the fine print, in plain words.

Privacy policy

This page explains what SizeOps ("we") collects and why. If you have a question about your data, write to support@sizeops.com.

The short version

  • Your trade journal is yours. With the Journal on (it's on by default), SizeOps sends your trades from your terminal to your Journal as they happen. It's private: only you see it, and our team looks only when you ask us for help. Switch it off for any trading account in Journal settings. It also keeps your account balance, and on MetaTrader your deposits and withdrawals, for your daily limit and your return and drawdown in %. With chart pictures on, also a picture of the chart for each of SizeOps' own trades. Never your broker passwords or anything else from your terminal.
  • When SizeOps checks your license, it sends six things (below). With the Journal on, each trade on that account is sent too, plus chart pictures of SizeOps' own trades, so you can see them in your Journal; switch either off per account any time.
  • We keep only what we need to run your license and your account, and delete the rest on a schedule.
  • Your card details go to our card payment processor, never to us. It keeps your card saved, so your plan can renew and you can pay again in one click. You can remove the card in your account at any time.
  • Analytics and marketing cookies only if you say yes in the cookie banner. We don't sell your personal data.

What the license check sends

Each license check sends exactly this:

  • key: your SizeOps key
  • account: the trading account number (NinjaTrader: the account name)
  • broker_company: your broker's company name (NinjaTrader: the connection, e.g. Rithmic)
  • broker_server: your broker's server name
  • platform: MT4, MT5 or NinjaTrader 8
  • ea_version: the SizeOps version

