LEGAL · LAST UPDATED 19 JUL 2026
Privacy Policy
1. The short version
We collect the minimum needed to run your account and the features you actually use. Your EA files and .set parameter values never leave your own computer for local (desktop) backtesting. If you choose to use a Pro feature that needs your data elsewhere — the Cloud Runner, Optimize, the AI advisor, or the live account-sync EA — you're deliberately opting into that specific data leaving your machine, and we tell you what it is below. We don't run ad trackers or sell your data to anyone.2. What we collect
| Data | Why |
|---|---|
| Email address | Account login, password reset, email verification |
| Password (scrypt-hashed, salted — never plaintext) | Authentication |
| Licence key | Unlocks Pro features in the desktop app |
| Plan (Free/Pro/Elite) | Feature access, leaderboard visibility |
| Trader name, published backtest results | Only if you choose to publish to the shared leaderboard |
| Uploaded EA file (.ex5/.ex4) and its .set contents | Only if you use the Pro Cloud Runner or Optimize feature — needed to actually run the headless backtest on our server |
| Trading account login number, broker, server, currency, leverage, balance, equity, deal history, open positions | Only if you attach the optional live-sync EA to a chart in your own MT5 terminal — powers the Pro live account report |
| IP address (transient, not stored long-term) | Rate-limiting login/signup to stop brute-force abuse |
3. What we don't collect
- No advertising cookies or third-party trackers (no Google Analytics, no ad pixels).
- No .set file parameter values are ever published to the shared leaderboard — only a name/tag is shown there, even if you separately used that .set with the Cloud Runner or Optimize feature.
- No trading account passwords or broker login credentials of any kind, past or present — the live-sync EA only ever reads your account's own trade history, the same way MT5's own Toolbox > History tab does, and never touches your password.
- No payment card details — we don't process card payments directly (see Terms & Conditions).
The site does use browser localStorage to keep you signed in between visits — this is a
technical mechanism, not a tracking cookie, and it never leaves your browser except as the session
token sent back to us on requests you make.
4. Who we share data with
- Resend (email delivery) — sends verification and password-reset emails on our behalf. They see your email address and the email content, nothing else.
- Our AI provider (Anthropic or OpenAI, whichever powers the AI advisor at the time) — only if you use the AI advisor or the AI-guided Optimize feature. The backtest stats and .set parameters involved pass through our server to generate the suggestion, then aren't retained by us beyond the cached result shown back to you.
- We don't sell, rent, or otherwise share your data with anyone else.
5. Uploaded EAs, Cloud Runner, and live account sync
Two Pro features send more than the basics above, so they get their own explanation:- Cloud Runner / Optimize — uploading an EA is always something you choose to do. We run your compiled EA on our own server with DLL imports disabled, one job at a time. We don't open, read, reverse-engineer, or reuse your EA's code for anything beyond running the test you asked for, and we don't share it with any other user. We may delete uploaded EA files after a period of inactivity — just re-upload if you want to test it again later.
- Live account sync — the KBAlgoLabSync EA is something you choose to attach to a chart in your own MT5 terminal; it isn't installed or run without you doing that yourself. It pushes your account's balance, equity, closed-deal history, and currently open positions on a timer so your Pro account report can show it back to you. None of this is published to the public leaderboard or shown to any other user. Stop it any time by removing the EA from your chart.
6. How long we keep it
Account data is kept for as long as your account exists. Published leaderboard runs stay visible while your account is active. Session tokens expire automatically after 30 days of inactivity. Password-reset and email-verification tokens expire within hours and are single-use. Uploaded EA files and synced account data are kept only for as long as the related feature needs them, and are removed along with the rest of your data if your account is deleted.7. Your rights
You can ask us to:- Access — get a copy of what we hold on your account.
- Correct — fix inaccurate account details.
- Delete — close your account and remove your data, including anything you've published to the leaderboard.
Email hello@kbalgolab.co.uk for any of the above — we'll action it within a reasonable time.