Closed beta. The Service is offered free of charge to invited testers while we test it. It may change, be interrupted or be reset, and no payment is taken during the beta. The paid-plan and billing sections below describe the planned launch terms.
Privacy Policy
Last updated October 20, 2026
This policy explains what personal data Replay the Chart collects, why, and what you can do about it. The controller is İsmet Gürkan, contact support@replaythechart.com.
1. What we collect
- Account: your e-mail address and a salted hash of your password (we cannot read your password), plan, sign-up date, whether your e-mail is confirmed.
- Profile answers: the optional questions at sign-up (goal, experience, market, style, time) used to set up your first session.
- Your work: sessions, virtual trades, journal notes, drawings, settings and shared chart images you create. These are stored on our server so they follow you across devices.
- Payments: handled by our payment provider. We receive a customer reference, the plan and subscription status. We never receive your card number.
- Waiting list and feedback: if you join the waiting list or send feedback we store your e-mail, your answers (for example about prices and which features you use) and what you write, to decide how to build and price the product. You can ask us to delete them at any time.
- Technical data: your IP address and basic request logs, used for security (for example rate limiting login attempts and e-mail codes) and to keep the Service running.
- Cookies: one essential, HttpOnly session cookie that keeps you logged in, and local storage in your browser for preferences and cached work. We do not use advertising or cross-site tracking cookies.
2. Why we use it (legal bases)
- To provide the Service and your account, and to bill you: performance of the contract.
- To keep the Service secure, prevent abuse and fix problems: our legitimate interest.
- To send the verification and password-reset codes and service notices: contract and legitimate interest. We do not send marketing e-mail unless you ask for it.
- To meet tax and accounting rules for payments: legal obligation.
3. Who receives it
- Our payment provider (payments) and our e-mail delivery provider Brevo (codes and notices).
- Our hosting provider Contabo (servers in the European Union), where the data is stored.
- Authorities, where the law requires it. We do not sell your data.
Some of these providers are located outside your country, including outside the EU/EEA and Türkiye. Where required we rely on standard contractual clauses or equivalent safeguards.
4. How long we keep it
Account data and your work are kept while your account exists. Payment records are kept as long as tax law requires. Verification and reset codes expire in 15 minutes and are stored only as hashes. When you delete your account we delete your account, profile and saved work, except records we must keep by law.
5. Your rights
Depending on where you live (for example under the GDPR or Türkiye's KVKK) you can ask us to give you a copy of your data, correct it, delete it, restrict or object to its use, or move it elsewhere, and you can complain to your data protection authority. Write to support@replaythechart.com; we answer within 30 days. You can cancel a subscription yourself at any time in the billing portal.
6. Security
Passwords are stored with scrypt, session tokens are stored only as hashes, traffic uses HTTPS, and login and code attempts are rate limited. No system is perfectly secure; if a breach affects you we will tell you as the law requires.
7. Children
The Service is for people aged 18 and over. If you believe a child has an account, write to us and we will delete it.
8. Changes
If we change this policy in a material way we will tell you by e-mail or in the app before it applies.