Privacy policy
Last updated 4 November 2026
CarbonCharts is a charting and strategy-testing workspace. This page explains what we keep about you, why, who else is involved, how long it stays, and how to have it deleted. We don't sell your data, we don't show ads, and the site has no third-party analytics or tracking scripts.
Who we are
CarbonCharts (“we”, “us”) decides how your data is used and is responsible for it. For anything about your data, write to hello@carboncharts.com.
What we keep, and why
| What | Why |
|---|---|
| Your account: username, email address, your password (stored only in a scrambled, one-way form, never as typed), when you signed up and were last active, whether your account is approved and your email confirmed, and your referral code and who referred you | To run your account, sign you in, send confirmation, password-reset and approval emails, and credit referrals |
| Sign-up and sign-in details: when you signed up and last signed in, the network (IP) address and browser description (user agent) each came from, your browser's languages and time zone, and the page you came from | To protect the site against fake and abusive accounts and to help with account problems; kept while your account exists |
| Your workspace: layouts, charts, indicators and their settings, drawings, watchlists, saved strategies, paper-trading account, preferences | So your workspace is there on every device you sign in on |
| Alerts: your alerts and a list of up to 200 recent firings, and whether each email went | To check your alerts on our server and notify you |
| Chart images you make with the camera button (up to 300) | To give each one a link you can share (see What others can see) |
| Chat: messages you write in the General room (the newest 500 in the room are kept) and your direct messages (the newest 300 of each conversation), blocks and reports | To run the chat. We can read direct messages and reported messages to deal with reports and abuse |
| Indicator scripts you write in the Indicator editor, and versions you submit for review | To save your work and, if you submit a script, to review and publish it |
| Feedback you send with the Feedback button, with the chart's symbol and timeframe, your layout, the app version, your browser and screen size | To read and answer it (it's emailed to us with your address as the reply-to) |
| Notification devices: the push address your browser gives when you turn on Notify this device, and a label such as “Windows” | To send your alerts to that device |
| Usage counts: per account, the number of visits, requests and the amount of data our server sent you, by day | To run and size the service and spot abuse |
| Invite-link visits: when someone opens your invite link, a scrambled (keyed-hash) form of their network address and of a random visitor cookie, and which link-preview service fetched the link | To count how many different people opened your link, without keeping their actual address |
Our hosting provider also keeps short-lived server logs, which include network addresses, for security and troubleshooting.
Where market data comes from
Crypto prices, funding rates and other crypto market data are downloaded by your own browser straight from the exchanges and data providers (such as Binance, Coinbase, Kraken, OKX, Bybit, Deribit, Gate.io, alternative.me, DefiLlama and Polymarket), and cached in your browser. Stocks, ETFs, forex and commodities come from our market data provider (Twelve Data) through our server: your browser asks our server, never the provider, so the provider doesn't see you. Those providers see your network address as with any website you visit, and their own privacy policies apply. When an indicator is calculated on our server, your browser sends it the candles it needs; we keep them in memory for live updates and don't store them in our database.
What others can see
- Your username is shown with your chat messages, to the people you message, and as the author of scripts you publish.
- Chart images can be opened by anyone who has the link, without signing in, the way a shared link works anywhere. The links are long and random, and we ask search engines not to index them. Delete an image (in the camera window, under Your chart images) to make its link stop working; a copy may stay in someone's browser cache for up to a day.
- Chat: messages in General are seen by everyone signed in; direct messages by the other person (and by us when dealing with a report or abuse).
- Published scripts are listed for others with your username, description and support email, if you give one.
Cookies and browser storage
| Name | What it's for | How long |
|---|---|---|
sh_session | Keeps you signed in | 30 days, or until you sign out |
sh_dev | Remembers that this browser has signed in to your account, so someone typing wrong passwords can't lock you out of it | 1 year |
sh_v | A random id set when an invite link is opened, so one person counts once | 1 year |
The app also keeps your preferences, cached prices and an invite code you arrived with in your browser's own storage (local storage and IndexedDB). These stay on your device. We use no advertising or analytics cookies.
Services we use
We use a small number of service providers, each only to provide its service to us:
- website and server hosting, and our database;
- email delivery, for password resets, approvals and alert emails;
- a market data provider, for stock, ETF, forex and commodity prices, and private storage for the price history we've downloaded (no personal data);
- private storage for backup copies of the database (kept 7 days);
- the push services of the browser makers (Google, Mozilla, Apple, Microsoft), which deliver notifications to devices where you turned them on.
Some of them are in other countries, including the United States. Ask us at hello@carboncharts.com if you'd like to know which providers we use.
How long we keep it
- Your account, workspace, alerts, scripts, chart images and notification devices: until you delete them or your account.
- Chat: the newest 500 General messages and 300 messages per direct conversation; older ones are removed as new ones arrive. You can delete your own messages at any time.
- Alert history: the newest 200 firings. You can clear it in the Alerts tab.
- Usage counts by day: 90 days. Password-reset links: 1 hour.
- Backups: up to 7 days, plus our database provider's restore points (up to 10 days). Deleted data leaves the backups when they expire.
Deleting your account and your rights
To delete your account, email hello@carboncharts.com from the address you signed up with. We delete your account and workspace, alerts, drafts and submitted scripts, chart images, chat messages and direct messages, notification devices and usage counts, normally within 7 days. If you've published a script others use, tell us whether to remove it too.
You can also ask us for a copy of your data, to correct it, or to stop using it for a purpose, and, depending on where you live, you may have further rights under data-protection law, including complaining to your local data-protection authority. Write to hello@carboncharts.com and we'll answer within 30 days.
Security
The site is served over HTTPS only. Passwords are stored in a one-way scrambled form and sign-in attempts are rate-limited. No system is perfectly secure: if we learn of a breach that affects you, we'll tell you.
Children
CarbonCharts is for people aged 18 and over. We don't knowingly keep data about anyone younger; if you think we have, write to hello@carboncharts.com.
Changes
If we change this policy in a way that matters, we'll update the date above and tell signed-in users in the app or by email before the change applies.