What we keep, and for how long

  • Your website account: email, password, when you accepted the Terms, an optional nickname, and your time zone (from your browser, or the one you choose in Account)To log you in and show your licenses. The password is stored only as a one-way hash (argon2id); nobody can read it. The nickname, if you set one in Account, is used to greet you in our emails and support replies. The time zone is saved when you open your account (and updated if it changes), so your journal, your account pages and our emails show times in your own time.Until you ask us to delete it
  • Login sessionA cookie with a random code keeps you logged in. We store only a one-way hash of the code.30 days, or until you log out
  • Two-step login (2FA), only if you turn it on: the secret your authenticator app shares with us, and your recovery codesTo check your 6-digit code when you log in. The secret is stored encrypted (AES-256-GCM); the recovery codes only as one-way hashes.Until you turn 2FA off: then deleted at once
  • Email links: to confirm your email, or to reset your passwordTo confirm your email address, or to let you choose a new password. Each link is stored only as a one-way hash.Confirm links work for 24 hours, password reset links for 1 hour; deleted 7 days later
  • Your plan and its trading accounts, with each account's platform: how many trading accounts it runs, how you pay for it, whether it's active or paused and why, and the trading accounts on it (including one waiting to connect), with their history (added, switched, the broker seen at the license check, plan changes, pauses)To run your license: what you own, which accounts it covers, how many switches you have left, whether it works, and to spot shared keys.Until you delete your account. A paused or ended license is kept too, so you can pick up where you left off.
  • Your SizeOps key, and your earlier keys (replaced by a reset)To check your license. An earlier key gets a clear message ("This key was replaced") instead of an error. A key is never given to anyone else.Until you delete your account. After that, only a one-way code of each key is kept, with no link to you, so a key is never given out again.
  • If you continue with Google: your Google account's ID, and the email address and name Google sends us, with whether Google has confirmed that email. We never get your Google password. Google learns that you signed in to SizeOps.So you can log in with your Google account. Disconnect it any time in Account, once you've set a password.Until you disconnect Google or delete your account.
  • Your trade journal: for each trade on a trading account with the Journal on, what SizeOps sends from your terminal: the trading account number, the trade (symbol, buy or sell, size, prices, times, and the money from your broker's own records: profit, commission, swap, fees), your plan when you placed it with SizeOps (risk, stop, target, partials, breakeven), each step of the trade, how far price went for and against you; your account balance at each trade and at the start of each trading day; from MetaTrader also your deposits and withdrawals (and other balance changes your broker records) and the totals from your broker's trade history (how many trades closed, and their money); and pictures of your chart at each step of a trade placed with SizeOps (entry, partials, breakeven, exit; if switched on); trades not placed with SizeOps; your notes on your trades and days; your trading PC's time zoneTo show you your trades and your results, in money and against your plan and your daily limit, and on MetaTrader your return and drawdown in % and whether your journal matches your broker. The Journal and "Save chart pictures" are on by default, and you can switch each off for any trading account in Journal settings. While the Journal is on, it includes every trade on that account, also trades not placed with SizeOps, so your totals match your broker. It's private: only you see it, and our team looks only when you ask us for help.Until you delete it. While you have no plan or trial it's hidden and nothing new arrives; it's back when you have one again. Delete it any time in Account → Your data (Delete my journal), or by deleting your account. The chart pictures are kept in our own picture storage, apart from the database.
  • The latest license check for each account (time, broker company and server, SizeOps version)To show you when each account last checked in, and to support you.Only the latest one, while the account is on a license
  • Refused license checks (what was sent)To help you when a license check fails, and to spot abuse.30 days
  • Free trial records: a one-way code made from the platform, account and broker, and a one-way code made from your email and the platform (MT4, MT5 or NinjaTrader 8)So each trading account, and each email, gets one free trial per platform, also after an account is deleted. The codes can't be turned back into your account number or email.Kept for good
  • Your IP address when you sign up, as a one-way codeTo spot many sign-ups from one place (free-trial abuse).30 days
  • Orders and payments: email, what you bought, amounts, the payment provider's reference, the country you paid from (from your IP address); the words you ticked at checkout (the Terms, instant access, and that the plan renews until you cancel), the Terms version, and when; for crypto, the country you confirmed you live in and, if we refund you, the USDT address you gave usTax and accounting, refunds, to deliver and support your licenses, and to check where crypto payments are allowed.5 years
