last updated: September 13, 2026

1. Information We Collect

We collect the following information when you use the Service:

• Account data: Email address and securely hashed password (Argon2)
• Optimization data: Strategy configurations, parameter sets, and backtest results that you save or sync
• Optional verification data: If an optional partner verification flow is enabled, we store only the account identifier you submit for eligibility checks. We do not collect exchange API keys.
• Extension local data: Chrome extension settings, saved results, sync status, and CSV export preferences stored in browser storage
• Service usage analytics: First-touch source, campaign and landing path; an anonymous session identifier; visited routes; foreground-visible active time; and signup and payment-status events. Analytics events do not store IP addresses, page content, payment addresses, or strategy content.

2. How We Use Your Data

Your data is used to:

• Provide and maintain the Service, including cloud sync and forward testing
• Authenticate your account and manage access tiers
• Improve the Service through aggregated, anonymized usage patterns

We do not sell your personal data to third parties. We do not use your trading data for our own trading purposes.

3. Data Storage and Security

Your data is stored on secure servers with encryption in transit (TLS) and at rest. Passwords are hashed with Argon2. We do not collect or store exchange API keys at all — forward testing operates exclusively through TradingView webhooks, which means no exchange credentials ever reach our infrastructure. Access tokens are valid for 30 days and refresh tokens are stored server-side in Redis.

4. Third-Party Services

The Service may interact with:

• TradingView: The Chrome extension operates within the TradingView interface. We do not share your data with TradingView.
• Partner verification API: When optional partner verification is enabled, the server checks the account identifier you submit using operator-side credentials. No exchange API key, custody permission, or trading permission is requested.
• Google Sign-In: If you choose Google login, we receive authentication information needed to create or sign in to your OptiNod account.
• Cloudflare Web Analytics: We use Cloudflare’s cookie-free measurement beacon for site performance and anonymous visit statistics.

5. Chrome Extension Disclosures

The OptiNod Chrome extension can read and update data inside supported TradingView pages solely to provide user-facing features such as parameter scanning, automated backtest execution, result capture, and saved preset restoration.

• Pages accessed: TradingView chart pages and OptiNod web app pages used for account sync
• Local storage: The extension stores configuration values, optimization progress, saved results, auth state, and sync metadata in Chrome extension storage
• Data sent to OptiNod: Account credentials, account profile data, saved configurations, saved optimization results, and token refresh requests when you sign in or enable cloud sync
• Not sold: We do not sell extension user data to data brokers or other third parties
• No remote code execution: We do not load or execute remotely hosted JavaScript in the extension

If you do not sign in or enable cloud sync, your extension data remains stored locally in your browser except for requests strictly necessary to load the websites you visit.

6. Data Retention and Deletion

Your data is retained while your account remains active. You may request deletion through Settings or by contacting us. Identifying account data is anonymized immediately and account-owned content is permanently deleted after a 30-day grace period. Raw service-usage events are deleted automatically after 90 days, and account-level first-touch attribution is deleted with the account. Billing records are retained separately for 5 years for refund and chargeback reconciliation and are anonymized when the account is deleted.

7. Cookies

The Service uses session and local storage for authentication, preferences, an anonymous analytics session, and first-touch attribution. Attribution is kept for at most 30 days and cleared after signup. We do not use third-party tracking cookies and respect the browser Do Not Track setting.

8. Google API Limited Use

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

9. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format (CSV)

10. Contact

For privacy-related questions or data requests, please contact us at privacy@optinod.com.

Where to go next

• Terms of Service
• Support Center