What we store, and what leaves your machine

The website

The waitlist

If you sign up for the waitlist, we collect your email address and nothing else. It is used for one purpose: telling you when the beta opens and when Syncopy launches. No newsletter, no marketing sequence, no sharing or selling to anyone. You can ask us to delete it at any time by mailing hello@syncopy.app, and every launch email carries an unsubscribe link.

The form is provided by Tally, a Belgian company that stores form responses encrypted within the EU. Tally acts as our processor: they hold the data on our behalf and do not use it for their own purposes. If the product never launches, the list is deleted rather than repurposed.

Analytics

We use Cloudflare Web Analytics to see how many people visit and which pages they read. It sets no cookies, does no fingerprinting, and does not follow you across other websites. We see aggregate counts — page views, referrers, countries, load times — not individuals. That is why this site has no cookie banner: there are no tracking cookies to consent to.

Hosting

The site is hosted on Cloudflare. Like any web host, Cloudflare processes the IP address of incoming requests to serve pages and block abuse. Fonts are loaded from Google Fonts, which means Google receives the request for the font file.

The application

Syncopy is a desktop application. There is no Syncopy server in the middle of your trading: the app talks to Tradovate directly from your machine, the same way your trading platform does.

What stays on your computer

• Your broker credentials. Stored encrypted at rest using Windows' own DPAPI, tied to your Windows account. They are sent to Tradovate to log in, and nowhere else.
• Your trades, positions, balances and P&L. Held in a local database file on your machine. We never receive them.
• Your logs and journal notes. Rolling log files on disk. The diagnostics export is a file you save yourself and choose whether to send to us for support.

Which connections the app makes

This is the complete list. There is no analytics, telemetry or crash-reporting library in Syncopy — not in the Rust backend and not in the frontend.

• Tradovate (demo.tradovateapi.com, live.tradovateapi.com, md.tradovateapi.com, trader.tradovate.com) — your broker. Login, orders, fills, balances and market data. This is the connection that makes the product work.
• Cloudflare's public DNS resolver (1.1.1.1) — before opening a websocket, Syncopy resolves Tradovate's hostname over DNS-over-HTTPS, because relying on the machine's own resolver turned out to be a source of dropped connections. Cloudflare sees your IP address and which Tradovate hostname you are resolving. No account data is involved, and if the lookup fails the app falls back to your operating system's resolver.
• updates.syncopy.app — a version check at startup and once an hour, so you get fixes without hunting for them. The request tells our server your IP address and which version you are running, the same as any software updater.
• events.syncopy.app — a public economic-calendar file used to mark high-impact news days in the calendar. The app only downloads it; nothing about you is sent.

Once the paid version ships, your licence key will be validated against our server. We will update this page before that happens rather than after.

Your rights

Under the GDPR you can ask what we hold about you, ask for a copy, ask for corrections, and ask for deletion. For the waitlist that means one email address, and one mail to hello@syncopy.app settles it. You also have the right to complain to the data protection authority in your own country.

Controller: Syncopy, contact hello@syncopy.app.