  • Monthly and yearly plans: your plan (how many trading accounts, monthly or yearly), its status and renewal date (for a plan paid each time: how it was paid, PromptPay or crypto, and until when), each payment and invoice (amount, date, how it was paid (a card's brand and last 4 digits), paid or not, refunds), and our payment processor's references for you, your plan and each invoiceTo charge your renewals, show your receipts, pause your license when a payment fails and restart it when you pay, send you the emails about your plan, and pay partners' commissions. Once a day we compare each card plan with our payment processor's records, so a paid plan is never paused by mistake. Your card itself stays saved with our payment processor (we never see your card number), for renewals and so "Pay now" takes one click, until you remove it in your account (Remove card) or delete your account.Your plan: until you delete your account. Payments and invoices: with the order records (5 years).
  • Why you cancelled, if you tell us (it's optional: one choice and a few words, asked when cancelling leaves you with nothing active)To understand why people leave and improve SizeOps. We only count the answers; nobody contacts you about them.Until you delete your account.
  • Why you didn't buy after a trial, if you tell us (it's optional: one choice and a few words, asked once after a trial ended without a plan)To understand why people don't buy and improve SizeOps. We only count the answers; nobody contacts you about them.Until you delete your account.
  • If you delete your account: your email address and the date you deleted itTo meet tax obligations and to prevent abuse of trials and refunds.Up to 5 years
  • Messages from the payment providers about your payment (they can include your name and email)To confirm payments exactly once and to sort out payment problems.90 days
  • The emails we send you: your address, which email, when, and whether it was delivered, bounced or marked as spamTo send each email once, to wait and resend when our email provider's limit is reached, and to find delivery problems.30 days
  • Addresses that bounced or marked our email as spam, as a one-way codeSo we never email them again.Kept for good
  • Support tickets: your email, what you write, any screenshots you add, and our repliesTo answer you and keep a record of what was agreed. A ticket sent without an account waits for you to confirm it from the email we send.Screenshots until 30 days after the ticket is closed; the rest until 1 year after. A ticket never confirmed: 7 days
  • Call bookings: your name, email, the time you picked and your answersTo hold the call and know what you'd like to talk about.Until 1 year after the call
  • Full call recordings, only if you said yesTo send you the recording.Until 90 days after the call
  • Posted clips, only if you said yes to sharingTo show other traders SizeOps on a real chart, with your private details hidden.Until you ask us to take them down
  • Your reviews: the stars, your text, the name you chose (your nickname, a first name and initial, or Anonymous), the platforms you owned when you sent it and, if you agreed to show it, your consent (the exact words and when)To read your feedback and, only if you agreed, to show it on sizeops.com. The consent is our proof that you agreed.Until you delete your account. To take a review off the site, contact support@sizeops.com
  • If you own a paid license: your friend codeSo a friend you invite gets their discount. We don't show you who used it.Until you delete your account; after that the code alone is kept, for good, so it's never given to anyone else
  • If you bought with a friend's code: which code, and whose it isFor the friend discount on your order and our records. Neither of you sees the other's details.With the order record (5 years)
  • When you downloaded SizeOps: the time, per platform (the first and the last)To help when SizeOps is set up but doesn't connectUntil you delete your account
  • If you accepted Analytics when you started checkout: the Google Analytics ID from your browser's _ga cookies, with your orderTo tell Google Analytics about your purchase once the payment is confirmed (the platforms, the amount and card or crypto; never your email or order number)Until it's sent, at most 2 days
  • Clicks on affiliate partners' links: the code, the page, your country, the partner's campaign tag, and your IP address as a one-way codeTo show partners how their links do, and to spot fake clicks and partners referring themselves.13 months; the IP code 30 days
  • If you started a free trial after arriving through a partner's link (marketing cookies accepted): the partner's code, the platform, the day, and your account as a one-way codeTo show how a partner's links do (clicks, trials, sales). The partner never sees it.13 months; deleted with your account
  • If you bought with a partner's code: which code, and a one-way code of the network you used at checkoutTo pay the partner their commission (it's part of the order record) and to check for self-referrals.With the order record (5 years); the network code 30 days
  • If you join the affiliate program: your application, codes, commissions, payouts and payout addressesTo run the program and pay you. A rejected application is deleted after 90 days; a code you asked for is kept on its own, for good, so it's never given to anyone else.While you're in the program. A payout address until you remove it or delete your account (one used for a payout stays with that payout's record)
  • If you request an affiliate payout: your legal name and the country you live in, and the payout recordsTax and accounting, and the sanctions check.5 years after your last payout
  • Emails you send to support@sizeops.comTo answer you and keep a record of what was agreed.As long as needed for that
  • Encrypted backups of our databaseSo nothing is lost if a server fails. They're encrypted before they leave the server.Up to 85 days

