H HARAZISDT

Privacy Policy

HARAZI SDT ("the service", "we", "us") is a private, invite-only trading-research tool, independently built and operated by Osamah Al-Harazi — the sole operator and data controller. This policy explains exactly what we store, why, and the control you have over it. The short version: we keep only what the service needs to run, and we never sell, rent, or share your data with anyone.

1. What we collect

• Account data — your email address and a securely hashed password. We never store your password in plain text and can never read it.
• Usage data — your saved chart drawings, indicator configurations, watchlists, and chart settings, so they follow you across your devices.
• Operational logs — login timestamps and IP address (for security auditing) and uncaught browser errors (to fix bugs). These are kept only as long as needed for security and diagnostics.

2. What we do NOT collect or do

• We do not collect financial account numbers, API keys, card details, or any brokerage credentials. The service never connects to your exchange or trading account.
• We do not sell, rent, trade, or share your data with advertisers, data brokers, or any third party — ever. There is no business built on your data.
• We do not run third-party analytics, advertising, or tracking of any kind.

3. Cookies

We use a single, strictly-necessary session cookie to keep you logged in. It is HttpOnly, Secure, and SameSite=Lax. We use no advertising, analytics, or tracking cookies — there is nothing to monetise and nothing to "accept" or "reject". Because the only cookie is essential to signing you in, no cookie-consent banner is required or shown.

4. Where your data lives

Your account data is stored on our own private server and is never handed to a third party. Market data is fetched from public exchange APIs (Binance, Bybit, OKX, Coinbase, Bitget, KuCoin, Hyperliquid, Kraken, and MEXC) and from FXCM for FX and metals — these receive only the symbol being charted, never anything about you.

5. Your rights

You can export a copy of all data tied to your account at any time from Account → Privacy & data, and you can permanently delete your account and everything attached to it from the same place. Deletion is immediate and irreversible.

6. Security

All traffic is encrypted with HTTPS and passwords are hashed. Sessions are protected against cross-site request forgery and hijacking, and your data is reachable only behind your login. No system is perfectly secure, but we apply current best practices and patch promptly.

7. Who runs this & contact

HARAZI SDT is independently owned and operated by Osamah Al-Harazi. Questions about this policy or your data — or a request to export or delete it — reach the desk on Discord.