What we store, and who can see it.

Your account: an email address, a hashed password (or a Google sign-in identity if you use it), and a display name. Your workspace: the trades, notes, screenshots, tags, plays, backtest sessions, goals, check-ins, prop-firm rules and progression state you create. Operational data: sign-in times, the pages you visited inside the app and how you arrived on the site (referrer or campaign tag), used to understand what is being used and to fix what is not.

Your main broker password, ever. The MetaTrader 5 add-on runs inside your own terminal, authenticates to Sage with an API key you generate, and cannot read or transmit broker credentials. We hold no payment details, because there is nothing to pay for.

Only if you choose investor-password sync for a MetaTrader 5 account, we store its account number, server name and investor (read-only) password, plus the date you agreed to the broker-connection terms.

Why: solely so our sync software can log in read-only and copy your closed trades and basic account details (name, currency, balance) into your journal, when you press Sync now and about once a day by itself.

How it is protected: the password is encrypted with AES-256-GCM before it is stored, in a separate place from the rest of your data. The encryption key is kept outside the database, so a copy of the database alone cannot reveal it. It is decrypted only inside our sync service, at the moment of logging in. It is never shown back to you or to anyone, never written to logs, and never shared with or sold to any third party. Platform staff do not view it.

How long: until you unlink the account or your account is deleted, at which point the stored password is deleted. Trades already imported stay in your journal until you delete them. You can also cut off access at any time by changing your investor password in MetaTrader 5.

Logins to your broker come from servers we operate, so your broker may record our server's location against your account.

You. Each account is an isolated workspace; your data is not visible to other users and is not aggregated with theirs. Nothing about you is public until you claim a public handle and switch on a specific sharing surface — stats, certificates, a backtest record, individual trades — each of which is off by default and can be switched off again instantly. Public views are computed live from those switches; there is no published copy to forget about.

Platform staff can access accounts for support and abuse handling. Those actions are recorded in an audit log and are excluded from usage analytics.

The site uses a first-party beacon to record page views, a browser-session identifier and how a visit arrived. No third-party analytics or advertising scripts run on the site. Sign-in uses a session cookie. Preferences such as theme and layout are kept in your browser's local storage.

Charts are rendered by TradingView's charting library served from this site; the public site also loads TradingView's embed script for its widget. If you choose Google sign-in, Google authenticates you. Investor-password sync runs MetaQuotes' MetaTrader 5 terminal on servers we operate to connect to your broker. Market data for backtesting is obtained from historical data providers and stored on our servers; it contains no personal information.

On servers we operate.

You can export your trades, delete individual records, and ask for your account and all of its data to be deleted. You can turn any sharing surface off at any time. Questions go to the feedback page inside the app or to the support address shown there.