If someone types an email address on our Forgot password page and there's no SizeOps account for it, we send that address one email saying so, with a link to sign up. We delete that request and the email's records after a day.

Cookies

The first time you visit, a banner asks what you allow. Only the necessary cookies work without your OK. You can change your choice any time under , which is in every page's footer, or block and delete cookies in your browser.

  • Necessary, always on: so_session keeps you logged in (only after you log in): until you close your browser or after 2 hours without use, or, with “Remember me” ticked, 30 days from your last visit; logging out ends it. so_consent remembers your cookie choice, when you made it and which banner you saw (180 days). so_order (after a card payment also so_card_ref) tells the thank-you page which order to show after you pay (1 day). so_2fa, only with two-step login on, remembers for 10 minutes that your password was right while you type your code. Our hosting and security provider may set a security cookie when it needs to tell people from bots. Card payments happen on our card payment processor's own page, and on the checkout page the crypto processor's window loads from its own site; they may set their own cookies there. If you arrive through a referral link (a friend's invite or an affiliate partner's) without accepting marketing cookies, your browser keeps its code for this visit only (session storage, gone when you close the tab), so its discount applies at checkout.
  • Analytics, only if you accept: _ga and _ga_… from Google Analytics (13 months).
  • Marketing, only if you accept: _gcl_au from Google Ads (90 days), and _gcl_aw when you arrive from one of our Google ads (90 days); _fbp from the Meta Pixel (90 days), and _fbc when you arrive from one of our Meta ads (90 days). The Meta Pixel isn't switched on yet. so_ref remembers for 30 days the referral link that brought you (a friend's invite or an affiliate partner's), so its code fills in at checkout (only when you arrive through such a link).
  • Videos: the setup videos come from YouTube. YouTube's privacy policy applies.
  • In your browser: Some calculators remember what you typed or picked (like your commission, your account's currency or whether the Next trade box is on) in your browser only. It never reaches us. Clearing your browser data removes it.

Google Analytics, Google Ads and the Meta Pixel

These tools collect data on our website itself, so we name them. Each runs only if you accept it in the cookie banner, and never on our test sites. Google's are loaded through Google Tag Manager, which itself loads only after you accept Analytics or Marketing.

  • Google Analytics (analytics) shows us how the site is used: which pages are visited, where visitors come from (the site, not the full address, plus the campaign tags of an ad or link that brought you, like utm_campaign or an ad-click code), the device, browser and screen, the approximate location (country and city, worked out from the IP address, which Google says it doesn't store), three moments: a free trial started (its platform), a checkout started and a purchase (the plan, how many trading accounts, monthly or yearly, the amount and currency, card or crypto, and whether a friend's or partner's code was used, never the code itself), and how the trading game and the free calculator on our pages are used (the market picked and a simulated trade's result; never what you type into the calculator). Google keeps this data for 14 months.
  • Your purchase, from our server: if you accepted Analytics when you started checkout, we keep the Google Analytics ID from your browser's _ga cookies with your order, and our server tells Google Analytics about the purchase once the payment is confirmed (the same details as above, never your email or order number). Renewals aren't sent. The ID is deleted once it's sent, and after 2 days at most. If you also accepted Marketing, Google may use the purchase to measure our ads.
  • Google Ads (marketing) measures our ads on Google: whether a visit came from one of our ads, and whether it led to a free trial or a purchase. Google may use this under its own policies.
  • The Meta Pixel (marketing) measures our ads on Facebook and Instagram: the pages you visit here and the same four moments. If you're logged in to Facebook or Instagram, Meta can link this to your account under its own data policy. We never send Meta or Google your email or phone number.
  • None of these tools ever gets your name, email, license key, trading account numbers, order numbers, or the codes in our email links: we strip them from the page addresses first.
  • To opt out: choose Reject all or untick them under Cookie settings. You can also block their cookies in your browser, use Google's opt-out browser add-on for Google Analytics, and change your ad preferences in your Google and Meta accounts.

Reviews

If you own a license, you can send a review in your account, at most one every 30 days. It stays private unless you tick "Yes, show it with the name I chose." under "Can we show your review on sizeops.com?" Then, once we've checked it, it can be shown on sizeops.com with the name you chose (your nickname, a first name and initial, or Anonymous), your stars and the platforms you owned when you sent it, marked "Verified owner". We never show your email, your full name or your trading account numbers, and we never edit what you wrote. Only your latest approved review is shown.

Reviews on sizeops.com come only from verified license owners. We keep the exact words you agreed to and when. To remove your review from the site, contact support@sizeops.com. If you stop owning a license (for example after a refund), it comes off the site too.

Invite a friend

If you own a paid license, you get a friend code and an invite link to share. A friend who buys with it gets a discount on their first purchase, as the Terms say; you get nothing for it, and neither of you sees the other's details: we only note on their order which code was used. Once your account is deleted, only the code itself is kept, so it's never given to anyone else.

