VerifyPips
Template: the operator details in [square brackets] are not configured yet (NEXT_PUBLIC_OPERATOR_* in frontend/.env). Have the legal texts reviewed by a qualified professional before going live.

Privacy policy

Last updated: 2026-10-17

This English version is a convenience translation. Only the German version is legally binding.

1. Controller

[Name / Firma des Betreibers]
[Straße Hausnummer]
[PLZ Ort]
Deutschland
E-Mail: [kontakt@example.com]

2. What data we process and why

User account. E-mail address, password (only as a salted scrypt hash), time of registration and of consent to the terms/privacy policy. Purpose: providing the service; legal basis Art. 6 (1) (b) GDPR (contract).

Connected MetaTrader accounts. Account number (login), server, broker, the investor password (read-only access, stored encrypted with AES/Fernet) and the trading data read from the broker server (trades, deposits/withdrawals, balance, equity, open positions). Purpose: calculating and displaying the statistics; legal basis Art. 6 (1) (b) GDPR. The investor password is only transmitted to our own connector servers, which use it to log in to the broker.

Public profiles. Only if you explicitly publish a profile are the account name, platform, broker and statistics shown at a public address – never login, server, credentials or e-mail. The options "hide amounts", "hide positions" and "delay history" control the scope. Legal basis: consent, Art. 6 (1) (a) GDPR; revocable at any time by switching off publication.

Server logs and security. When the site is accessed, IP address, time, requested address and user agent are processed for technical reasons. IP addresses are kept in memory for rate-limiting login attempts for at most the duration of the time window (minutes). Legal basis: Art. 6 (1) (f) GDPR (protection against abuse).

E-mails. For confirmation and password reset e-mails, your e-mail address is transmitted to our e-mail service provider ([E-Mail-Versanddienstleister]).

Local storage. View settings, the selected language and the login token are stored in your browser's localStorage; the language additionally in a technically necessary cookie. We do not use tracking or marketing cookies or analytics services.

3. Recipients

  • Hosting: [Hosting-Anbieter, Anschrift, Serverstandort]
  • E-mail delivery: [E-Mail-Versanddienstleister]

Data processing agreements pursuant to Art. 28 GDPR are in place with service providers.

4. Retention period

We store account and trading data for as long as your user account exists. If you remove a MetaTrader account, its credentials and all synchronised data are deleted immediately; when the user account is deleted, all associated data is deleted. Statutory retention obligations remain unaffected.

5. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR) as well as the right to withdraw consent with effect for the future. Contact [kontakt@example.com] for this. You can also lodge a complaint with a data protection supervisory authority.