Privacy Policy

1. General Information

The protection of your personal data is important to me. I treat your data confidentially and in accordance with the EU General Data Protection Regulation (GDPR) and this privacy policy.

This page explains how I collect, use, and protect personal data on proptradingvibes.com.

2. Data Controller

Paul Konrad
Gert-Marcus-Str. 7i
22529 Hamburg
Germany

Contact:
Email: hi [at] proptradingvibes [dot] com

3. Hosting and Site Delivery (Cloudflare)

This website is hosted and delivered by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). When you visit the site, Cloudflare processes technical data such as your IP address, browser type, and access time in server logs, and uses it to deliver the site securely and defend against attacks.

This processing is based on my legitimate interest (Art. 6(1)(f) GDPR) in providing a secure and reliable website. Information about Cloudflare's handling of personal data is available in its privacy policy.

The site stores a first-party consent cookie so it can remember your analytics choice. In the EEA, the United Kingdom, Switzerland, and other opt-in cases, Google Analytics loads only after you consent through the cookie banner. In other regions, the banner currently uses an opt-out model and Google Analytics may load before you make a choice. You can change that choice at any time through the cookie settings link in the footer. Services required to deliver and protect the site, as well as the cookieless Cloudflare Web Analytics beacon described below, operate independently of that analytics choice.

5. Cloudflare Web Analytics

This site uses Cloudflare Web Analytics to measure aggregated page views and website performance. The Cloudflare beacon runs without analytics cookies and is separate from Google Analytics consent. According to Cloudflare's Web Analytics documentation, the service does not collect or use visitors' personal data.

I use these aggregated measurements based on my legitimate interest (Art. 6(1)(f) GDPR) in monitoring whether the site works and which pages are useful.

6. Google Analytics 4

Depending on your region and saved analytics choice, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland), to understand how visitors use the site, including clicks on outbound partner links.

Google Analytics may process information about your browser and device, approximate location, pages viewed, and interactions. In opt-in regions, this processing is based on your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time through the cookie settings; without consent, the Google Analytics script is not loaded. In regions where the banner uses its opt-out mode, the script may load until you opt out. Google describes the default data collected by Analytics in its Analytics documentation.

7. Web Fonts (Google Fonts)

The site currently loads the typefaces Inter and Plus Jakarta Sans from Google Fonts. Your browser therefore contacts Google's font servers and transmits technical request data, including your IP address, so the font files can be delivered. Google states in its Google Fonts privacy statement that its servers necessarily receive IP addresses to deliver the files and that it does not use the Fonts API to create user profiles or for advertising.

The fonts are loaded to present the site consistently. This processing is based on my legitimate interest (Art. 6(1)(f) GDPR) in a readable and consistent website.

When you subscribe to my newsletter or request free resources, your email address is processed via Kit (Kit.com, formerly ConvertKit), my email marketing provider.

The free-account signup currently submits your address to a single-opt-in Kit form. Other signup surfaces may use a confirmation step according to their Kit form configuration. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time through the unsubscribe link in every email. Kit processes subscriber data on my behalf under its data processing terms.

9. Free Account and Magic-Link Access (Supabase)

When you request access to gated learning content, the site sends your email address to Supabase to create or find an authentication user and send a one-time magic link. Supabase stores authentication data needed to manage that account. After you use the link, the browser stores the session information required to keep you signed in.

I use these data to provide the account access you request (Art. 6(1)(b) GDPR). The same signup also sends your email address to Kit for the newsletter as described above. Information about Supabase Auth and its use of email addresses and one-time links is available in the Supabase Auth documentation.

10. Affiliate Links

Some outbound links to prop trading firms are affiliate links, routed through first-party redirect URLs on this domain (paths beginning with /go/). The redirect itself does not set cookies. When Google Analytics is active for your region and saved choice, an affiliate click may be sent to Google Analytics as an event. Once you reach a partner's website, that partner's own privacy policy applies.

You have the right to:

Request access to your personal data (Art. 15 GDPR)
Request correction of inaccurate data (Art. 16 GDPR)
Request deletion (Art. 17 GDPR)
Request restriction of processing (Art. 18 GDPR)
Request data portability (Art. 20 GDPR)
Object to data processing (Art. 21 GDPR)
Withdraw your consent at any time (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a data protection authority.

12. Data Security

All connections to this website are encrypted via TLS (HTTPS). I implement technical and organizational measures to protect your data from unauthorized access, loss, or misuse.

13. Updates to This Privacy Policy

I revise this policy when the services used or legal requirements change. The date at the top of this page reflects the latest revision.