Privacy Policy

Summary

This Privacy Policy covers every version of FibScanner — Fibonacci Setup Scanner: the Chrome extension (Chrome Web Store item ID ddfjenmgdeckhjllmmgoamhnpljogkhl), the Windows application, the Android and iOS apps, and the website fibonacciscanner.com. It explains what they collect, how that data is handled, where it is stored, and who it is shared with. It is published by Trader Extensions ("we", "us").

In plain English: FibScanner has no user account or login, runs its Fibonacci analysis locally on your own device, and contains no analytics, tracking, or advertising. To do its job it fetches public market data from exchanges and validates your licence; and it delivers alerts on your own device as browser or desktop notifications. We collect the minimum needed for those functions, and we never sell your data.

1. Data we collect

We collect only the categories of data listed below. Each entry states exactly what it is and why it exists.

Extension configuration & watchlist

The markets you choose to scan, timeframes, alert thresholds, sound choices, and interface preferences. You create this inside the extension; it is required for the extension to function. Note that the market symbols on your watchlist are sent to the market-data providers as part of each data request (see "Market data" below) — they are not personal data, but they do leave your device to fetch prices.

Free-trial sign-up (email)

If you start the 7-day free trial, we collect the email address you enter, a randomly generated device identifier created by the app on your device, the channel you signed up from (Chrome extension, Windows, Android or iOS), and whether you opted in to marketing emails. We use this only to run the trial — to issue and check your trial period, and to prevent the same person starting repeat trials. The random device identifier is generated locally and is not an advertising ID; it is not linked to any hardware identifier and cannot identify you on its own. This record is stored in Cloudflare Workers KV, our trial licensing service. We keep it for about 13 months from the start of your trial (so repeat trials can be prevented for a reasonable period), after which it is deleted. Marketing emails are sent only if you tick the opt-in box, and you can unsubscribe at any time. You can ask us to delete your trial record at any time by emailing [email protected]. If you never start a trial, none of this data is collected.

Licence & purchase data

If you buy a paid licence, our payment and licensing provider SureCart collects the email address you purchase with and processes your payment. We (and the extension) receive only your licence key, its subscription status, and the associated email address. We do not receive or store your full card number or bank details — those are handled by SureCart and its payment processor. The extension validates your licence by contacting api.surecart.com and our own site www.fibonacciscanner.com.

Market data (public, non-personal)

To find setups, the extension fetches candlestick/price data directly from public exchange and market-data APIs: Binance (data-api.binance.vision spot mirror and fapi.binance.com futures), Kraken, Hyperliquid, and Yahoo Finance. These requests contain only the market symbol and timeframe being scanned. As with any web request, your device's IP address is visible to these providers, who process it under their own privacy policies. No other personal information is attached.

Local/technical state

Transient scan state and cached results are held in your browser's session storage and cleared when you close the browser. Custom alert sounds you add are stored on your device only.

Website data (fibonacciscanner.com)

When you visit the website, our host and our CDN/security provider (Cloudflare) process standard technical data such as IP address and request logs to serve and protect the site, and the store/checkout uses cookies necessary for purchases. The extension itself also contacts www.fibonacciscanner.com for licence and product information (for example licence checks, the pricing page, and update notices). If you email us, we receive the contents of your message and your email address.

Sharing and links you trigger

The extension can open a new browser tab when you choose to — for example a pre-filled post on X (formerly Twitter) if you tap "share", or our website/pricing pages. These open a normal tab containing text you chose to share; the extension does not send your personal data to X and does not read anything from those pages.

Chrome permissions we request (and why)

The extension asks for the minimum permissions needed to work. Each is used only for the purpose below:

Any optional permission is requested only when you switch on the feature that needs it, and is used solely for that feature. The extension does not use any permission to read the content of your other tabs, your browsing history, or the pages you visit.

Every server the extension can contact

For full transparency, this is the complete list of remote servers the extension may connect to and what is sent to each:

What we do not collect

• No browsing history, and no reading of the content of your other tabs or the websites you visit.
• No analytics, telemetry, fingerprinting, or advertising identifiers — the extension bundles no analytics or tracking code.
• No account, password, or login inside the extension itself.
• No health, precise-location, contacts, or biometric data.

