Last updated: August 2, 2026
This Privacy Policy describes how KVA di Andreas Zanin, P.IVA 01199720077, REA AL-266378, Italy ("we", "us", or "our"), the operator of Prop Trading Stat (proptradingstat.com), collects, uses, and protects your personal data when you use our website, web application, and mobile applications (iOS and Android) (collectively, "the Service").
Prop Trading Stat is a global service used by traders worldwide. This policy applies to all users regardless of their country of residence. Where applicable, we comply with:
KVA di Andreas Zanin
P.IVA: 01199720077 — REA: AL-266378
Country of establishment: Italy
Email: [email protected]
For the purposes of the GDPR, we act as the data controller for personal data you provide when using the service.
When you create an account we collect:
Legal basis (GDPR/UK GDPR): Art. 6(1)(b) — performance of the contract.
For US users: this data is collected as necessary to provide the service you signed up for.
All income/expense records, prop firm names, notes, goals, badges, and related data you enter are stored in our database solely to provide the service to you. We do not sell, license, or share this data with any third party for commercial purposes.
Legal basis: Art. 6(1)(b) GDPR — performance of the contract.
Pro subscriptions are processed by Stripe, Inc. Stripe collects and processes your payment card details directly on our behalf. We never see, store, or transmit full card numbers. We receive from Stripe only:
Stripe is certified PCI DSS Level 1 — the highest level of payment security certification. Stripe's processing is governed by Stripe's Privacy Policy.
Pro subscriptions purchased inside the mobile apps are processed as in-app purchases by Apple (App Store) or Google (Google Play). In that case the store handles your payment details under its own privacy policy, and we receive only the data needed to activate and manage your subscription: transaction/original transaction identifiers, product ID, subscription status, and renewal/expiry notifications from the store's servers. We never receive your card details from Apple or Google.
Legal basis: Art. 6(1)(b) GDPR — performance of the contract.
We may send you the following emails:
Legal basis for transactional email: Art. 6(1)(b) GDPR (contract performance).
Legal basis for marketing email: Art. 6(1)(a) GDPR (consent) and, for existing customers in the EEA, Art. 130 Italian Privacy Code (soft opt-in).
If you enable your public profile (Pro feature), your chosen display name and aggregate performance statistics will be publicly accessible via a unique URL you configure. You can disable this at any time from Settings. You have full control over what is displayed.
If you use the iOS or Android app and grant notification permissions, we collect and store a Firebase Cloud Messaging (FCM) device token — a unique identifier assigned to your device by Google Firebase. This token is used solely to deliver push notifications to your device (e.g. alerts, badge unlocks, reminders). It is associated with your account and deleted when you delete your account or revoke notification permissions in your device settings.
The FCM token may be refreshed periodically by Firebase. We store only the current active token. We do not use it for profiling, advertising, or any purpose other than delivering the notifications you have opted into.
Legal basis: Art. 6(1)(b) GDPR — performance of the contract; and Art. 6(1)(a) — your consent granted via device notification permission prompt.
If you consent via our cookie banner (where legally required), we collect anonymised website usage data through Google Analytics 4 and use the Meta Pixel (Facebook Pixel) and Reddit Pixel to measure the effectiveness of our advertising and to show relevant ads on Facebook/Instagram and Reddit to people who have visited our website. None of these tools identifies you personally by name. See our Cookie Policy for full details.
Legal basis: Art. 6(1)(a) GDPR — your explicit consent.
If you consent via our cookie banner, a SimpleChat (getsimplechat.com) AI-powered support chat widget is loaded on public pages of the site (landing, FAQ, pricing, contacts, login, registration, legal pages). When you interact with the chat:
Legal basis: Art. 6(1)(a) GDPR — your explicit consent.
Our servers may automatically log your IP address, browser/app type, device operating system, and request timestamps for security and rate-limiting purposes. This data is not used for profiling and is retained for a maximum of 30 days.
Legal basis: Art. 6(1)(f) GDPR — legitimate interest in security and fraud prevention.
| Service | Provider | Purpose | Transfer safeguard |
|---|---|---|---|
| Firebase Authentication | Google LLC (USA) | Secure login and JWT token management | EU Standard Contractual Clauses |
| Stripe | Stripe, Inc. (USA) | Payment processing and subscription billing | EU SCCs / PCI DSS L1 |
| Google Analytics 4 | Google LLC (USA) | Website analytics (consent-based) | EU Standard Contractual Clauses |
| Meta Pixel (Facebook Pixel) | Meta Platforms, Inc. (USA) | Advertising measurement and retargeting (consent-based) | EU Standard Contractual Clauses |
| Reddit Pixel | Reddit, Inc. (USA) | Advertising measurement, conversion tracking, and retargeting (consent-based) | EU Standard Contractual Clauses |
| SimpleChat (AI support chat) | SimpleChat (getsimplechat.com) | AI-powered support chat widget on public pages (consent-based) | — |
| Google Fonts | Google LLC (USA) | Typography on public profile pages | EU Standard Contractual Clauses |
| SMTP2GO | SMTP2GO Pty Ltd (AU) | Transactional and marketing email delivery | Standard contractual safeguards |
| Firebase Cloud Messaging (FCM) | Google LLC (USA) | Push notification delivery to iOS and Android devices | EU Standard Contractual Clauses |
| Apple App Store / Google Play Store | Apple Inc. / Google LLC (USA) | Mobile app distribution and in-app purchase processing (see §2.3); app store purchases are governed by their respective store policies | EU Standard Contractual Clauses |
We do not sell your personal data to any third party. We use the Meta Pixel and Reddit Pixel solely to measure ad performance and show relevant ads to website visitors who have given consent — we do not share your trading records or account data with Meta or Reddit. The conversion event sent on a successful Pro subscription contains only the plan price and currency, not personal identifiers.
Depending on your country of residence, you may have the following rights:
California residents have the right to:
To submit a CCPA request, contact: [email protected]. We will respond within 45 days.
Regardless of your country of residence, you may at any time:
We will respond to all privacy requests within 30 days.
We implement appropriate technical and organisational measures including HTTPS encryption for all data in transit, Firebase JWT authentication on every API request, rate limiting and brute-force protection, strict access controls, and regular security reviews. No system is completely immune to security incidents; in the event of a breach that affects your rights, we will notify you in accordance with applicable law.
Our service is not directed at persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, contact us immediately and we will delete it promptly.
We may update this policy from time to time. We will notify you of material changes by email and/or by a prominent notice on the website at least 15 days before the changes take effect. The "Last updated" date at the top of this page always reflects the current version. Continued use of the service after the effective date constitutes acceptance of the updated policy.
KVA di Andreas Zanin
P.IVA: 01199720077 — REA: AL-266378
Italy
Email: [email protected]
Website: proptradingstat.com