A short privacy note.
This note covers the public 115 website and the invitation-only early-access accounts at app.115trading.com. We use the information you provide to respond to inquiries, secure your account, and coordinate access. The contact form and account setup do not connect to a broker or collect trading credentials, positions, or orders.
When you write to the desk
The contact form stores your name, reply email address, and message in a private database on servers we operate, for the team to read and respond to. When a message arrives, a copy is posted to the team’s internal chat, which also runs on servers we operate, and a copy is emailed to an inbox the team reads. That inbox is hosted by Google (Gmail), so Google stores the email copy; Resend delivers it. Links and mentions in your message are shown as plain text in both copies. Each submission has a request identifier to prevent duplicate records. The database record expires 90 days after it arrives, and a daily cleanup job deletes expired records. The chat and email copies, and any email conversation that follows, are not covered by that expiry and may remain in our correspondence records.
We do not sell contact information or use it for advertising. Please do not send credentials, open positions, account details, or other sensitive trading information.
Invited accounts and onboarding
Accounts exist only by invitation; there is no public sign-up. When the team invites you, we store your email address and the time of the invitation. Our authentication service, built on Supabase Auth, manages your account email, password, email links, and sign-in sessions. After you accept, we store the onboarding details you submit: your name, role, optional firm, markets, broker or platform preference, deployment interest, and intended use. We also store your access-request status and the version and time of your early-access acknowledgment. A broker or platform preference is a description, not a connection or permission to access an account.
Account and onboarding records support your ongoing access request; they do not use the contact form’s 90-day expiry. You can update your onboarding details while signed in and request account deletion through the contact route below. We verify ownership before acting on requests that affect an account.
Service email and optional marketing
Resend delivers invitations, password recovery, and other account email, and the email copy of a new contact message described above. We retain limited notification records to avoid duplicate sends and handle delivery failures. A request status or an email delivery attempt does not activate trading, broker access, or a paid plan.
Marketing updates are a separate, optional choice, off by default. Accepting an invitation or sending a contact message does not subscribe you. You can change that preference in your signed-in onboarding settings or contact us to withdraw it.
Security checks and service providers
Cloudflare Turnstile runs on the sign-in, password-reset, and contact forms to screen out automated traffic, and may process technical browser and network information for that check. For contact messages, our server also verifies the Turnstile result before storing anything. Authentication, application records, and form handling run on our own installation of the Supabase software, on servers we operate. Resend processes the recipient address and content needed to deliver email, and Google stores the email copy of contact messages. These providers may retain operational logs under their own policies.
Our contact rate-limit records contain keyed hashes of email addresses and of the network address a request came from, plus aggregate counters; they do not contain raw IP addresses or message bodies. The same daily cleanup deletes those short-lived records once their quota windows expire. Ordinary site and provider requests can still produce network or security logs. Read the provider privacy notices at Resend, Cloudflare and Google.
What stays in your browser
The appearance control stores your light, dark, or automatic theme preference in local browser storage. Narration playback uses the browser’s media controls while the page is open. This site does not load an advertising or behavioral analytics service.
The account app also stores session information needed to keep you signed in. Signing out clears the app’s local session. Use a trusted device and sign out when you are finished on a shared device.
Questions or deletion requests
To ask about your information, correct it, or request deletion, use the contact form and include the email address used for your account or original note so we can identify the request. Do not include your password or verification codes.
Last updated September 24, 2026.