Template: review with legal counsel before relying on this. This document is a good-faith starting point describing what the product does today. It is not legal advice and has not been reviewed by a lawyer.

Privacy & Cookie Policy

Last updated: 2026-06-23

Who we are

Swing Surfer is a trading-strategy research and automation product. This policy explains what data we collect, why, and the choices you have. If you have any questions or want to exercise your rights, contact us at hello@joancarreras.com.

Data we collect

Analytics. We use Google Analytics 4, loaded through Google Tag Manager (container GTM-PZGBD6LW), to understand pageviews and how the site and app are used. Analytics cookies are set only after you consent via the cookie banner. Until you accept, analytics storage stays disabled and no analytics cookies are written.
Waitlist. If you join the waiting list, we store the email address you provide, along with your browser's user-agent string (for basic abuse prevention), in our Supabase database so we can contact you about access.
Account & app data. If you use the app, we store your email address and handle authentication through Supabase. As you use the product we also store the data you create or that the app needs to function: your strategy templates and backtest configurations; live-trading records (portfolios, positions, and orders) when you run live strategies; and, if you connect a brokerage (for example Interactive Brokers or Binance), the API credentials and connection settings you provide, which we store encrypted.

Cookies

We distinguish between two kinds of storage:

Essential. Storage strictly needed for the site and app to function (for example, your consent choice and sign-in session). These are not used to track you across sites.
Analytics. Cookies set by Google Analytics 4 to measure usage. These are consent-gated: we use Google Consent Mode v2 to keep analytics_storage denied by default and only enable it after you accept.

Withdrawing consent. Your choice is remembered in your browser. To withdraw consent, clear the stored choice (clear this site's cookies and site data in your browser settings, which removes the saved ss_consent value); the banner will appear again on your next visit so you can decline. You can also block or delete cookies entirely through your browser settings at any time.

Legal basis

Where the EU/UK GDPR applies, we rely on:

Consent for analytics cookies and analytics measurement.
Contract / legitimate interest for operating your account and for handling waitlist sign-ups (so we can deliver the service you asked for and contact you about access).

Who we share data with

We do not sell your data and we do not show ads. We share data only with the service providers that operate this product on our behalf, acting as processors: Google (Google Analytics 4 / Google Tag Manager, for analytics) and Supabase (database and authentication). If you connect a brokerage, we send trading instructions to that brokerage on your behalf to run the strategies you choose. We do not otherwise share your data with third parties.

Your rights

Under the GDPR you have the right to access the personal data we hold about you, to request its correction or deletion, and to withdraw consent for analytics at any time (withdrawing consent does not affect processing carried out before you withdrew it). To exercise any of these rights, email us at hello@joancarreras.com.

Changes to this policy

We may update this policy as the product evolves. When we do, we will revise the “Last updated” date above.