What I store, and what I never do
Last updated 16 August 2026. This page says exactly what data this site collects and why — no boilerplate, because there isn't much to say.
The short version: your actual trade journal entries — the instrument, your thesis, prices, P&L, notes, everything you type into the Trade Journal tool — stay in your own browser and are never sent to me. The free starter downloads straight to your device, so no email is captured to hand it over. If you subscribe to the newsletter, that runs on Substack — your email lives on Substack's servers under Substack's privacy policy, not here. The one thing this site itself stores about you is what you send through the contact form — your name, email and message land in a private Google Sheet so I can read them and reply. Apart from that, this site stores nothing that identifies you, and account sign-in doesn't exist yet. It does count page views, using analytics that sets no cookies, stores nothing on your device, and cannot tell who you are — that's the one thing this site measures, and it's described in full below.
What's collected today
Your trade entries
Instrument, thesis, entry/exit price, position size, P&L, exit plan, state of mind, notes — everything in the Trade Journal tool is computed and stored only in your browser (localStorage). It is never transmitted to any server, by me or anyone else.
Newsletter email
The free starter downloads to your device client-side, so this site captures no email to deliver it. If you subscribe to the newsletter, that lives on Substack — Substack collects and stores your email on its own servers under its privacy policy, and I don't hold that list here. If account sign-in is ever added, the only field this site would store is your daily discipline grade — never the trade details behind it.
What you send via the contact form
If you use the form on the contact page, the name, email address and message you type are saved as a row in a private Google Sheet that only I can open. Google runs that Sheet on my behalf, under its own terms, and nobody else sees it. It is used for one thing: reading your message and replying to it. It is not added to any mailing list, not used for marketing, and not shared or sold. Messages are kept while the conversation is open and deleted once it's closed. If you'd rather it didn't go into a Sheet at all, email me directly at the address further down this page — that reaches my inbox instead.
Page views, and why there's no cookie banner
I use Cloudflare Web Analytics to see which pages get read. I want to know whether an IPO page or a lesson is worth the days it takes to write — that's the whole reason it's here. It is deliberately the most limited tool that answers that question.
A page was viewed
The page address, the referring site if you arrived from one, the time, your browser and device type, screen size, and how fast the page loaded. Your country is worked out from your IP address as the request passes through, and the IP address itself is not stored.
Follow you anywhere
No cookies. Nothing written to or read from your device — no localStorage, no fingerprinting. No profile, no ad network, no data sold or shared, and nothing that follows you to another site. It cannot tell that two visits came from the same person, so the numbers I see are counts of page views, not of people.
Things on these pages that aren't mine. Two pages embed a YouTube player — the homepage and the trade journal page — and the free starter page embeds Substack's subscribe box. Those load from YouTube's and Substack's own domains and run under their privacy policies, not mine. The video players are loaded through YouTube's no-cookie embed, so nothing is written to your device until you press play. Pressing play, or subscribing through that box, is the moment your data is handed to those companies — that's their handling, on their terms, and it's worth reading their policies if it matters to you.
That's why there's no cookie consent pop-up. Those banners exist because a site is storing or reading something on your device, or building a profile of you. Nothing this site itself runs does either, and the third-party pieces are named above rather than hidden, so a banner would be theatre rather than a choice. If that ever changes — if I add anything that sets a cookie or tracks you across sites — this page changes first, and you'd get a real choice rather than a pre-ticked box. Nothing here feeds an advertising system; there are no ads on this site. Your trade journal entries are not part of any of this: they never leave your browser at all.
If you'd rather not be counted even at this level, any content blocker or your browser's "do not track" tooling will stop the beacon loading, and the site works exactly the same without it.
Your rights
Apart from what you send through the contact form, this site holds nothing that identifies you, so these are simple:
- Contact-form messages — email me at the address below, from the address you wrote in, and I'll tell you what's held and delete your row from the Sheet. You don't have to give a reason. Messages are kept while the conversation is open and deleted once it's closed.
- Newsletter email — your subscription is managed in Substack. You can update your address or unsubscribe from any email, or from your Substack account, at any time; Substack honours access and deletion requests under its own policy.
- Trade journal data — it lives only in your browser, so you control it directly: clear it from the tool or your browser storage whenever you like. There's nothing on my side to request, because none of it was ever sent to me.
- Page-view counts — there is nothing to request or delete, because nothing in them is tied to you. What I can see is that a page was viewed, not who viewed it, so there is no record of "your" visits to hand over or erase.
- If sign-in is added later — the only thing this site would hold is your daily discipline grade, and you'll be able to ask me to show or delete it.
Questions? Email top10percenttrader@gmail.com — I respond within a reasonable time, and in any case within the timelines India's data protection law requires.
How I'd handle a security incident
Right now this site runs no user database — your trade journal sits in your own browser, newsletter email is held by Substack, not here, and the page-view counts identify nobody. The one store on my side is the private Google Sheet of contact-form messages, which only I can open. If it were ever compromised, what would be exposed is the names, email addresses and message text people sent me, and I'd notify anyone affected and the relevant authority promptly. If sign-in is ever added and the small store it creates (daily discipline grades) were compromised, I'd do the same. Because trade details never reach my servers in the first place, a breach here can't expose them; a breach of the newsletter list would be Substack's to disclose under its policy.
A note on what you type
Please don't type real account numbers, card numbers, or other payment details into any notes field in the Trade Journal tool — even though that data never leaves your browser, it's simply not needed for the journal to do its job, and it's good practice to keep such details out of any free-text field, anywhere.
Educational content only — not investment advice. This page describes data handling, not a financial-services disclosure. Trading in F&O carries a high risk of loss.