Privacy Policy

Last updated 16 September 2026

This Privacy Policy explains what personal information The Trading Path collects when you use the website at thetradingpath.net, its subdomains (including the trade journal), and our Discord bot (the "Service"), how we use it, and the choices and rights you have. The Service is operated by The Trading Path ("we", "us"), which is responsible for your personal information. You can reach us by messaging the admins in our Discord server (or opening a support ticket there).

1. Information we collect

• Discord account information — when you sign in with Discord we receive your Discord user ID, username or display name and avatar. We request only Discord's basic "identify" permission: we do not receive your email address, password or the list of servers you belong to.
• Community membership and roles — our bot checks whether you are a member of our Discord server and which of our roles you hold, to decide what you can access.
• Activity on the Service — the pages and tools you open, files you download (with the options chosen) and when.
• Settings and progress — chart colours, selected symbols, download options and academy lessons you have completed, saved to your account so they follow you between devices.
• Content you create — trade-journal entries, notes and uploaded screenshots, and academy questions, comments, replies and likes.
• AI chat — the questions you type and the last few turns of the conversation, which are sent to generate an answer. Your name and Discord ID are not included, and we do not store the conversation after the answer is returned.
• Discord bot usage — when you use bot commands: your Discord user ID and username, the command and options, and the time.
• Consent records — the date and version of the Terms you accepted at sign-in.
• Technical information — your IP address and browser information are processed by our servers and hosting provider to deliver pages, keep the Service secure and prevent abuse (for example rate limiting). We do not use them to build a profile of you.
• Browser storage — see our Cookie Policy.

We do not collect payment card details, government identifiers, precise location or special categories of personal data, and we do not knowingly collect information from anyone under 18.

2. How we use it

• to provide the Service: sign you in, apply role-based access, remember your settings, store your journal and run the bot;
• to keep the Service secure, prevent abuse and enforce our Terms, including preventing redistribution of data;
• to understand how the Service is used (including per-member usage statistics visible only to our admins) and to improve it;
• to answer your questions and requests, and to comply with legal obligations.

We do not sell your personal information, use it for advertising, or make decisions about you based solely on automated processing that have legal or similarly significant effects.

3. Legal bases (EEA, UK and similar laws)

• Contract — to provide the Service you signed in to use.
• Legitimate interests — security, abuse prevention, understanding usage and improving the Service. You can object at any time.
• Consent — for optional embedded video players. You can withdraw consent at any time in Cookie settings.
• Legal obligation — where the law requires us to keep or disclose information.

4. Who we share it with

• Hosting provider — our servers are in the European Union; the provider stores and processes data on our behalf.
• Discord — for sign-in and the bot. Discord's own privacy policy applies to your Discord account.
• AI model provider — receives the text of AI chat questions (without your name or ID) to generate answers. It may process that text outside your country.
• YouTube (Google) — only if you choose to play an embedded video, in YouTube's privacy-enhanced mode where available.
• Other members — your Discord display name is shown next to academy questions, comments and replies you post. Download activity shown to members is anonymous.
• Others where required — professional advisers, law enforcement or regulators where required by law, or a successor if the Service is reorganised or sold (subject to this policy).

We do not sell or "share" personal information for cross-context behavioural advertising, as those terms are defined under California law.

5. International transfers

Your information may be processed in countries other than the one you live in. Where the law requires it, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

6. How long we keep it

• Activity history: 12 months, then deleted automatically.
• Account profile, settings, lesson progress and consent records: while you use the Service, or until you delete your data.
• Trade-journal content: until you delete it or delete your data. Daily backups of the journal are overwritten on a rolling basis (normally within 7 days).
• Academy posts: until you or an admin remove them, or you delete your data.
• Bot usage log: a rolling log; the oldest entries are removed automatically.
• AI chat: not retained after the answer is returned.

7. Security

We use encrypted connections (HTTPS), signed and HttpOnly session cookies, role-based access controls and restricted server access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your rights and choices

Depending on where you live, you may have the right to access, export, correct or delete your personal information, to object to or restrict certain processing, to withdraw consent, and to complain to a data protection authority. Residents of California and other US states have the right to know, access, correct and delete personal information, to opt out of its sale or sharing (we do not sell or share it), and not to be discriminated against for exercising these rights.

• Download your data and delete your data yourself at any time on the Your data page.
• Your name and avatar come from Discord: change them in Discord and sign in again to update them here.
• For anything else, contact us by messaging the admins in our Discord server (or opening a support ticket there). We respond within one month and may need you to sign in to confirm your identity. You may use an authorised agent where the law allows.

9. Children

The Service is only for people aged 18 or over and is not directed to children. If we learn that we hold information about someone under 18, we will delete it and end their access.

10. Emails and messages

We do not send marketing emails or newsletters. The bot only sends Discord messages when you use a command or in community channels.

11. Changes

We may update this policy. The date at the top shows the latest version, and we will give notice of material changes on the Service or in our Discord server.