Privacy Policy

1. Information you provide

When you create a TBT account, TBT stores your username, optional email address, a one-way password hash, account timestamps and your user-specific watchlist and preferences. TBT does not store your TBT password in plain text.

When you connect Alice Blue, TBT receives an authorization code, Alice Blue user identifier and broker session from Alice Blue. The authorization code is exchanged on the server, the broker session is held only in server memory for the connection period, and the browser receives only an opaque TBT session cookie. TBT never places the Alice Blue broker session in browser storage or browser-visible API responses.

When you run a backtest, you provide instrument or contract selections, dates, timeframe, capital and strategy settings. The application uses these values to perform the requested calculation. TBT does not permanently attach these backtest inputs to your user profile.

When you use the Feedback form, TBT collects the selected complaint or suggestion type, your optional name and email address, your required message, the submission time and the page URL. These details are collected only to respond to feedback and improve the service. Do not include passwords, broker tokens, API secrets, OTPs or raw market-data responses.

If you email us, we receive the information included in your message, such as your email address, name, screenshots and issue details.

2. Information collected automatically

Like most internet services, the hosting and network providers may process technical information such as IP address, browser type, device type, request time, requested URL and error logs. TBT also uses the requesting IP address temporarily in server memory to limit excessive login, backtest and feedback requests and protect service availability.

If you accept analytics cookies, TBT uses Google Analytics 4 to collect anonymous website usage information such as page visits, general device and browser information, timeframe, whether a stock backtest was started, completed or failed, and whether feedback was submitted. Analytics event URLs are reduced to the page path and exclude query strings.

3. How information is used

• To create and authenticate your account and keep your watchlist separate from other users.
• To provide instrument search, historical calculations and backtest results.
• To operate, secure, troubleshoot and improve the website.
• To prevent abuse, automated extraction and excessive requests.
• To respond to complaints, suggestions, support, privacy and grievance messages.
• To use suggestions and complaint themes to improve the service.
• With your consent, to understand anonymous page visits and general backtest usage so TBT can improve its website and reliability.
• To comply with lawful requests and applicable obligations.

4. Historical market data

TBT maintains a private market-data database for its scanner and research tools and may fetch additional candles for a requested backtest. It does not offer raw OHLCV candles for public download. The watchlist displays only the latest available stored price, change and volume; when unavailable, it displays N/A. Combined performance metrics and the aggregate equity curve are returned to your browser. For a built-in strategy backtest, TBT also returns the strategy's derived trade executions without returning the underlying candles.

5. Cookies and browser storage

TBT uses a signed, HttpOnly, same-site session cookie for your TBT login and an opaque connection identifier while Alice Blue is connected. In production the cookie is sent only over HTTPS. The actual Alice Blue broker session remains in server memory and is removed when you disconnect or the server-side session expires. Your selected Light or Dark Mode, saved stock strategy-builder settings and analytics-consent choice may be stored in browser local storage so they remain available on that device.

Google Analytics remains disabled and its tag is not requested until you choose Accept analytics. If you accept, Google Analytics may use cookies or similar browser technology to measure page visits and permitted usage events. You may withdraw or grant consent at any time by selecting Cookie preferences in the website footer. Declining analytics does not prevent you from using the backtester.

TBT does not send Google Analytics a stock symbol, OHLCV data, entry or exit prices, strategy conditions, exact date ranges, feedback contents, name, email, API tokens, broker information or other information entered into the forms. Advertising storage, Google Signals and ad personalization remain disabled.

6. Service providers

TBT uses Alice Blue for broker authentication, contract metadata and historical market information, and third-party services to host the website and deliver domain and HTTPS functionality. After analytics consent, Google Analytics acts as an analytics service provider for the limited usage information described above. These providers may process technical data under their own terms and privacy policies. TBT does not sell personal information to advertisers.

7. Retention

Your account record, password hash, preferences and watchlist remain until the account or associated data is deleted. Market-history retention follows TBT's operational data policy. Alice Blue broker sessions and rate-limiting identifiers remain temporarily in process memory until disconnect, expiry or a server restart. Complaint and suggestion submissions are kept only as long as reasonably needed to respond, improve the service, maintain appropriate records or meet applicable obligations. Consent choices remain in browser local storage until changed or cleared.

8. Security

TBT uses password hashing, signed sessions, HTTPS, CSRF protection for account changes, request limits, parameterized database queries and browser-security headers. No internet service can guarantee absolute security. Never send passwords, broker PINs, broker tokens, OTPs, API secrets, market-data API responses or payment-card details through feedback or email.

9. Your choices and requests

You may change your analytics choice at any time through Cookie preferences in the footer. You may also contact us to ask what personal information you directly provided through feedback or email, request correction or deletion where applicable, withdraw a previous request, or raise a privacy concern. We may need reasonable information to verify and process the request. Some information may be retained when required for security, legal claims or lawful obligations.

10. Children

TBT is intended for adults and is not designed for children. Do not submit personal information for a child through the website or support email.

11. Changes to this policy

This policy may be updated as the website or its analytics, account, advertising, payment or other services change. Material changes will be reflected by updating the date at the top of this page.

12. Privacy and grievance contact

Email tbttestbeforetrade@gmail.com with the subject “TBT Privacy Request” or “TBT Grievance”.