Privacy Policy

1. Data Controller Information

This Privacy Policy outlines how tapeHUD ("tapeHUD", "we", "us", or "our") processes data. The Data Controller for the website (tapehud.com) and licensing infrastructure is tapeHUD. Official contact information and support channels are accessible at tapehud.com.

2. Fundamental Separation: Browser Extension vs. Web Platform

To guarantee complete trader confidentiality, our technical architecture strictly isolates client-side extension execution from web infrastructure:

• The tapeHUD Browser Extension (100% Client-Side Local): Operates entirely inside your browser's isolated local sandbox. tapeHUD does NOT intercept, collect, log, or transmit any broker credentials, trading account numbers, portfolio balances, active DOM depth streams, or trade execution histories. Calculations (Volume Profile, CVD, POC, Absorption) execute purely in your local computer's memory. User preferences (color schemes, audio alerts, widget layouts) are stored exclusively in local browser storage (chrome.storage.local).
• The tapeHUD Website & Licensing Services: When you browse tapehud.com, purchase a license, or authenticate an active seat, limited technical data is processed strictly as detailed below.

3. Categories of Data Processed & Purposes

• A. Subscription Billing & Payment Processing (Stripe):
  Data collected: Customer email address, country of billing, Stripe Customer ID, subscription status, and transaction tokens.
  Purpose: To process subscription checkouts, issue automated receipts, and manage seat entitlements. Full credit card numbers, CVVs, and banking details are processed directly by Stripe on PCI-DSS Level 1 certified servers and never touch or reside on tapeHUD servers.
• B. Subscription & License Verification:
  Data collected: Associated Stripe email address or license key, subscription status (active, trialing, expired), verification timestamp, and a Stripe-generated payment method identifier (card fingerprint) used solely to enforce the one-trial-per-card policy.
  Purpose: To validate your active Stripe subscription or 7-day trial, manage active workstation seat limits (1-device or 2-device plan), and prevent trial abuse. tapeHUD does not collect, process, or store any credit card numbers, CVVs, or banking details. To enforce the one-trial-per-card policy, tapeHUD queries an anonymized card identifier (fingerprint) from the Stripe API. This identifier cannot be used to reconstruct card details.
• C. Customer Support Communications:
  Data collected: Your email address and message contents when communicating with technical support.
  Purpose: To resolve user questions, troubleshoot technical issues, and provide customer service.
• D. Website Analytics (Google Analytics 4) — only with your consent:
  Data collected: Pseudonymous usage data such as pages viewed, approximate location (country/city level), device and browser type, referring website, and session duration. Google Analytics 4 does not log or store IP addresses. Google Signals and advertising features are disabled.
  Purpose: To understand how visitors find and use tapehud.com so we can improve the website.
  Legal basis: Your consent (GDPR Art. 6(1)(a); Finnish Act on Electronic Communications Services 917/2014, section 205). The Google Analytics script is not loaded at all unless you click "Accept" in the cookie banner. You can withdraw consent at any time via Cookie Settings; GA cookies are then deleted.

4. Cookies & Local Storage

• tapehud_consent (local storage, strictly necessary): Stores your cookie choice (accepted/rejected) for 12 months so the banner is not shown on every visit. Contains no personal data.
• _ga, _ga_<ID> (Google Analytics, optional): Set only after you accept analytics. Used to distinguish visitors and sessions. Expire after up to 2 years, or immediately when you withdraw consent.

No advertising, retargeting, or social media tracking cookies are used. Links to Stripe, X (Twitter), Kick, TikTok, and the Chrome Web Store are plain links; those services only process data if you choose to visit them.

5. Third-Party Service Providers

We do not sell, rent, or trade your personal information. Data is processed exclusively by verified service providers:

• Stripe Payments Europe, Ltd. & Stripe, Inc.: Payment processing gateway.
• Hetzner Online GmbH: Cloud hosting infrastructure located in Nuremberg/Falkenstein, Germany and Helsinki, Finland (ISO 27001 certified EU data centers).
• Google Ireland Limited (Google Analytics, only with consent): Website analytics. Data may be transferred to Google LLC in the United States, which is certified under the EU–U.S. Data Privacy Framework.

6. Data Retention Periods

• Licensing & Seat Records: Retained for the duration of an active paid subscription or trial, plus 90 days following expiration to facilitate effortless re-activation.
• Billing & Financial Invoices: Retained for statutory periods mandated by applicable accounting and tax legislation.
• Website Analytics: Google Analytics event data is retained for 14 months, then automatically deleted.
• Local Extension Settings: Retained locally on your machine until you uninstall the extension or clear your browser cache.

7. User Rights

Users possess rights to request access to, rectification of, or deletion of their account data in accordance with applicable laws, and may withdraw analytics consent at any time via Cookie Settings.

← Return to tapeHUD Cookie Settings