Privacy Policy
Last updated: October 4, 2026
Minimum data by default. Plain language. 11XLAB is a personal trade journal / analytics product — not a prop firm, broker, or investment service.
Who handles your data
Accounts, journal data and sessions are processed to run the service at https://11xlab.trade. Contact: support@11xlab.trade.
What we collect
Normal mode (email or Google sign-in)
- Email address
- Salted hash of IP (session security only — not raw IP)
- Display name if you use Google
- Exchange / wallet trading data you connect (read-only)
Private mode (recovery phrase)
- Public key derived from your phrase only
- No email, no IP, no session-linked personal identifiers
- Trading data you connect
When you top up credit
- The sending wallet address and transaction hash, which are public on-chain anyway
- Any wallet you link by signing a message, so its deposits are credited to you
What we do with it
- Show your journal, metrics, and tags back to you
- Sync closed trades with the read-only credentials you provided
- Send transactional email (sign-in links, access codes, billing notices) via Resend
- Credit your deposits and run Pro
What we do NOT do
- No selling personal data
- No adtech / third-party analytics trackers
- No investment advice or trading signals based on your data for third parties
- No access to your exchange funds (read-only keys / public wallets only)
Where it lives
Application database: PostgreSQL on servers in Germany (Hetzner Falkenstein). Exchange API secrets are encrypted (AES-256-GCM) before they are stored. The processors below handle their part under their own terms.
Retention
- Active accounts: while the account exists
- Deleted accounts: from Settings you can delete your own account. That removes the login, journal, notes, sessions, and exchange credentials. Backups overwrite within ~60 days.
- Payment records (the credit ledger and on-chain deposits) stay after deletion, with the account link removed, for as long as tax and accounting law requires. The sending wallet and transaction hash stay, because they are already public on-chain.
Your rights (GDPR)
If you are in the EEA/UK, you can request access, correction, deletion, restriction, or portability, and complain to your DPA (in Slovenia: ip-rs.si). Signed in, Settings has a download of your trades and notes (JSON or CSV) and account deletion. Email support@11xlab.trade.
Cookies
One session cookie to keep you signed in. No third-party advertising cookies.
Processors
- Atlos — crypto payments. Privacy
- Stripe — card payments, when offered. Privacy
- Resend — transactional email. Privacy
- Hetzner — hosting
- Anthropic — AI tools used for development and support; may process account data when fixing problems. Privacy