Privacy Policy

Last updated: April 16, 2026

1. Overview

DriveByNumbers ("DBN", "we", "us") respects your privacy. This policy explains what information we collect, how we use it, and your rights regarding your data.

2. Information We Collect

Account information: When you create an account, we collect your name and email address. Passwords are hashed using PBKDF2-SHA256 and never stored in plain text.

Payment information: Payment processing is handled entirely by Stripe. We do not store credit card numbers, bank account details, or other sensitive financial information on our servers. We receive only a Stripe customer ID and subscription status.

Usage data: We collect basic activity logs (page visits, feature usage timestamps) to improve the platform. This data is associated with your account for personalisation purposes.

Trading data: Trade logs, journal entries, strategy configurations, and simulation data you create are stored locally in your browser (localStorage) and are not transmitted to our servers unless you explicitly use a sync or export feature.

3. How We Use Your Information

We use collected information to:

• Provide and maintain your account and subscription
• Send transactional emails (verification, password reset, billing notifications)
• Improve platform features based on aggregate usage patterns
• Prevent fraud and enforce our Terms of Service

4. What We Don't Do

• We do not sell your personal information to third parties
• We do not share your data with advertisers
• We do not use your trading data for any purpose other than providing the service to you
• We do not send marketing emails without your explicit consent

5. Third-Party Services

We use the following third-party services:

• Cloudflare: Hosting, CDN, and edge computing. Subject to Cloudflare's Privacy Policy.
• Stripe: Payment processing. Subject to Stripe's Privacy Policy.
• Resend: Transactional email delivery. Subject to Resend's Privacy Policy.

6. Data Storage and Security

Account data is stored in Cloudflare D1 (edge SQLite database) with encryption at rest. Authentication uses JWT tokens with short expiry (1 hour) and rotating refresh tokens. All connections are encrypted via TLS/HTTPS.

7. Local Storage

Most platform data (trades, journal entries, strategies, settings) is stored in your browser's localStorage. This data never leaves your device unless you explicitly export it. Clearing your browser data will remove this information permanently.

8. Cookies

We use essential cookies only:

• dbn-access-token: Authentication session (1 hour expiry)
• dbn-refresh-token: Session renewal (30 day expiry)

We do not use tracking cookies, analytics cookies, or advertising cookies.

9. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your account and associated data
• Export: Export your trading data via the platform's CSV export features
• Withdraw consent: Unsubscribe from non-essential communications at any time

10. Data Retention

We retain account data for as long as your account is active. Upon account deletion, personal data is removed within 30 days. Anonymised, aggregate usage statistics may be retained indefinitely for platform improvement.

11. Children's Privacy

DBN is not intended for use by individuals under 18 years of age. We do not knowingly collect information from minors. If we become aware that we have collected data from a minor, we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or platform notification. The "last updated" date at the top of this page reflects the most recent revision.

13. Contact

For privacy-related questions or to exercise your rights, contact us at adrian.djents@gmail.com.