Privacy Policy
1. Introduction
Footprint‑Secrets is built with privacy and security in mind. We only process the minimum amount of data required to operate user accounts, validate licenses, and ensure the security of our systems. We do not collect trading data, chart information, broker details, or any market‑related activity from MetaTrader 5.
2. Data We Do Not Collect
Footprint‑Secrets does not collect or store:
- Trading data or order execution data
- Chart history, indicators, or market activity
- Broker information
- Personal trading behavior
- Analytics, tracking cookies, or marketing identifiers
3. Data We Collect
We only collect data required for account management, licensing, and security:
- Email address (account creation, login, support)
- Password hash (bcrypt)
- Activation tokens for account verification
- Session identifiers for login
- License keys and hashed hardware identifiers (HWID)
- IP addresses (stored only as salted hashes)
- Technical details voluntarily provided during support requests
4. Account Registration and Login
When creating an account, we store your email address, a bcrypt‑hashed password, and an activation token. During login, a session cookie is created to maintain your authenticated state. This cookie contains no personal data and is required for the service to function.
5. Licensing and HWID Verification
To validate your license, Footprint‑Secrets may process a hashed hardware identifier (HWID). This value is generated locally on your device and transmitted securely to our licensing API. HWIDs are stored only in hashed form and are used exclusively for license validation and fraud prevention.
6. API and Security Logging
For security, stability, and abuse prevention, our servers log certain technical information. All IP addresses are stored only as salted SHA‑256 hashes.
Logged data includes:
- Hashed IP address
- Request path and HTTP method
- User‑Agent string
- Referrer (if provided)
- Timestamp
- Country code (determined via local GeoIP database)
- Security events (e.g., invalid license attempts, rate limits)
No tracking, analytics, or third‑party logging services are used. GeoIP lookups are performed locally without sending data to external providers.
7. Payments via Stripe
Payments are processed exclusively by Stripe Payments Europe Ltd. We do not store or process credit card information on our servers. Stripe may store payment‑related data such as your email address, payment method, and billing details according to its own privacy policy.
Data shared with Stripe includes:
- Email address
- Selected plan
- Stripe customer ID
- Payment method information (handled by Stripe)
- Metadata required for subscription management
8. MQL5 Purchases
Purchases made through the MQL5 Market are handled entirely by MetaQuotes. Licensing, payment processing, and activation follow the MQL5 privacy policy. No payment data from MQL5 is stored on our servers.
9. How We Use Your Data
Your data is used only for:
- Account creation and authentication
- License activation and validation
- Fraud prevention and security
- Support communication
- Processing payments via Stripe
We do not sell, rent, or share your data with third parties for advertising or analytics.
10. Legal Basis (GDPR)
We process personal data based on:
- Art. 6(1)(b) GDPR – Contract performance (accounts, licensing, payments)
- Art. 6(1)(f) GDPR – Legitimate interest (security, fraud prevention, system stability)
11. Data Storage and Retention
- Account data: stored until deletion
- License data: stored as long as the license is active
- Security logs: 30–90 days
- Stripe payment data: according to legal retention periods (6–10 years)
12. Data Security
All data is stored on servers hosted by Hetzner Online GmbH in Germany. We use industry‑standard security measures including encryption, hashing, access controls, rate‑limiting, and intrusion protection.
13. Your Rights (GDPR)
You have the right to:
- Access your stored data
- Request correction or deletion
- Request restriction of processing
- Object to processing based on legitimate interest
Requests can be made via info@footprint-secrets.com.
14. Contact
For all privacy‑related questions, please contact:
info@footprint-secrets.com