Privacy Policy

1. Information you provide

When you create a TBT account, TBT stores your username, optional email address, a one-way password hash, account timestamps and your user-specific watchlist and preferences. TBT does not store your TBT password in plain text.

When you connect Alice Blue, TBT receives an authorization code, Alice Blue user identifier and broker session from Alice Blue. The authorization code is exchanged on the server, the broker session is held only in server memory for the connection period, and the browser receives only an opaque TBT session cookie. TBT never places the Alice Blue broker session in browser storage or browser-visible API responses.

When you run a backtest, you provide instrument or contract selections, dates, timeframe, capital and strategy settings. The application uses these values to perform the requested calculation. TBT does not permanently attach these backtest inputs to your user profile.

When you use the Feedback form, TBT collects the selected complaint or suggestion type, your optional name and email address, your required message, the submission time and the page URL. These details are collected only to respond to feedback and improve the service. Do not include passwords, broker tokens, API secrets, OTPs or raw market-data responses.

If you email us, we receive the information included in your message, such as your email address, name, screenshots and issue details.

2. Information collected automatically

Like most internet services, the hosting and network providers may process technical information such as IP address, browser type, device type, request time, requested URL and error logs. TBT also uses the requesting IP address temporarily in server memory to limit excessive login, backtest and feedback requests and protect service availability.

If you accept analytics cookies, TBT uses Google Analytics 4 to collect anonymous website usage information such as page visits, general device and browser information, timeframe, whether a stock backtest was started, completed or failed, and whether feedback was submitted. Analytics event URLs are reduced to the page path and exclude query strings.

On selected public information pages, TBT includes Google AdSense publisher code. Google and participating advertising vendors may receive device, browser, IP-address, page-view and consent information needed to deliver, limit, measure and protect advertising. Advertising code is excluded from account, login, registration, watchlist, paper-trading, scanner, backtest, administration and policy pages.

3. How information is used

• To create and authenticate your account and keep your watchlist separate from other users.
• To provide instrument search, historical calculations and backtest results.
• To operate, secure, troubleshoot and improve the website.
• To prevent abuse, automated extraction and excessive requests.
• To respond to complaints, suggestions, support, privacy and grievance messages.
• To use suggestions and complaint themes to improve the service.
• With your consent, to understand anonymous page visits and general backtest usage so TBT can improve its website and reliability.
• Where advertising is enabled, to fund operation of the public educational website, measure ads, prevent invalid activity and comply with advertising requirements.
• To comply with lawful requests and applicable obligations.

4. Historical market data

TBT maintains a private market-data database for its scanner and research tools and may fetch additional candles for a requested backtest. It does not offer raw OHLCV candles for public download. The watchlist displays only the latest available stored price, change and volume; when unavailable, it displays N/A. Combined performance metrics and the aggregate equity curve are returned to your browser. For backtests, TBT also returns the strategy’s trade executions and provides historical candles to the private strategy simulator. Compressed replay snapshots are tied to the broker connection, remain accessible for up to 24 hours and may be removed earlier when the replay storage limit is reached. Expired snapshot records are cleaned up on subsequent backtest snapshot writes; database free pages and hosting backups may persist under the hosting retention policy.

5. Cookies and browser storage

TBT uses a signed, HttpOnly, same-site session cookie for your TBT login and an opaque connection identifier while Alice Blue is connected. In production the cookie is sent only over HTTPS. The actual Alice Blue broker session remains in server memory and is removed when you disconnect or the server-side session expires. Your selected Light or Dark Mode, saved stock strategy-builder settings and analytics-consent choice may be stored in browser local storage so they remain available on that device.

Google Analytics remains disabled and its tag is not requested until you choose Accept analytics. If you accept, Google Analytics may use cookies or similar browser technology to measure page visits and permitted usage events. You may withdraw or grant consent at any time by selecting Cookie preferences in the website footer. Declining analytics does not prevent you from using the backtester.

TBT does not send Google Analytics a stock symbol, OHLCV data, entry or exit prices, strategy conditions, exact date ranges, feedback contents, name, email, API tokens, broker information or other information entered into the forms. Google Signals and ad personalization remain disabled in TBT's analytics configuration.

Google and other third-party vendors may use cookies or similar local storage to serve and measure ads on eligible public pages. Depending on a visitor's region, consent and Google's settings, ads may be personalized using previous visits to this or other websites, non-personalized, or limited. Visitors can review or control Google's use of advertising information through Google Ads Settings. Information about opting out of some participating third-party vendors is available from YourAdChoices. Opt-out mechanisms are provided by their operators and may differ by region.

For visitors in the European Economic Area, the United Kingdom and Switzerland, personalized advertising requires a Google-certified consent management platform integrated with the IAB Transparency and Consent Framework. TBT's analytics-preference dialog controls Google Analytics only; it is not a substitute for the separate certified advertising-consent message. TBT will not intentionally enable personalized ads for those regions until that Google AdSense Privacy & messaging requirement is configured.

6. Service providers

TBT uses Alice Blue for broker authentication, contract metadata and historical market information, and third-party services to host the website and deliver domain and HTTPS functionality. After analytics consent, Google Analytics acts as an analytics service provider for the limited usage information described above. Google AdSense and participating advertising technology providers may process advertising data as described above and under their own terms and privacy policies. TBT does not sell personal information to advertisers.

7. Retention

Your account record, password hash, preferences and watchlist remain until the account or associated data is deleted. Market-history retention follows TBT's operational data policy. Alice Blue broker sessions and rate-limiting identifiers remain temporarily in process memory until disconnect, expiry or a server restart. Complaint and suggestion submissions are kept only as long as reasonably needed to respond, improve the service, maintain appropriate records or meet applicable obligations. Consent choices remain in browser local storage until changed or cleared.

8. Security

TBT uses password hashing, signed sessions, HTTPS, CSRF protection for account changes, request limits, parameterized database queries and browser-security headers. No internet service can guarantee absolute security. Never send passwords, broker PINs, broker tokens, OTPs, API secrets, market-data API responses or payment-card details through feedback or email.

9. Your choices and requests

You may change your analytics choice at any time through Cookie preferences in the footer. Advertising choices are managed through any separate Google consent message shown in your region and the advertising opt-out links above. You may also contact us to ask what personal information you directly provided through feedback or email, request correction or deletion where applicable, withdraw a previous request, or raise a privacy concern. We may need reasonable information to verify and process the request. Some information may be retained when required for security, legal claims or lawful obligations.

10. Children

TBT is intended for adults and is not designed for children. Do not submit personal information for a child through the website or support email.

11. Changes to this policy

This policy may be updated as the website or its analytics, account, advertising, payment or other services change. Material changes will be reflected by updating the date at the top of this page.

12. Privacy and grievance contact

Email tbttestbeforetrade@gmail.com with the subject “TBT Privacy Request” or “TBT Grievance”.