intrail · version 2026-08-14

Privacy

What intrail holds about you, who can see it, and how to get it removed.

1. What we hold

Your account: an email address, a password (stored only as a hash, never in a form anyone can read), and — if you sign in with Google — the name and profile picture Google returns. Optionally a handle, a short bio and a country, all of which you choose to add.

Your journal:the trades you log — instrument, direction, entry, stop, target, size, times, the outcome, and anything you wrote about them, including how you were feeling. Days you marked as “no setup”, and any holdings you record.

Your activity here: posts, comments, kudos, who you follow, the circles you are in, who you have blocked, and reports you have filed.

Nothing else.No advertising identifiers, no third-party analytics, no location, no contacts, no device fingerprinting. Your session is held in your own browser's storage rather than in a tracking cookie.

2. Why we hold it

To run the product you signed up for: to keep your journal, compute your record, check a claimed trade against public market data, show your posts to the audience you chose, and let moderation work. That is the whole purpose, and none of this data is sold or rented to anyone.

3. Who can see it

Your record is private by default. Nobody — not another member, not a search engine — can read it until you choose to publish it or share the link.

If you do publish it, the record is public in full and can be read by anyone, including people who are not signed in, and indexed by search engines unless you choose link-only sharing. A post scoped to a circle is readable by that circle's members.

Your email address is never shown to another member.

4. Who else is involved

Google, if you use it to sign in — it tells us your email, name and picture, and we tell it nothing about your trading.

Public market-data sources(Binance's public price feed for crypto, Yahoo Finance for Indonesian equities). We ask them for prices at particular times. We do not send them your identity, and they are not told which account a query is for.

Our hosting and database provider, which stores the data on our behalf and may access it only to keep the service running.

5. Your rights

Under Indonesia's Personal Data Protection Law (UU 27/2022) — and the GDPR, if it applies to you — you can ask to see the data we hold about you, correct it, have it erased, or receive a copy in a portable form. Deleting your account (clause 6) is the erasure right exercised directly, without asking anyone.

For anything else, write to support@intrail.app. You also have the right to complain to your data protection authority.

6. Deleting your account, exactly

Settings → Delete account. It closes at once: your profile stops resolving, your posts leave the feed, your session ends. For 30 days signing back in undoes it. After that the erasure runs and cannot be reversed.

Erased outright:your journal — every trade, note, cash day, holding and badge — along with your posts, your comments, your kudos, your follows and your blocks. Your name, email, password, Google link, avatar, bio and country are removed from your account row, which is emptied rather than dropped so that other people's conversations and counts do not break around it.

Kept, without you attached to it: reports you filed keep standing with your identity removed. A moderation history that the reported party can erase is one nobody can rely on. Reports filed about your account are also kept — they record a decision that was made, not information about you as a reporter.

Kept as it is: your handle, which is retired and never given to anyone else, so that links already shared do not start pointing at a different person. It resolves to nothing from then on.

Circles you ownedpass to their longest-standing member, or are deleted if you were the only one in them. A circle is other people's room, and your leaving is not a reason to close it.

7. How long we keep things

Your journal and your account for as long as the account exists, plus the 30-day window above. Server logs are short-lived operational records and are not used to build a profile of you. Reports are kept as long as they are useful as a moderation record.

8. Children

Intrail is not for anyone under 17. We do not knowingly hold data about children; if you believe we do, write to us and it will be removed.

9. Changes

This notice carries a version. If what we do with your data changes materially, we will say so in the app before it takes effect.