Privacy

Last updated 26 August 2026

TradeFlow is a browser extension that reads numbers already on your screen and shows you how much room you have left before your prop account is gone. Almost everything it knows stays on your own machine. This page says exactly what that means.

What stays on your computer, and never leaves it

Your rules, your daily limit, your account size and firm, your logged P&L, your instrument settings, your themes, and your record (days ended on plan, catches, overrides) all live in your browser's own extension storage. We do not have a copy. If you uninstall the extension, that data is deleted with it, and nobody at our end notices or can get it back for you.

One exception, and it is Google's machinery rather than ours: a small set of setup values (your theme, panel size, firm, size and phase, your own custom limits, your risk presets and your days-alive lineage) syncs through your Chrome profile so a second machine is not a blank slate. That is Chrome's account sync;it does not reach a TradeFlow server and we never see it. Your P&L ledger, your daily record and any credential are excluded from it by name.

What does leave your computer

• Your email address, if you make an account. Only used to sign you in and to check whether you have a paid plan.
• Payment details go straight to Stripe. We never see or store a card number. Stripe tells us whether a subscription is active; that is all we receive.
• Anonymous usage events. Things like "the panel opened", "a rule was saved", "the extension could not read this platform".No P&L figures and no dollar amount of any kind, no rule text, no account numbers, no personal detail. Each event is posted to /api/telemetryand carries exactly five things: event, props, ts,installId, and version. Never a dollar amount. They do carry which prop firm you selected (an id from a fixed list of nine, never an account number) because that is what tells us whose published rules to go and re-check, and a wrong rule number is the only bug in this product that costs you money. You can switch these off entirely: options page → Privacy → Anonymous usage events.
• Your day-count streak, if you have an account. The days-alive streak is stored on our billing server so it survives a reinstall. It is a number of days and nothing else. If you sign in we also store a billing email, used only to identify that account.

What we never do

• We never place trades. There is no order-placement code in the extension at all. It reads and displays; it cannot buy or sell anything.
• We never ask for, store or forward your broker or prop-firm password. If any tool asks you for those, including one claiming to be us, do not give them.
• We never sell your data or share it with advertisers. There are no ad networks, no trackers and no third-party analytics scripts in the extension.
• We never read pages other than the ones listed in the extension's permissions — your TradingView chart, your broker platform, and our own site.
• Every other address the extension contacts, named. This list used to end with “nothing else, ever”, which was not true, so here is the whole of it instead.
  • api.frankfurter.dev — a public exchange-rate service, asked for one currency pair when the position sizer needs a rate it cannot read off your chart. The request contains the two currency codes and nothing else: no account, no install id, no figure of yours. It is a rate lookup, not a report about you.
  • localhost on your own machine, and only if you switch on the MetaTrader bridge yourself. That permission is not granted until you ask for it.
  • If you choose to mint a share card, the image you generate is uploaded to a public bucket so the link you share can be opened by whoever you send it to. That is what “share” means here, and nothing is minted unless you press the button.

If you connect your platform's own API

You can paste in an API key from your prop firm to get an exact live figure instead of a typed one. this is not a paid feature; it is your key and your account. That key is stored on your machine and used from your machine.It is never sent to us, it is excluded from the export file by an allowlist, it is never synced, and we could not read it if we wanted to.

Deleting everything

Uninstalling the extension removes everything it stored locally. If you made an account and want it and your streak deleted from our side too, email support@tradeflow.app and we will delete it. No form, no retention period, no argument.

Getting in touch

Questions, or something here that does not match what you are seeing: support@tradeflow.app.

If any statement on this page turns out not to match what the extension actually does, that is a bug and we want to hear about it. The whole product is built on its numbers being right, and this page is one of them.