Privacy
Policy.

This policy explains what StrategyLab stores, why, and who else is involved. StrategyLab is operated by Agent Creative, a studio based in Connecticut, United States (“we”, “us”). The short version: we keep an email address and the strategies you choose to save, we do not sell or rent anything about you, and we do not run advertising or third-party analytics trackers on this site.

What we collect

When you only try the tool

Nothing that identifies you. You can load prices, run tests and use replay without an account. Like any web server, ours receives your IP address and browser details with each request, and keeps short-lived technical logs for security and debugging.

When you create an account

• Name and email address, so you can sign in and so we can reach you about your account.
• A password, stored as a salted hash by WordPress. We cannot read it.
• Your plan and usage: whether you are on Free or Pro, and how many strategies you have saved.

What you save

• Saved strategies: the market, candle size, dates, strategy, settings and trading rules, plus the headline numbers at the time you saved.
• Shared results (Pro): the same setup together with the exact price candles the result was computed on, so that the public page shows the same numbers later. Anyone who has the link can view a shared result. The page shows the name on your account (“shared by …”) and never your email address.
• Saved live paper-trading sessions (Pro): the setup and the simulated trade log.

These records contain simulated trades only. StrategyLab is not connected to any brokerage or exchange account and never receives your real balances, holdings or orders.

When you write to us

The contact form stores your name, email address and message on this site and emails them to us so that we can reply.

When you pay

Pro subscriptions are paid by card through Stripe. Your card details go directly to Stripe and never reach our server. Stripe tells us that a payment succeeded, which plan it was for, and gives us a customer and subscription reference so that we can keep your plan up to date. Stripe’s own privacy policy applies to the payment data it holds.

Cookies and browser storage

• Sign-in cookie. When you sign in we set the cookies WordPress needs to keep you signed in. They are essential and are removed when you sign out or they expire.
• Browser storage. The tool keeps a few things in your own browser’s storage so they survive a reload, for example your most recent live paper-trading session. This stays on your device.

We do not set advertising cookies and we do not load third-party analytics or tracking scripts. Fonts and scripts are served from this site, not from an outside network.

Other services involved

• Coinbase Exchange provides the price data. Historical candles are requested by our server and cached, so Coinbase does not see your address for those. (On a browser-only preview copy of this site there is no server: price requests go from your browser to Coinbase, and anything you save stays in that browser.) Live paper trading connects your browser directly to Coinbase’s public price feed, so Coinbase receives your IP address while a live session is running, as it would if you visited their site.
• Binance public market data is used as a fallback when Coinbase does not answer, in the same way.
• A stock data provider (Twelve Data), only if the site operator has switched stock data on. Those requests are made by our server and do not include anything about you.
• Stripe, for payments, as described above.
• Our hosting and email providers, who store the site’s database and deliver account and contact-form email on our behalf.

How we use it

To run the service: signing you in, showing your saved work, enforcing plan limits, taking payment, answering your messages, and keeping the site secure. We do not use your saved strategies for anything else, we do not sell personal information, and we do not share it for advertising.

How long we keep it

• Account details and saved work: for as long as your account exists.
• Shared results: until you delete the link or your account.
• Contact messages: for as long as needed to deal with the request, and then as part of normal business records.
• Payment records: as long as tax and accounting rules require.

Your choices

• You can delete any saved strategy, share link or saved session yourself from the Saved tab.
• You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account and everything saved under it. Use the Contact page, writing from the email address on the account so that we can confirm it is you.
• Depending on where you live, you may have further rights under local law, such as the Connecticut Data Privacy Act, the GDPR or the UK GDPR. We will honor a valid request wherever you are.

Security

Passwords are hashed, payment details are handled by Stripe, and access to the site’s database is limited to the people who run it. No system is perfectly secure; if we learn of a breach affecting your information we will tell you as the law requires.

Children

StrategyLab is intended for adults. It is not directed to anyone under 18, and we do not knowingly collect information from children.

Changes

If this policy changes in a way that matters, we will update the date at the top and, where appropriate, tell account holders by email.

Contact

Questions and requests about privacy go through the Contact page.