Privacy Policy

DayTradingToolkit.com is an independent educational website operated by Kazi Mezanur Rahman. This policy covers information processed when you browse the public website, use its interactive tools, submit a form or comment, join the newsletter, follow a tracked link, or complete a manually assigned security challenge.

For privacy questions or requests, email Hello@daytradingtoolkit.com.

We process information you choose to submit. This includes an email address for newsletter signup; name, email address, inquiry type, and message for the contact form; and name, email address, and comment text when you comment. Comment email addresses are used for moderation and are not displayed publicly.

TapeReadr stores submitted trading decisions, confidence, entry, stop or target values when applicable, scores, and feedback. If you save a score to the public leaderboard, the display name you choose is stored and may be shown publicly.

Please do not submit payment-card details, government identifiers, account credentials, precise location, or other sensitive information through public forms or comments.

Our first-party systems may collect a visitor identifier, session identifier, page path and title, landing and exit pages, referrer, UTM campaign parameters, device type, browser, operating system, approximate country, timestamps, time on page, visible engagement, scroll depth, search terms, clicks, banner impressions, and interactions with site features.

We also process IP addresses, pseudonymous IP hashes, user-agent information, bot and crawler classifications, qualification signals, rate-limit events, and challenge results for analytics integrity, fraud prevention, troubleshooting, and security. A hash is pseudonymous, not necessarily anonymous, because it may still distinguish repeated activity.

Hosting and network providers also process ordinary request logs such as IP address, requested URL, timestamp, and browser information.

DayTradingToolkit operates its own analytics system to understand readership, traffic sources, page engagement, site searches, affiliate interactions, and promotional performance. It uses a browser-generated visitor ID and a 30-minute session ID together with server-side technical signals.

The system distinguishes qualified readers from known or suspected automated traffic so crawler activity does not inflate reader analytics. High-velocity analytics evidence is review-only and does not itself label a visitor as a bot. Separately, the site security gate may require a human challenge after anonymous traffic exceeds an administrator-configured request allowance, when a crawler claim is disproved, or when an administrator assigns a manual challenge. Passing the challenge does not label the visitor as a bot.

The site currently uses Google Tag Manager to load Google Analytics and manage configured Google tags. Google Analytics may collect page and session statistics, approximate location, browser and device information, page URLs, titles, and interaction events, and may set first-party cookies such as _ga and _ga_<container-id>. The exact data and duration depend on the active Tag Manager container, Google property settings, consent settings, and browser controls.

Google Tag Manager is a delivery system; tags configured inside the container may send data to their own destinations. DayTradingToolkit must review the published container when tags change and update this policy if a materially different service is added. Do not submit email addresses or other directly identifying information in URLs because page URLs may be measured.

DayTradingToolkit uses dtt_visitor_id in local storage and a first-party cookie, refreshed for up to one year, to recognize a browser for first-party analytics. dtt_session_id is held in session storage and rotates after about 30 minutes of inactivity. A short-lived, signed dtt_bg security cookie confirms that a browser completed the first-party pageview flow, allowing internal Next.js navigation requests to be counted as one page instead of many. It does not bypass a challenge.

Local or session storage is also used for features such as saved articles, reading progress, TapeReadr sessions, finder answers, reaction or upvote choices, and dismissal of newsletter or promotional panels. Much of this preference data stays in your browser unless you submit a related action to the site.

A browser that passes a Turnstile check receives a signed dtt_ch cookie for the pass duration configured by an administrator, so that verified browser is not challenged repeatedly during that period. Google and destination sites may set their own cookies as described in their policies.

Newsletter email addresses are sent to Brevo so subscriptions, campaigns, and unsubscribes can be managed. Contact-form details are sent through Brevo's transactional email service to the DayTradingToolkit inbox. A pseudonymous analytics event may also record that a form was submitted, without storing the form message in the analytics event.

Comments are stored for moderation with the submitted name, email, text, IP address, user agent, status, and timestamps. Approved comment names and text may be public; email, IP, and user-agent fields are not displayed publicly.

TapeReadr attempts and optional leaderboard profiles are stored in the DayTradingToolkit database. Search queries, reactions, and feedback may also be stored with session or pseudonymous identifiers to operate the feature and prevent duplicate or abusive activity.

Some outbound links are affiliate links. DayTradingToolkit records information such as the source page, destination domain, partner or promotion identifier, link placement, session or visitor association, device category, approximate country, pseudonymous IP hash, and whether a click appears duplicated or automated.

