Privacy Policy

1. Who this covers

This policy covers ezpayouts.xyz and its subdomains (together, "EZPayouts," "we," "us"). EZPayouts is an independent trading-journal and prop-firm-toolkit product, currently free, built and operated by a solo developer ("ShotPath"). It is not affiliated with any prop firm, broker, or exchange.

2. What we collect

Account information

• Username & password. If you create an account with a username and password, the password is salted and hashed (PBKDF2, SHA-256) before it's ever written to storage — we don't store it, log it, or have any way to recover the original value.
• Google / Apple sign-in. If you sign in with Google or Apple instead, we receive a signed token from that provider confirming your account's unique ID and (if the provider includes it) a verified email address. We verify that token's signature directly against Google's or Apple's own public keys — your Google/Apple password never passes through EZPayouts.

Trading data you create

• Trades you log in the Journal or Backtest pages — symbol, direction, P&L, strategy tags, notes, grades, and similar fields.
• The account rules you type into the Guide calculator (account size, profit target, loss limits, consistency).
• Screenshots are the one exception — any image you attach to a trade is kept only in your browser's local storage on that device. It is never uploaded to our servers and will not appear if you sign in on a different device or browser.

AI Coach conversations

The Coach chat widget (Backtest page) is opt-in — it only activates when you open it and send a message. When you do, your message, a summary of your recent trade stats, and any screenshot you attach in that conversation are sent to Anthropic's Claude API to generate a response. We rate-limit this per account per day mainly to control our own API costs, not to profile usage.

Automatically collected technical data

Like any web request, ordinary technical metadata (IP address, browser user-agent, request timestamps) passes through Cloudflare's network to serve the site and APIs. We don't run any separate analytics, advertising, or tracking scripts, and we don't maintain our own server access logs beyond what Cloudflare retains operationally.

3. How we use it

• To create your account, authenticate you, and keep your session signed in.
• To sync your trades, strategies, and settings across the devices you sign into.
• To generate AI Coach responses, only when you actively use that feature.
• To enforce basic abuse/cost controls (e.g. the Coach's daily message cap).

We do not use your trading data to train any AI model, and we do not sell, rent, or share your data with advertisers.

4. Who we share it with

We don't sell your data. A small number of infrastructure providers process it on our behalf, strictly to run the service:

We'd only disclose data beyond this if legally required to (e.g. a valid court order), and we're not aware of ever having received one.

5. Security & honesty about where we are today

We take reasonable, standard precautions: passwords are salted and hashed rather than stored in plain text, all traffic runs over HTTPS, and OAuth sign-ins are cryptographically verified server-side. That said, EZPayouts is presently a solo-built, pre-revenue product — it has not undergone a third-party security audit, and we don't yet offer things like rate-limited login attempts or two-factor authentication on password accounts.

As the product matures toward a paid tier, hardening account security (audit logging, stronger session controls, 2FA, and a formal security review) is an explicit priority before we'd ask anyone to trust us with payment information. This section will be updated as that work lands.

6. Your choices

• Access or export. Your trade data is visible to you directly in the app at any time.
• Correct or delete a trade. You can edit or delete individual trades yourself from the Journal or Backtest page.
• Delete your account. Full account deletion isn't yet self-service in the app. Email us (below) and we'll delete your account record and synced data promptly, by hand, until that's automated.
• Local data. Clearing your browser's local storage/site data removes your session and any locally-kept screenshots from that device.

7. Children's privacy

EZPayouts is not directed at, and is not knowingly used by, anyone under 13. If you believe a child has created an account, contact us and we'll remove it.

8. Changes to this policy

If this policy changes in a material way, we'll update the date at the top of this page. Significant changes (e.g. a new data use, or the introduction of paid plans) will be called out clearly, not buried in a routine edit.

9. EZPayouts browser extension

This section covers EZPayouts Chart Skins, our extension for Chrome and Chrome-based browsers. It puts an animated background behind the charts on TradingView and on other chart sites you choose to turn it on for, and can restyle the chart's order and position tags.

What it collects

Nothing about how you use it. The extension has no analytics, ads or tracking. It only talks to EZPayouts to check whether your account has Pro (see EZPayouts Pro below).

What stays on your computer

• Your settings: the skin you picked, the Strength, Dim, Blur, Speed and frame-rate settings, the order tag colors and style, whether each is on, and the sites you turned it on for. These are kept in your browser's extension storage.
• Your own skin file, if you upload one. It's kept in the extension's storage in your browser and is never uploaded.

Uninstalling the extension deletes both, and its sign-in (below).

What it does on chart pages

It only changes how the chart looks. It skips the step where the chart paints its background color, notes that color so the skin can blend with it, and places the skin behind the chart. With order tags on, it swaps the colors the chart draws its order and position tags in for the ones you picked as they're drawn, or, in the Modern and Frosted Glass styles, draws those tags, the price-scale boxes and the add-order button itself in the same spot, using the words and numbers already on them. With the position tool theme on, it draws the Long and Short Position tools' zones, lines and labels in that theme in the same way. It doesn't read your symbols, prices, orders, positions, account details, browsing history or anything else on the page.

Permissions

• TradingView (tradingview.com and tradingview-widget.com, where TradingView hosts charts other sites embed): to skin the chart there.
• Other sites: only when you click “Turn on here”, and only for that one site. You can turn it off again from the extension, which also removes the permission.
• Storage: to keep the settings and file above on your computer.

EZPayouts Pro

The Sakura wallpaper and the Outline order tags in the EZ and Sakura colors are free. EZPayouts Pro ($9.99 a month or $79.99 a year) unlocks the rest. If you get Pro:

• Signing in. On ezpayouts.xyz/pro you sign in to your EZPayouts account (section 3), and that page hands the extension your sign-in. The extension keeps it in its storage on your computer and uses it only to ask the EZPayouts account server whether your account has Pro, a few times a day. Nothing else is sent: not your settings, charts, sites or anything on the page.
• Paying. Payment happens on Stripe's own checkout page. Stripe handles your card details; EZPayouts never sees or stores them. We keep, with your account, what Stripe tells us about your subscription: its status, plan, renewal date and Stripe's customer and subscription IDs, so we know Pro is active and can open Stripe's page for managing or cancelling it. Stripe's handling of your payment is covered by Stripe's privacy policy.
• Cancelling. Manage or cancel anytime from ezpayouts.xyz/pro. Pro stays on until the end of the period you paid for.

Network

Without Pro, the extension makes no network requests of its own. With a sign-in, it makes the Pro check above to the EZPayouts account server.

Risk Management

When you turn on the extension's Risk Management, it reads your account's balance, equity and open positions from TradingView's trading panel to keep today's and this week's P&L, and, when a limit you set is hit or you lock trading yourself, presses TradingView's own close and cancel buttons. Your limits, the lock and those running totals are kept in the extension on your computer only; nothing is sent to EZPayouts.

10. Contact