Cookies & privacy

Your data, in plain words

What XYZ collects when you open and use an account, what it is used for, and the cookies this site actually sets. Today that is two, and both exist only to keep you signed in.

This page summarises how the platform handles data. It is a working draft: the binding Privacy Policy will be the version approved by the client's legal team.

[PLACEHOLDER - effective date and version]
01

Overview

To give you a trading account we need to know who you are, how to reach you and what happens on your account. We collect that information, use it to run the service and keep it secure.

The sections below go through each part in turn. Where the final wording is a legal matter, a marker shows that it is still to be approved.

[PLACEHOLDER - legal entity acting as data controller, and governing law]
02

What we collect

  • Registration details
    Name, email address, phone number, date of birth and country of residence.
  • Profile details
    City, address and postal code, if you add them to your profile.
  • Verification documents
    Proof of identity and proof of residence that you upload for account verification.
  • Account records
    Trading accounts, deposits, withdrawals, adjustments, orders and positions.
  • Sign-in information
    The time and IP address of your last login, and the browser used for each session.
  • Messages
    What you send to support, so that we can answer and keep a record of it.
[PLACEHOLDER - legal text to be approved by the client]
03

How we use it

  • Running your account
    Opening accounts, showing balances and statements, and executing your orders.
  • Verifying identity
    Checking the documents you upload before live trading and withdrawals are enabled.
  • Processing payments
    Reviewing and posting deposit and withdrawal requests.
  • Keeping accounts secure
    Limiting repeated login attempts and signing out other devices when a password changes.
  • Contacting you
    Service messages, and notifications by the channels you have switched on.
  • Meeting legal duties
    Record-keeping and checks that financial services rules require.
[PLACEHOLDER - legal text to be approved by the client]
04

Cookies

A cookie is a small file a website stores in your browser. This site sets two, both strictly necessary: without them you could not stay signed in. They are marked httpOnly, which means scripts running in the page cannot read them.

CookieWhat it doesLifetimeCategory
sp_atAccess token. Proves you are signed in on each request.About 15 minutesStrictly necessary · httpOnly
sp_rtRefresh token. Renews the access token so you stay signed in.About 7 daysStrictly necessary · httpOnly
No analytics or marketing cookies are set by the application today. Your choice in the cookie notice is kept in your browser's local storage (key xyz-cookie-consent), not in a cookie, and is never sent to us.

You can delete or block cookies in your browser settings. If you block these two, the public pages still work but you will not be able to log in.

[PLACEHOLDER - cookie policy wording to be approved by the client; update this table if analytics or marketing tools are added]
05

Sharing

Personal data is shared only where the service needs it or the law requires it. The kinds of recipient this typically involves are:

  • Payment providers
    To process a deposit or a withdrawal you have requested.
  • Infrastructure providers
    Hosting, file storage and email delivery that the platform runs on.
  • Authorities
    Regulators, courts or law enforcement, when there is a legal obligation.
  • Advisers and auditors
    Under confidentiality, where they need access to do their work.
[PLACEHOLDER - list of processors and recipients, and any transfers abroad, to be approved by the client]
06

Retention

Data is kept for as long as your account is open and, after that, for the period financial services rules require.

One thing is true by design: the record of money movements on an account and the log of back-office actions are append-only. Entries can be added but not edited or deleted, which is what makes your statement reliable.

[PLACEHOLDER - retention periods per data category, to be approved by the client]
07

Your rights

  • See and correct
    Your personal details are visible in your profile and most can be edited there.
  • Choose your notifications
    Email, SMS, push and phone-call notifications can each be switched off in Profile, under Settings.
  • Ask for a copy
    You can ask what personal data is held about you.
  • Ask for deletion
    You can ask for data to be erased, subject to the records the law obliges us to keep.
Open your profile
[PLACEHOLDER - rights available by jurisdiction and how requests are handled, to be approved by the client]
08

Contact

Questions about this page or about your data go to the support team, who will pass them to the person responsible for privacy.

[PLACEHOLDER - privacy contact email and postal address]

Ready when you are

Open a free demo with $10,000 virtual funds. No card required.