Privacy Policy

1. Introduction and Legal Framework

This Privacy Policy explains how FundedMetrics ("we", "us", "the Service") collects, uses, and protects your personal data when you use our website and trading analytics dashboard. We are committed to processing your data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Italian law.

2. Data Controller

The data controller responsible for your personal data is Riccardo Savoca, operating as a sole trader with registered address at Via Cristoforo Colombo 36, 10048 Vinovo (TO), Italy, VAT number IT11273100013. For any privacy-related enquiry, you can contact us at info@fundedmetrics.net.

3. What Data We Collect

Account data

When you register, we collect your username and email address. Your password is never stored in readable form — it is encrypted (hashed) using the bcrypt algorithm, and we have no way of accessing your original password.

Trading data

To power your dashboard, we process the contents of the Rithmic CSV files you choose to upload (such as trade history, instruments, timestamps, and profit/loss figures). This data is stored in our database and is used solely to generate your personal analytics.

Subscription and billing data

Payments and subscriptions are handled by Dodo Payments, our authorised reseller and Merchant of Record. As the seller of record they collect your billing details directly and act as an independent controller for that data. We receive limited subscription information such as your customer ID, subscription status, plan, and renewal date. We do not collect, see, or store your credit card or payment details — these are handled entirely by Dodo Payments.

Technical data

We use a single essential authentication cookie (a JWT token stored as an httpOnly cookie) to keep you securely logged in. This cookie is strictly necessary for the Service to function.

We log the IP address and approximate location (country/city) of each successful login for security purposes and to prevent unauthorized account sharing. This data is reviewed manually only and is automatically deleted after 90 days.

4. Why We Process Your Data (Legal Basis)

• Performance of a contract (GDPR Art. 6(1)(b)) — to create and manage your account, process the trading data you upload, and provide the subscription service you signed up for.
• Legal obligation (GDPR Art. 6(1)(c)) — to keep billing and tax records as required by law.
• Consent (GDPR Art. 6(1)(a)) — where you have given it, for example for any optional marketing communications.
• Legitimate interest (GDPR Art. 6(1)(f)) — to keep the Service secure, prevent unauthorised access, and detect account sharing, as described under Technical data above.

5. Third-Party Services

We rely on a small number of trusted providers to run the Service. These act as data processors or independent controllers:

• MongoDB Atlas — database hosting for your account and trading data.
• Dodo Payments — authorised reseller and Merchant of Record: checkout, payment and subscription processing, invoicing, tax and refunds.
• Vercel — application hosting and content delivery.
• Meta Platforms, Inc. — only for visitors located outside the European Economic Area (EEA) and the United Kingdom, we load the Meta Pixel on our public marketing pages, to measure visits from our advertising campaigns, and on our login/registration page, to measure when a checkout is started and when a payment succeeds. See Section 8 (Cookies) for exactly when this applies and what it does.
• Google LLC — only for visitors located outside the European Economic Area (EEA) and the United Kingdom, we load a Google Ads tag on our public marketing pages and on our login/registration page, to measure visits from our advertising campaigns and, on the login/registration page specifically, when a registration is completed. See Section 8 (Cookies) for exactly when this applies and what it does.

Some of these providers are based outside the European Economic Area (including the United States and India). Where data is transferred internationally, it is protected by appropriate safeguards such as the providers' Standard Contractual Clauses.

6. How Long We Keep Your Data

We keep your account and everything you have uploaded for as long as your account exists — including while a subscription is expired or cancelled, or after a free trial has ended. This is deliberate: if you come back months later, your trades are still there.

We delete your account and its data when you close it or ask us to, at info@fundedmetrics.net, except where we are required to keep certain records (such as billing information) to comply with legal obligations.

Two things are kept differently. The login log — IP address and approximate location of each successful login, used to spot shared accounts — is deleted automatically after 90 days. The country and city recorded when you register are kept for as long as the account exists: they establish which country you are in for tax purposes and help us detect fraud.

7. Your Rights

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure of your data ("right to be forgotten");
• restrict or object to certain processing;
• receive your data in a portable format (data portability);
• withdraw any consent you have given, at any time.

To exercise any of these rights, contact us at info@fundedmetrics.net. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

8. Cookies

We use one strictly necessary cookie on every page: an authentication token that keeps you logged in.

On our public marketing pages — the homepage, the prop firm rules comparison page, and the demo page — we also load the Meta (Facebook) Pixel, but only for visitors located outside the European Economic Area (EEA) and the United Kingdom. On those pages, the Meta Pixel sets its own cookie and sends Meta one event: that the page was visited.

The Meta Pixel is also present on the login and registration page, again only for visitors outside the EEA and the United Kingdom, but there it does not track the page visit itself. It only sends two events, and only when they actually happen: that a checkout was started, and that a payment succeeded — each carrying the price of the plan involved. Simply logging in, without starting a purchase, sends nothing to Meta.

If you are located in the EEA or the United Kingdom, the Meta Pixel does not load on any page, and the authentication cookie above remains the only cookie we use.

The Meta Pixel is never present on the dashboard or on any other page that shows your trading data, and no trading data, account information, or in-product activity is ever shared with Meta.

On the same public marketing pages, and on our login and registration page, we also load a Google Ads tag, again only for visitors located outside the EEA and the United Kingdom. On all of these pages, the Google Ads tag sets its own cookie (_gcl_au) and records that the page was visited; on the login and registration page specifically, it additionally records when a new account is successfully created.

If you are located in the EEA or the United Kingdom, the Google Ads tag does not load on any page, and the authentication cookie above remains the only cookie we use.

Like the Meta Pixel, the Google Ads tag is never present on the dashboard or on any other page that shows your trading data, and no trading data, account information, or in-product activity is ever shared with Google.

9. Data Security

We take reasonable technical and organisational measures to protect your data, including password hashing, encrypted connections (HTTPS), and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children

The Service is not directed to children and we do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us at info@fundedmetrics.net and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically.