
Privacy & Cookies Policy
Information about data processed by Sigma Core, including Dziennik Tradera, newsletter, free tools, AI features and security mechanisms.
1. Data controller
The data controller is Sigma Core / Jeżyk Technologies.
Privacy contact: hskmateusz@gmail.com.
2. Dziennik Tradera — account and profile
Dziennik Tradera has a separate free account system. During registration we process the email address, a secure password hash, account creation time, active-day/sign-in dates and technical information required to protect sessions and limits. You may voluntarily add a nickname, first name, surname, bio and avatar, and optionally attach before/after screenshots to trades. First name, surname and email are not published by the shared-profile page. Images intended for public display have a moderation status and are not shown through a public link until approved. Images are subject to file-size, format, resolution and total-account storage limits; current quota usage is displayed to the user.
We do not use avatars for biometric identification. Do not place sensitive information in the profile that is unnecessary for using the tool.
3. Dziennik Tradera data
The account may store starting capital, capital deposits and withdrawals, currency, risk percentage, selected markets, Entry, SL, TP, trade outcome, result in R, strategies and their rules, sessions, timeframes, setups, notes, emotions, experiments, statistics, ALGO results, sharing settings and AI review history. Deposits and withdrawals are used to determine available capital but are separated from trading performance. These data are used only for journal functions, statistics, analysis of the user’s own process and features explicitly activated by the user.
TP/SL outcome is currently marked by the user. The Journal does not automatically verify price paths for all markets. Strategy Ghost stores the frozen trade plan and the user-confirmed outcome that the original plan would have achieved; these data are used to build trade-management comparisons and statistics.
At the user’s request, the server may generate a binary PDF report for a selected period. The document is created in memory from account data and sent as a download; the Journal does not need to retain an additional copy of the generated report. After download, the user decides where the file is stored and with whom it is shared.
4. AI Scientist
Running an AI review is voluntary. The shared AI Scientist queue receives a limited data package needed for the review: statistics, process parameters, recent trades, strategies and rules, and the user’s question. The package does not contain email address, first name, surname, nickname or avatar. Free-text fields such as strategy rules or the question may still contain information entered by the user, so personal data should not be entered there unless necessary for the review.
The AI review result is saved to the Journal account. After a successful review, the private snapshot, question, prompt and access token are removed from the completed queue record; the report and audit metrics remain in the account history. A queued or failed request may temporarily retain data required to retry the review. Infrastructure and AI model providers may process the supplied data only to the extent necessary to perform the requested feature.
5. Profile sharing
Journal profiles are private by default. When sharing is enabled, identifying account data such as first name, surname and email remain hidden; nickname, bio and avatar are also disabled in the shared view by default. You may enable a public link or a separately password-protected link and choose whether to additionally show nickname and bio, avatar, capital, trades, strategies, AI reviews and notes. Visibility settings can be changed, the sharing password can be replaced and the sharing link can be regenerated, which invalidates the previous address.
6. Newsletter
Newsletter subscription is voluntary and is not a condition for creating or using a Journal account. The newsletter checkbox is a separate user choice. We process the email address and information about the date, source and consent version. You may unsubscribe at any time using the unsubscribe link or by contacting the controller.
7. Other free tools and technical data
- a one-way IP hash may be used to protect forms, limits, voting, concurrent-operation locks and anti-spam mechanisms;
- the free XAUUSD analyzer may process direction, timeframe, Entry, SL, TP and QUICK/DEEP output;
- the Partner gate may store the confirmation day, selected partner, click time and a technical audit of the verified redirect confirmation in the session;
- technical session data are used for sign-in, CSRF protection and panel operation.
7A. Administrative access and audit
An authorised Sigma Core technical administrator may access a private Journal when needed for user support, diagnostics, security, abuse prevention, content moderation or data operations. Opening the full Journal card from the admin panel is recorded in the audit log with the administrator identifier, account identifier and operation time. The administrator does not receive the account password or the sharing password in plain text.
7B. Backups
The system may create technical backups of Journal data, including account data, profiles, trades, strategies, sharing settings and images. Backups include a SHA-256 manifest and may undergo an isolated restore test. Deleting an account removes its data from the active Journal, but an earlier backup may still contain the prior state until that backup is rotated or deleted according to technical backup retention. Backup access is limited to security, recovery and diagnostic purposes.
8. Purposes and legal grounds
We process data to the extent necessary to provide features requested by the user, maintain the account and journal records, secure the service, prevent abuse, handle requests and where necessary establish or defend claims. The voluntary newsletter and voluntary publication of profile elements depend on the user’s choice, which can be withdrawn by disabling the feature, changing settings or unsubscribing from the newsletter.
9. Retention and deletion
Journal account data and saved content are retained while the account is maintained. The user can download a data export and initiate account deletion from the profile. Deleting the account removes the private Journal profile, saved trades, strategies, experiments, AI reviews, pending Journal AI queue jobs, avatar, trade screenshots and active sharing link. Limited technical logs may be retained longer when necessary for security, diagnostics or defence of claims. Newsletter data are retained until consent is withdrawn or the service ends.
10. Data recipients
Data may be processed by the hosting provider, email provider and — when the AI feature is voluntarily activated — AI infrastructure and model providers, only to the extent needed to operate the service. Clicking a partner link leads to an external service operating under its own privacy rules. We do not sell user data.
11. Your rights
Depending on the legal ground and circumstances of processing, you may exercise rights concerning access, rectification, erasure, restriction, portability and objection. Consent can be withdrawn for future processing. The Journal provides direct profile editing, data export and account deletion, and the newsletter provides an unsubscribe mechanism. You may also lodge a complaint with the competent supervisory authority.
12. Cookies, browser storage and security
We do not use advertising or profiling cookies in the described features. The service uses a technical PHP session cookie for sign-in and form protection, while selected interface preferences may be stored locally in the browser. Measures include password hashing, CSRF protection, request limits, write locks, private data directories, random sharing tokens, the ability to invalidate other account sessions and HTTPS at the hosting layer. No system can guarantee zero risk.
13. Policy changes
This document may be updated as Sigma Core develops. The current version number is shown at the top of the page. Material changes to how data are processed should be communicated to users appropriately.