Privacy policy

The short version

TripleBarrier collects the minimum a paid product needs: an email address to run your account, payment handled entirely by Stripe, and whatever you choose to paste into the audit. There are no analytics scripts, no ad trackers, and no cookies from us — your session lives in your own browser's local storage. We do not sell or share your data with anyone for advertising.

TripleBarrier is operated by RooFork LLC, Florida, USA. Anything this page promises, you can hold us to at hello@triplebarrier.com.

Account data

Creating an account takes an email address and a password. Authentication is handled by Supabase, our accounts provider: your password travels from your browser to Supabase directly and is stored there in hashed form — our servers never see it and could not read it if they did. Your signed-in session is kept in your browser's local storage, not in a cookie, and disappears when you sign out.

Account emails — signup confirmation and password reset — are sent through Supabase. We send no marketing email; there is no newsletter.

Payments

The $65 purchase happens on Stripe's hosted checkout page. Your card number goes to Stripe and only to Stripe — it never touches our servers, and we could not store it if we wanted to. What we keep on your account afterwards: your run credit, a record of the completed checkout (so a network retry can't double-charge or double-credit you), the purchase date, and Stripe's customer reference. Stripe processes your payment details under Stripe's privacy policy.

What happens to an audit submission

When you run the Backtest Audit, you paste a strategy description, backtest results, and optionally your code and a trade list or equity curve. Here is exactly what happens to it:

• Your submission is validated and its statistics are computed in memory on our server, then it is analyzed by our server-side AI pipeline under API terms that prohibit training on your data.
• What we store is the finished report and the first 500 characters of your strategy description (so you can tell your saved reports apart), attached to your account.
• The raw pasted material — your trade data and your code — is not written to our database. Once your run finishes, the report is the only copy we hold.
• Saved reports stay on your account until you delete the account or ask us to delete them. There is no automatic expiry.

We don't trade, and we don't use your strategy for anything except producing your report.

The free checklist

The Honest Backtest Checklist runs entirely in your browser. If you choose to enter an email to keep your result, we store that email with the grade, the score, and your answers — so the result is on record for you. That is the only thing the address is used for.

Server logs and rate limiting

Request IP addresses are used in memory to rate-limit abuse of our API endpoints; they are not written to our database. Our hosting infrastructure keeps standard, short-lived server logs (timestamps, request paths, errors) that we use to keep the service running.

The complete list of third parties

• Supabase — accounts, authentication, and the database where your saved reports live.
• Stripe — payment processing and receipts.
• Our AI provider's API — the server-side analysis of your submission, under terms that prohibit training on it.
• Our hosting provider — runs the site and keeps standard server logs.

That is the whole list. Nobody else receives your data.

Deletion and access

Email hello@triplebarrier.com from your account address to get a copy of your data or to have your account, saved reports, and any checklist record deleted. We act on verified requests promptly and confirm when it's done.

Changes

If what we collect or how we handle it changes, this page and the date at the top change with it.