Privacy

What is stored, and where

Terminal is a single page that runs in your browser. Everything you enter — trades, positions, journal entries, session reviews, goals, risk caps, settings and layout — is written to your browser's IndexedDB storage on the device you are using while you work and, once you sign in, synced to your account (see Cloud sync below). It stays until you delete it.

Seconds and tick charts are built from the market trades the app hears while it is open. Those trades are kept in a separate IndexedDB store on your device for five days, so the chart has history; they are market data, not anything you entered, and they are never uploaded.

Without an account we hold nothing about you beyond an email you leave with us (below). During the private beta an account starts from an invite; sign-in is handled by Supabase Auth on our project: we hold your email address, the username you pick (a display name, which you can change on the Accounts tab), a salted password hash and the date of the terms you accepted, and nothing else — no real name, no card. Sign-in scopes your synced copy to you.

If you leave your email for launch notes, or to request access during the private beta, we keep that address, which of the two you asked for, and the day you left it, in a table only we can read, only to send launch notes or your invite. Nothing else is kept with it and it is never shared; write to us (Contact) and we take it off.

What leaves your device

Only the things listed here can, and each is either explicit or narrow. Several of them exist only if you switch them on, and the ones at the end of the list are doors you have to open yourself — a Terminal nobody configures talks to market-data sources and nothing else. This list is meant to be complete: if you find a request it does not cover, that is a bug in this page and we want to hear about it.

• Market data requests. To draw a chart or price a position, the app fetches from public third-party sources (for example Yahoo Finance, Stooq, the SEC, FRED and, if you supply keys, Finnhub or marketdata.app). Those requests carry a ticker symbol and a date range — never your positions, sizes, P&L or journal. (True of market-data requests. The AI-assist flow below is the exception, which is why it is spelled out separately rather than folded in here.) Market data is always on — there is no switch to turn it off. The requests carry a ticker symbol, not your book. Some are routed through public CORS proxies, which see the same ticker-level request. Option chains are routed through a relay (/api/chain): it sees the same ticker-level request and forwards it upstream. On our hosted site that relay is our server, not a third party’s and not yours — so we see the ticker and the date range, the same as any other market-data request on this list. If you run your own copy of Terminal it is your server instead.
• Cloud sync — on when you sign in. Once you are signed in on our site, your book is mirrored to our database (a Supabase Postgres project) under your account, so a new device can restore it. If you set a passphrase it is end-to-end encrypted in your browser first (PBKDF2-SHA256 → AES-256-GCM), and the server stores a single opaque blob it cannot read. The passphrase is held in your browser's memory for the session only — never written to your device, never sent anywhere — so you enter it once per session. Without a passphrase the copy is stored in plain text on our server — so set one. Screenshots never leave your device either way.
• The AI Coach — off unless you set it up, and it DOES send a summary of your journal. This is the one outbound flow that carries your own trading data, so it is described in full. The Coach runs on a model you host, in Ollama or LM Studio. When you ask it for a report or a question, the app builds a journal digest — a summary derived from your trades, including what you hold now — and sends it, with your question and, where you attach one, a chart screenshot, to the address you configured. That address is on your own machine by default, and then nothing leaves it; if you point it at another computer, the digest goes there. Terminal holds no AI key and connects to no hosted AI service (the optional Anthropic key and the screenshot importer were removed on 25 September 2026). Stanton AI's other answers and Ask the Journal use no model at all: they are worked out in your browser from your own data. No Coach request is ever made unless you have set up a runner and asked. The digest is assembled in your browser at the moment you ask; it is not stored or sent anywhere else.
• Optional integrations you enable. Web Push alerts only operate after you switch them on. Push stores a browser-issued subscription token and the price levels you set, so a scheduled job can notify you; it never receives your trades.
• A security watch at our server's doors. When our server turns a request away (a sign-in that does not check out, a request that is not allowed, too many requests from one place), it keeps a short record so the owner can spot someone trying to break in: the time, which part of the server, the country your connection reports, the account id the request claimed, and a scrambled tag made from your address that cannot be turned back into it. It never records your address itself, your email, a password, a sign-in token or anything in your journal. The records are deleted after 30 days, and only the owner can see them.
• Doors you open yourself, and what each one sees. These are off until you use them, and every one of them is listed here because it leaves the device:
  • Live quotes through our keys (/api/keys, /api/relay, /api/stream) — when you use our market-data keys rather than your own, the request goes through our server, which sees the ticker and the date range. /api/keys answers only whether a key exists, never its value.
  • The TradingView chart panel (/api/tv) — loads a third-party widget, which sees the symbol you are looking at.
  • A promo code (/api/promo) — the code and your account id, so it can be redeemed once.
  • An incoming webhook (/api/hook) — a URL you create so an outside tool, such as a TradingView alert, can post a trade line to your book. Anything sent to it passes through our server on its way to you.
  • Phone as remote (/api/remote) — pairs a phone to a desk session so it can drive it; the pairing and the commands pass through our server.