After you leave DayTradingToolkit, the destination website receives the normal information sent with a web request and may set its own cookies or record referral parameters. Its privacy policy controls what happens there. DayTradingToolkit does not receive your payment-card details merely because you use an affiliate link.

We disclose information only as reasonably necessary to operate, measure, protect, and communicate through the site. Current categories include:

• Hostinger for website, database, and infrastructure hosting.
• Google for Tag Manager and Analytics measurement.
• Brevo for newsletter contacts and transactional email.
• Cloudflare Turnstile when the security gate or an administrator requires a challenge; the challenge token and, when available, IP address are sent for verification.
• YouTube or Vimeo when a page loads an embedded video from those providers.
• Affiliate partners when you choose to follow a link to their website.

Information may also be preserved or disclosed when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or complete a business transfer, subject to applicable requirements.

We use information to deliver requested pages and features, respond to messages, moderate comments, send subscribed email, maintain TapeReadr and saved interactions, understand site performance, attribute affiliate activity, improve traffic-source reporting, detect bots or abuse, protect the platform, and meet legal obligations.

The legal basis depends on the activity and applicable law. It may include your consent, taking steps you request, our legitimate interests in operating and securing a free publication and measuring its performance, and compliance with legal obligations. Where consent is required, you may withdraw it without affecting processing already carried out lawfully.

DayTradingToolkit does not sell personal information for money and does not knowingly provide personal information to data brokers. The site earns revenue through disclosed affiliate relationships and promotional placements.

Some privacy laws define sale or sharing more broadly than an exchange for money. Depending on the active Google tag configuration, affiliate technology, applicable law, and how a provider uses data, certain transfers may be treated as sharing. You may contact us to exercise an applicable opt-out right; we will review the request and the relevant configuration.

Retention varies by record and may be shortened through cleanup or a valid request:

• Raw IP addresses attached to ordinary analytics visits are normally removed after 7 days, leaving a pseudonymous hash.
• High-volume heartbeat, scroll, and banner-detail actions are normally kept for 7 days. Pageview, search, and banner-impression reporting records are normally kept for up to 180 days. Affiliate-click and general visit records may be kept for up to 365 days.
• Untagged high-velocity review records are normally removed after 30 days. An IP record with an active manual bot or challenge tag may remain while needed for security, challenge history, or review.
• Newsletter records remain with Brevo until unsubscribe, deletion, or another applicable retention event. Comments, moderation records, correspondence, TapeReadr attempts, and leaderboard profiles are kept while needed for the feature, the published record, security, or legal purposes.
• Providers may retain their own logs and analytics according to their settings and policies. Aggregated reports that no longer identify a visitor may be kept longer.

DayTradingToolkit and its providers may process information in countries other than your own. Those countries may have different data-protection laws. Where required, a provider or operator may rely on contractual safeguards, an adequacy mechanism, consent, or another lawful transfer basis.

You can unsubscribe through the link in a newsletter. You can delete or block cookies and browser storage through browser controls, although some preferences or measurements may stop working. Google also offers controls and a browser add-on for Analytics.

Depending on where you live and whether a law applies, you may have rights to know or access personal data, correct it, delete it, receive a portable copy, restrict or object to processing, withdraw consent, opt out of certain sale or sharing, limit certain uses of sensitive data, or complain to a regulator. California law may also protect you from discrimination for exercising applicable rights.

Email Hello@daytradingtoolkit.com with the subject Privacy Request. Describe the right you want to exercise and the information or feature involved. We may request proportionate information to verify identity and protect another person's data, and legal exceptions may apply.

The site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child submitted personal information, contact us so the record can be reviewed and, where appropriate, deleted.

We use measures appropriate to the size and nature of the site, including HTTPS, access controls, input validation, rate limits, audit records for sensitive administration, short raw-IP retention for ordinary analytics, and bot or crawler review.

No website, provider, database, or internet transmission can be guaranteed completely secure. Do not send confidential trading credentials, brokerage statements, or highly sensitive information through public forms.

We may update this policy when site features, service providers, data practices, or legal requirements change. The date at the top shows the latest substantive review. Material changes will be published on this page; prior wording may be retained internally for accountability.

Questions, objections, deletion requests, or corrections about this policy can be sent to Hello@daytradingtoolkit.com. Include enough detail to locate the relevant record, but do not email passwords, financial account credentials, or identity documents unless we specifically request a safe verification method.