2. How we handle (use) your data, and our lawful basis

We use each category of data only for the purpose it was collected. Where UK/EU data-protection law applies, our lawful basis is shown in the last column.

We do not use your data for profiling, advertising, or any purpose unrelated to running the scanner and your licence.

3. How and where your data is stored (and for how long)

• On your device. Your configuration, watchlist, cached licence status, and alert sounds are stored on your own device — in the Chrome extension that is Chrome's extension storage (chrome.storage.local and chrome.storage.session); in the Windows, Android and iOS apps it is a local application data file. Session data is cleared when you close the browser or app; other local data persists until you delete it, clear it in the app, or uninstall.
• With SureCart (licence & payments). Your purchase record, email, and subscription status are stored on SureCart's servers for as long as your licence exists and as required for accounting, tax, and legal obligations.
• Trial records. If you start the free trial, your email, random device identifier, sign-up channel and marketing opt-in flag are stored in Cloudflare Workers KV (our trial licensing service) for about 13 months from the start of the trial, then deleted. You can request deletion sooner at any time.
• Sent, not stored by us. Market symbols go to the exchange/data APIs to fetch prices. We do not keep our own copy of your scanning activity.
• Website. Server and CDN request logs are retained only for a short period for security and troubleshooting. Support emails are retained for as long as needed to resolve your enquiry and keep a reasonable record.

We keep personal data only as long as necessary for the purposes above, then delete or anonymise it.

4. How your data is shared

We do not sell your data and we do not share it with advertisers or data brokers. Data is shared only with the parties listed in the "Every server the extension can contact" table above, and only for the stated purposes:

• SureCart — payment processing and licence management (privacy policy).
• Public market-data APIs (Binance, Kraken, Hyperliquid, Yahoo Finance) — receive the market symbol/timeframe and your IP, never personal profile data.
• X (x.com) — only when you tap "share"; a normal share link, no personal data sent by the extension.
• Cloudflare — content delivery and security for the website (privacy policy).

We may also disclose data if strictly required by law, or to protect our rights, safety, and the integrity of the service.

5. Chrome Web Store data-use certifications

In line with the Chrome Web Store User Data Privacy policy, we certify that:

• We do not sell or transfer user data to third parties, except in the limited service-provider and user-directed cases described above.
• We do not use or transfer user data for purposes unrelated to the item's single purpose (finding and alerting you to Fibonacci setups).
• We do not use or transfer user data to determine creditworthiness or for lending purposes.

6. Data security

All network requests use HTTPS. The extension runs under a strict content-security policy and requests the minimum Chrome permissions it needs, requesting optional and broad host access only on demand for a feature you turn on. Your settings and watchlist are held on your device; the personal data we can access is limited to your licence record. No method of transmission or storage is ever 100% secure, but we take reasonable measures to protect your data.

7. Your rights & choices

• Access, correct, or delete. You can view and edit your settings any time in the extension. To access or delete data held by SureCart (your purchase/licence record), or to ask us about any data, email [email protected].
• Turn off alerts. Alerts are delivered only on your own device; you can disable them at any time in the app or extension settings.
• Uninstall. Uninstalling the extension removes its locally stored data from your device.
• UK/EU (GDPR). You have the right to access, rectify, erase, port, or restrict processing of your personal data, to object to processing, and to withdraw consent at any time. You may also complain to your local data-protection authority (in the UK, the ICO).
• California (CCPA/CPRA). We do not sell or share your personal information, and we will not discriminate against you for exercising your privacy rights. You may request access to or deletion of your information via the contact address above.

8. Children

FibScanner is a tool for adult traders and is not directed to children. We do not knowingly collect data from anyone under 18 (or the age of majority where you live). If you believe a child has provided us data, contact us and we will delete it.

9. International data transfers

We are based in the United Kingdom. If you use the product from another country, your data may be processed in the UK, the EU, or the United States (where some of our service providers operate). Where personal data is transferred outside the UK/EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or the EU Standard Contractual Clauses, or on a provider's own adequacy status. You can request a copy of the relevant safeguard from us.

10. Changes to this policy

We may update this policy as the product or the law evolves. Material changes will be reflected by the "last updated" date below and, where appropriate, announced on the website. Continued use after an update means you accept the revised policy.

11. Contact

Questions, requests, or complaints about this policy or your data: [email protected], Trader Extensions, United Kingdom.