API keys you paste in

Keys for market-data providers are kept in your browser's local storage and are sent only to the provider they belong to. They are never routed through a proxy or relay, and never to us. They are never written into a backup export, encrypted or not — a backup carries your book, not your credentials.

Cookies and tracking

Terminal sets no cookies and includes no analytics, advertising, fingerprinting or session-replay code. Nothing counts your visits. The app uses browser storage purely to hold your own data and your sign-in in your browser. One exception, only when you sign in or create an account: the sign-in form may run a Cloudflare Turnstile check (a bot check, usually invisible), which means Cloudflare sees that request. Nothing else on the site loads a third-party script.

Exporting and deleting

• Export: Accounts → Backup & Restore writes a JSON file of everything. An encrypted export (AES-256-GCM, passphrase-derived) is also available.
• Delete: clearing this site's browser data removes your book from that device. If you have an account, sign out and write to the contact below and we will delete your synced copy and your account.

Please keep your own backups. With a passphrase set we cannot read your synced copy, so we cannot recover a book whose passphrase is lost.

Children

Terminal is a tool for adults managing their own trading records and is not directed at children.

Changes

If this policy changes, the date at the top changes with it. Material changes to what leaves your browser will be called out in the app.

Contact

Questions or a security report: tate@stantonanalytica.com. Security contact details are also published at /.well-known/security.txt.

Terms of service

1. Who these terms are between

These terms are an agreement between you and Stanton Analytica ("we", "us"), the maker of Terminal ("Terminal", "the service"). By creating an account, paying for a plan, or using Terminal, you agree to them. If you do not agree, do not use the service.

You must be at least 18 years old, or the age of majority where you live, to create an account or buy a plan.

2. What the service is

Terminal is a browser application: a trading journal, analytics, a risk engine, charts, options tools, research panels and a command-line desk. It runs in your browser. When you sign in, it syncs your records to our servers under your account so they follow you to every device you sign in on (end-to-end encrypted when you set a passphrase), and it relays market data and push notifications on your behalf.

Terminal does not connect to a brokerage, hold funds, place or execute orders, or move money. Nothing you do in it buys or sells anything.

Built with AI assistance. Parts of Terminal were written with the help of AI coding tools. Every change is reviewed by a person and has to pass an automated test suite before it is released. This changes nothing about your rights under these terms or about our responsibility for the software — it is written down because you are entitled to know how the thing you are paying for was made.

3. Your account

• You are responsible for the email address and password you sign in with and for everything done under your account. Tell us at once if you think it has been used without your permission.
• If you set an encryption passphrase, we cannot recover it. A forgotten passphrase means the cloud copy of your book cannot be read by anyone, including us. The copy on your own device is unaffected.
• One person per account. Accounts inside Terminal (separate books for live, funded, or backtest trading) all belong to that one sign-in.

4. Plans, billing and refunds

The plans we intend to offer

Plan	Intended price	What it includes
Beta	Free, while in beta	Everything in Desk, free while Terminal is in beta.
Trader	$29 a month, or $290 a year	Core terminal, journaling and analytics.
Pro	$49 a month, or $490 a year	The full terminal, with advanced analytics and risk tools.
Desk	$79 a month, or $790 a year	Everything, plus the professional workflow.

There is no free plan once the beta ends. During the beta every account has all of it, at no cost, whichever row above it would otherwise sit in.

When paid plans open

• Billing. Prices are in US dollars. A monthly plan would be charged every month and a yearly plan every year, on the date you subscribed, until you cancel. Taxes may be added where the law requires it.
• Cancelling. You would be able to cancel at any time. Cancelling stops the next charge; you keep the paid features until the end of the period you have already paid for, and then your account has no paid plan. Your records stay yours either way, and you can still export them.
• Refunds. If you cancel within 14 days of your first payment, email us and we will refund that payment in full. After that, and for renewals, payments are not refunded for the unused part of a period, except where the law where you live says otherwise.
• Price changes. If we change a plan's price, we will tell you by email at least 30 days before it applies to you. Continuing to use the plan after that date means you accept the new price.
• Payments would be processed by a third-party payment provider, and we would not see or store your full card number. We have not chosen one yet, and no payment provider is part of Terminal today.