Calls

If you book a call from your account, you book it on Cal.com, which has its own privacy policy. It tells us your name, email, the time you picked and your answers. The call runs on Cal Video, Cal.com's own video service. We only record if you say yes. Then we send you the recording and delete our copy 90 days after the call. If you also say yes to sharing, we may post parts of it on our YouTube or social pages, with your name, email, account numbers, license key and balances hidden. Posted clips stay up until you ask us to take them down. Changed your mind? Email us and we'll stop using it and take posted parts down. Saying no changes nothing about the call. We keep booking details until 1 year after the call.

The affiliate program

When you buy with a partner's code (typed, or filled in from their link), the partner earns a commission on your payments for 12 months from your first payment with that code: that payment, and any renewals and plan changes in those 12 months. They see only an anonymous line for each: what it was for and the amount. Never your name, email, country, key or trading account numbers.

We count clicks on partners' links: the code, the page, your country and the partner's campaign tag. Your IP address is kept only as a one-way code, for 30 days. To stop partners buying through their own codes, we compare a one-way code of the network used at checkout or sign-up, and the card buyer's name and email, with the partner's own; a match is checked by a person and never decided automatically.

If you start a free trial after arriving through a partner's link, and the link's code was saved (you accepted marketing cookies), we count the trial for that partner: the code, the platform and the day, with your account kept only as a one-way code so a trial counts once. The partner never sees this, only we do.

If you join the affiliate program, we keep your application (your channels, audience size, whether you'll use paid advertising, any plan you gave, the country you live in and the box you ticked), your codes, commissions and payouts, the USDT addresses you add, and, from your first payout request, your legal name and country, for our records and tax. How long each is kept is in the list above. The program has its own Affiliate terms.

Where your data goes

Your data may be processed in other countries than the one you live in, with appropriate safeguards. We only pass on what each provider needs.

We don't sell your personal data. We don't "share" it for cross-context advertising either (the term California law uses), unless you accept marketing cookies (Google Ads and the Meta Pixel); you can say no, or change your mind any time under Cookie settings. Apart from the service providers that run SizeOps for us and the tools on this page, we only give your data to anyone else when the law requires us to.

  • To do what you asked for (our contract with you): your account, your trial, your licenses and your plan, payments and renewals, refunds and support, the emails about them (receipts, renewal reminders, failed payments, pauses), your friend code and a friend's discount on your order, and the affiliate program if you join it.
  • Our legitimate interests: stopping key sharing, trial abuse and fraud (including partners referring themselves), counting clicks on partners' links, and keeping the site and your data secure.
  • Your consent: showing your review on sizeops.com, recording a call and posting parts of it, and the analytics and marketing cookies (the referral cookie is one of them). You can withdraw it at any time.
  • The law: tax and accounting records, including affiliate payouts.

Your rights

You can ask us to show you the data we hold about you, correct it, delete it, or send you a copy. You can also object to how we use it, or withdraw your consent. Write to support@sizeops.com from the email address on your account; we answer within 30 days. You can also complain to a data protection authority, for example the one where you live.

You can delete your account yourself in Account on this website; its licenses are deleted for good (they can't be restored), and a monthly or yearly plan stops at once (we warn you first and offer to cancel the plan instead). If you delete your account, we keep your email address and order records for up to 5 years, to meet tax obligations and to prevent abuse of trials and refunds. Everything else is deleted. Signing up again with the same email starts an empty account. Encrypted backups roll over within about 3 months.

How we protect it

The website only works over encrypted connections (TLS). Passwords, login sessions, sign-up IP addresses and trial codes are stored only as one-way hashes. Backups are encrypted before they leave our server, and access to the server and its data is limited to the people who run SizeOps. Our sign-up, log-in, password and support forms use a bot check from our security provider, which looks at your browser and connection to tell people from bots. If a data breach ever puts you at risk, we tell you and the authorities as the law requires.

Age

SizeOps is for people aged 18 or over. We don't knowingly collect data from anyone younger.

Changes

When this policy changes, we update it here. If a change matters for you, we also email you before it applies.