Privacy policy
Last updated 1 October 2026
This policy explains what personal data we collect when you visit goldenstraddler.com, buy a licence or run the EA, and what we do with it. We collect as little as we can.
Who is responsible
The data controller is Daniel Zammit, Marsaskala, Malta. Contact us about privacy at support@goldenstraddler.com or through the help form in your account.
What we collect
| Data | Why | Legal basis |
|---|---|---|
| Email address and, if you give it, your name | To deliver your licence, sign you in with a code and send receipts and important notices | Contract |
| Order details: plan, price, discount code, payment method, payment confirmation from Stripe or NOWPayments, IP address and country at checkout | To process the sale, keep accounting records and prevent fraud | Contract, legal obligation, legitimate interest |
| Licence data: your MT5 account number, broker server and the times the EA checked in | To lock the licence to one account and keep it working | Contract |
| Dashboard data, if dashboard sync is on: account balance and equity, open position and closed trades placed by the EA | To show your own live dashboard | Contract. You can switch it off in the EA inputs. |
| Messages you send us | To answer you | Legitimate interest |
| Basic server logs: IP address, page requested, time | To keep the service secure and working | Legitimate interest |
We never receive your card number, your MT5 password or access to your trading account.
Cookies
We only use cookies that are needed for the site to work: one that keeps you signed in, and one that links your browser to an order you just placed. There are no advertising or analytics cookies, so there's no cookie banner. Fonts are hosted on our own server.
Who we share it with
- Stripe (card and wallet payments) and NOWPayments (crypto payments) receive the details they need to take your payment.
- Railway hosts the website and its database.
- Resend sends our emails.
- Our accountant and the tax authorities, where the law requires it.
Some of these providers process data outside the EU. Where they do, they use the European Commission's standard contractual clauses or another lawful safeguard. We don't sell your data and we don't share it for advertising.
How long we keep it
- Order and invoice records: as long as tax and accounting law requires, up to 10 years.
- Your account and licence: while you have a licence, and for 12 months after it ends.
- Dashboard trade data: while the licence is active. It's deleted when you move the licence to another account or ask us to delete it.
- Server logs: up to 30 days.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or ask for it in a portable format. Contact us and we'll reply within one month. If you're not happy with our answer, you can complain to the Information and Data Protection Commissioner in Malta (idpc.org.mt) or to the data protection authority where you live.