Privacy
CrucibleTrade Privacy Policy
Effective July 25, 2026 · Kalman Software LLC
The short version: the CrucibleTrade app has no accounts, no cloud, no sync, and no telemetry. Your trades, notes, and reviews live in a database file on your own machine, and we never see them. The only network traffic the app generates is fetching price bars and ticker details — those requests carry ticker symbols and date ranges, never your positions, sizes, or P/L. This website counts page views with a cookieless analytics service that cannot identify you — details below.
Your trading record stays on your device
Everything you put into CrucibleTrade — imported fills, matched trades, setups, notes, mistake tags, playbook entries, account settings, and risk rules — is stored in a local SQLite database on your computer. There is no CrucibleTrade server. We have no copy, no access, and no way to see any of it. Backups exist only where you save them.
Deleting your data is entirely in your hands: remove the app and its data folder and it's gone. Nothing lingers on our side, because nothing was ever on our side.
Importing from your broker
CrucibleTrade reads trade history from files you export and choose — currently thinkorswim and Fidelity formats. It parses them on your machine and writes the results to your local database. It has no brokerage connection: no login, no linked account, no credentials, no API key to your broker. Nothing about an import is transmitted anywhere.
What the app sends over the network
To draw the price chart behind a trade and to fill in ticker details, CrucibleTrade
requests historical price bars from Yahoo Finance (via the
yfinance library) when you ask it to. Those requests go directly from your
machine to Yahoo; they never pass through a Kalman Software server. A request contains a
ticker symbol, an interval, and a date range. It never contains your position size, entry
or exit prices, P/L, account balances, notes, or anything identifying you.
Yahoo receives those requests under Yahoo's own privacy policy. Fetched bars are cached locally so the same range is not requested twice.
That is the complete list of outbound traffic. The app has no crash reporter, no usage analytics, no auto-update pinger, and it never "phones home." Run it with the network off and everything except fetching new price bars still works.
Buying a license
Checkout runs on Stripe, which acts as our merchant of record — it is the seller on the transaction, so it collects what a purchase requires (your name, email address, billing address and payment details) under its own privacy policy, and it owns the tax side. Your card number goes to Stripe and never to us; we can't see it or store it. From a completed order we receive your name, email address, billing country and state, and the order reference — which we use to generate your license key, email it to you, and support you afterwards. License emails are delivered via Resend.
Stripe being the seller of record means the transaction record is primarily Stripe's; we keep the smaller order record above. See the Terms of Sale for what you're buying and who from. Your key is also stored against your checkout session for 30 days so the page you land on after paying can show it to you — that entry holds your name, the product and the key, and nothing about payment.
The license key itself is verified offline, on your machine: activating CrucibleTrade contacts no server, and the app never reports usage, trial status, or anything else back to us.
This website
This site is a set of static pages served by
Cloudflare, whose
infrastructure keeps standard, short-lived server logs (IP address, user agent). We use
Cloudflare Web
Analytics to count page views. It is enabled at the edge rather than by a script in
these pages, and it reports to the same domain you are already visiting — so you may see
a request to /cdn-cgi/rum in your browser's developer tools. It is
cookieless, does not fingerprint you, and does not track you across
sites; we see aggregate counts, never individuals. This site sets no cookies at
all. Fonts are served from this domain, so the pages make no third-party
requests.
If you join the early-access list, the address you enter is stored on our Cloudflare infrastructure and emailed to us. We use it for one thing: the single note telling you CrucibleTrade has shipped. It is never shared or sold, and you can ask to be removed at any time — [email protected].
Children
CrucibleTrade is not directed at children and we do not knowingly collect information from anyone under 13.
Changes
If this policy changes in a way that affects what leaves your machine, the effective date above changes with it. Because the app collects nothing, we expect updates to be rare and to concern new optional data sources rather than new collection.
Contact
Questions about privacy, or anything else, reach the person who built it:
Kalman Software LLC · [email protected]