Privacy Policy
Last updated: March 18, 2026
1. Information We Collect
Account Information: Name, email address, username, country.
Trading Data: Trade history, account balance, equity, performance metrics — synced from your MT4/MT5 account via read-only API.
Usage Data: Pages visited, features used, timestamps (for improving the platform).
Device Data: IP address, browser type, operating system (for security and fraud prevention).
2. How We Use Your Information
We use your information to: (a) provide and improve the FXCup platform, (b) display your trading statistics on your profile and leaderboard, (c) send competition updates and alerts you've enabled, (d) detect and prevent fraud and abuse.
3. Trading Account Credentials
MT4/MT5 credentials are encrypted using 256-bit AES encryption. We store only your Investor (read-only) password. We never access your master password and can never place trades or withdraw funds.
Credentials are used exclusively to sync trade data and cannot be retrieved in plain text by any FXCup employee.
4. Data Sharing
We do not sell your personal data. We may share data with:
- Service providers (hosting, email delivery) under strict confidentiality agreements
- Law enforcement when required by applicable law
- Other users: only your public profile data (username, country, performance stats if you opt in to public profile)
5. Leaderboard and Public Profile
Your username and country are always visible on the leaderboard. Detailed performance statistics are only shown publicly if you enable "Public Profile" in Settings.
Dollar amounts are never shown publicly — only percentage returns.
6. Data Retention
We retain your data for as long as your account is active. When you delete your account (7-day grace period), all personal data is permanently deleted within 30 days.
7. Your Rights
You have the right to: access your data, correct inaccurate data, request deletion, export your data (via the Export feature in the dashboard), and withdraw consent at any time.
8. Cookies
We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.
9. Security
We implement industry-standard security measures including HTTPS encryption, secure password hashing (bcrypt), and regular security audits. However, no system is 100% secure — use a strong, unique password.
10. Contact
For privacy concerns or data requests, contact us at our contact page.