5. What Terminal is not

The tax exports (such as Form 8949 figures) are computed from what you logged, follow general rules, and are not a substitute for a tax professional or your broker's official statements.

6. Your data

How your data is stored, what leaves your device and when is set out in the privacy policy, which is part of these terms. In short: your records are yours; when you sign in they are synced to our servers so they follow you to every device you sign in on; that copy is end-to-end encrypted when you set a passphrase; and you can export or delete everything at any time.

You grant us only the permission needed to run the service: to store the copy you send (encrypted when you set a passphrase), to relay it back to your devices, and to send you the notifications you set up.

7. Market data and third-party sources

Quotes, bars, filings, fundamentals, options chains and news come from third-party providers and public sources. They can be delayed, incomplete or wrong, and a provider can change or withdraw a feed at any time. On Pro and Desk, requests go through data keys we hold, and each provider's own terms apply to your use of its data. If you paste your own keys, your agreement with that provider governs, and you are responsible for staying within its limits.

8. Acceptable use

Do not use the service to break the law, to attack or overload our servers or a data provider's, to reverse engineer the parts that run on our servers, to resell access, or to share one account between several people. We may suspend or close an account that does.

9. Availability and changes

We work to keep the service available, but it is provided "as is" and "as available", without a guarantee of uptime. We may add, change or remove features, and we may retire the service; if we retire it, we will give paid subscribers at least 30 days' notice, and you will be able to export your records before it closes.

10. Liability

To the fullest extent the law allows, we are not liable for any loss of profits, trading losses, lost data, or indirect or consequential loss arising from the service, from a calculation it made, or from data it showed you. Our total liability to you for any claim is limited to the amount you paid us in the twelve months before the claim. Nothing in these terms limits liability that the law does not allow to be limited.

11. Ending the agreement

You can stop using the service and delete your account at any time. We may close an account that breaks these terms. In either case the copy of your records in your browser is untouched, and the export on the Accounts tab is always available to you.

12. Changes to these terms

We may update these terms. The date at the top says when they last changed. For a change that affects a paid plan or your rights materially, we will email account holders before it takes effect. Using the service after a change means you accept it.

13. Governing law

These terms are governed by the laws of the State of Florida, without regard to its conflict-of-law rules. Any dispute about them or the service will be heard in the state or federal courts located in Florida, except where the law where you live gives you the right to bring it closer to home.

14. Contact

Questions about these terms, billing or a refund: tate@stantonanalytica.com.

Accessibility

We want everyone who trades to be able to use Terminal, including people who use a keyboard instead of a mouse, a screen reader, a magnifier, or a phone. We aim to meet the Web Content Accessibility Guidelines (WCAG) 2.2 at level AA, and we are not all the way there yet. This page says what is in place, what is not, and how to tell us when something gets in your way.

What is in place

• The keyboard. Everything you can click in the app can also be reached and used from the keyboard, and a check in our build fails if a mouse-only control is added.
• Every screen size. Each page is checked on 14 screen sizes, from a small phone to a 4K screen, for text that is cut off or pushed off the edge.
• Room to tap. On the home page, every button and link is at least 44 pixels tall on a phone.
• Less motion. If your device is set to reduce motion, the home page's animations stay still.
• Your own look. In the app, Settings › Appearance changes the text size, the spacing and the motion, and offers colour-safe palettes for red-green, protan and blue-yellow colour blindness.

What is not there yet

• Charts are drawn as pictures, so a screen reader cannot read the price lines in them yet.
• Some smaller links on the other public pages are under 44 pixels on a phone.

Tell us

If anything on the site or in the app gets in your way, email tate@stantonanalytica.com. Tell us the page, what you were trying to do and what you use (for example a screen reader, or zoom). We reply within two business days, and we will help you get it done another way while we fix it.

Contact

If you write about a specific trade or account, paste what we need into the email. With a passphrase set, your synced book is encrypted end to end, so we could not read it if we tried.

Pricing and plans

Three plans, and no free one once the beta ends. You can export your book any time on every one of them, so leaving costs nothing.

Paid plans open after the beta. Everything below is free to every beta account today, and nothing takes a card

Prices in USD. Cancel whenever you like once they open. A promo code is entered when you finish setting up from your invite email — not on this page, because a code is redeemed against an account and there is no account yet at this point. No invite yet? Request access.

What's new