Privacy Policy

1. General Information

The protection of your personal data is important to me. I treat your data confidentially and in accordance with the EU General Data Protection Regulation (GDPR) and this privacy policy.

This page explains how I collect, use, and protect personal data on proptradingvibes.com.

2. Data Controller

Paul Konrad
Gert-Marcus-Str. 7i
22529 Hamburg
Germany

Contact:
Email: hi [at] proptradingvibes [dot] com

3. Hosting and Content Delivery (Cloudflare)

This website is hosted and delivered by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). When you visit the site, Cloudflare processes technical data such as your IP address, browser type, and access time in server logs, and uses it to deliver the site securely and defend against attacks.

This processing is based on my legitimate interest (Art. 6(1)(f) GDPR) in providing a secure and efficient website. Cloudflare processes data under the EU-U.S. Data Privacy Framework and standard contractual clauses; a data processing agreement is in place.

4. Cookies and Consent

Essential cookies required for the site to function are always active. Optional cookies (analytics) only load after you consent via the cookie banner. You can change or withdraw your choice at any time via the cookie settings link in the footer.

5. Web Analytics (Google Analytics 4)

With your consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland), to understand how visitors use the site, including clicks on outbound partner links.

This processing occurs only with your explicit consent (Art. 6(1)(a) GDPR), which you may revoke at any time via the cookie settings. Without consent, no analytics cookies are set.

6. User Accounts and Login (Supabase)

If you create a free account to access gated guides, your email address and account profile are processed via Supabase (Supabase, Inc., 970 Toa Payoh North, Singapore). Login works through a magic link sent to your email; no password is stored.

Processing is necessary to provide the account you requested (Art. 6(1)(b) GDPR). You can request deletion of your account at any time via the contact address above.

7. Transactional Email (Resend)

Emails that the site sends to you directly, such as login magic links, are delivered via Resend (Resend, Inc., San Francisco, CA, USA). Resend processes your email address solely to deliver these messages (Art. 6(1)(b) GDPR).

8. Newsletter (Kit)

When you subscribe to my newsletter or request free resources, your email address is processed via Kit (Kit.com, formerly ConvertKit), my email marketing provider.

Subscription uses a double opt-in process. Your consent (Art. 6(1)(a) GDPR) can be withdrawn at any time via the unsubscribe link in every email.

9. Comments

If you post a comment, I store the name you enter, the comment text, and the time of submission. To prevent spam and abuse, your IP address is stored only as a truncated cryptographic hash that cannot be converted back into the address, and the comment form is protected by Cloudflare Turnstile (see section 10).

This processing is based on my legitimate interest (Art. 6(1)(f) GDPR) in operating a public comment section free of spam. You can request deletion of your comments at any time.

10. Bot Protection (Cloudflare Turnstile)

Forms on this site are protected by Cloudflare Turnstile, which checks whether a request comes from a human without using tracking cookies. Turnstile processes technical browser signals for this purpose, based on my legitimate interest (Art. 6(1)(f) GDPR) in preventing automated abuse.

11. Affiliate Links

Some outbound links to prop trading firms are affiliate links, routed through first-party redirect URLs on this domain (paths beginning with /go/). The redirect itself does not set cookies. If you have consented to analytics, the click is counted as an anonymous event in Google Analytics. Once you reach a partner's website, that partner's own privacy policy applies.

12. Your Rights Under GDPR

You have the right to:

Request access to your personal data (Art. 15 GDPR)
Request correction of inaccurate data (Art. 16 GDPR)
Request deletion (Art. 17 GDPR)
Request restriction of processing (Art. 18 GDPR)
Request data portability (Art. 20 GDPR)
Object to data processing (Art. 21 GDPR)
Withdraw your consent at any time (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a data protection authority.

13. Data Security

All connections to this website are encrypted via TLS (HTTPS). I implement technical and organizational measures to protect your data from unauthorized access, loss, or misuse.

14. Updates to This Privacy Policy

I revise this policy when the services used or legal requirements change. The date at the top of this page reflects the latest revision.