This policy explains what information Polarisor handles when you visit polarisor.com, contact support, buy Polarisor Proof, or use the application. It describes the current behavior of the website and of the application, and it distinguishes your trading and journal data, which stays on your computer, from the technical information that activating and checking a license will involve.
1. Who we are
Polarisor is the brand under which Polarisor Proof is published. The controller of the personal data described in this policy, that is, the person who decides why and how it is processed, is Orest Palamar, sole proprietor, Ukraine. For any question about this policy or your data, write to support@polarisor.com.
2. The website
polarisor.com is an informational site served through Cloudflare. It does not use analytics, advertising, or tracking cookies, and it does not build visitor profiles. To deliver and protect the site, Cloudflare processes technical connection data, such as your IP address, browser type, and the pages requested, under Cloudflare's own privacy policy, and may set strictly technical cookies when it runs a security check.
The site uses a cookie named lang to remember your language, so that the page shown after a purchase is in the same language. It holds a single value – en, uk or ru – contains nothing that identifies you, is not used for analytics or advertising, and expires after one year. Changing the language replaces it; clearing your browser's site data removes it.
During the purchase flow, __Host-polarisor-purchase links this browser to a purchase session so it can show the purchase result and licence key and request the key by email again. It lasts for up to 24 hours from creation of that session; setting it again does not extend that deadline. Returning from checkout may also set __Host-polarisor-return for up to 10 minutes to link the return to this browser and allow a retry if the response is lost.
These two cookies contain secret identifiers linked to purchase records on the server, rather than a name, email address or licence key in plain text. They are not anonymous. You can remove them in your browser; their expiry does not by itself mean that the related server records have been deleted.
The waitlist form at polarisor.com/early asks only for your email address. Along with it we record the language of the page it was left on. We pass them to MailerLite, which keeps the list and sends these letters on our behalf. MailerLite first sends one letter asking you to confirm the address, and nothing else is sent to it until you do. We use the list only to send you emails about the launch of Polarisor Proof with the purchase terms, and product news. By clicking the button in the confirmation letter, you agree to receive these letters and to MailerLite recording when they are opened and which of their links are followed. MailerLite also records whether a letter was delivered, as part of sending it. You can withdraw your consent at any time, with the unsubscribe link in every letter or by writing to support@polarisor.com; the address then receives no more of these letters. An address that is not confirmed within 30 days is deleted. A confirmed address is kept until you unsubscribe; after that it stays on the list only marked as unsubscribed, so that no more letters go to it.
3. Contacting support
When you email support@polarisor.com, we receive your email address, any name you include, and the content of your message, including attachments. We use this only to answer you and to handle your request, for example a question about a license, an activation, or a refund. Support correspondence is kept for as long as needed to resolve the request and to handle related follow-ups. Our email is delivered through third-party email service providers; outbound support mail is sent through Brevo, and so is our licensing mail – the message that carries your license key, and the message that tells you a license has been revoked.
4. Buying Polarisor Proof
Purchases are processed by Creem, which acts as Merchant of Record. Creem collects your payment and billing details, issues the invoice, and calculates, collects and remits applicable VAT, sales tax and other indirect taxes on the transaction, under its own privacy policy and the Creem Buyer Terms. We do not receive your full payment card details. From Creem we receive the information needed to deliver and support your license: your email address, the name you entered if any, your country, and the order and payment details we need. Creem is the Merchant of Record and the authority on whether a payment has been made; it does not issue your license key. The key is created by the Polarisor licensing service. We keep order and license records for as long as your license is valid and for as long as tax and accounting law requires.
5. Your trading and journal data
Everything you enter into Polarisor Proof – trades, strategies, checklists, rules, tags, notes, and the screenshots you attach – is stored locally on your computer in the application's data folder. The application does not upload your trading or journal data to Polarisor or to anyone else. This also means we cannot see, recover, or restore your journal; please keep your own backups.
6. License activation and checks
Activation is not yet available. Polarisor Proof does not yet contact the Polarisor licensing service, and no license data is sent from the application today.
This is what will be involved once activation is available, so that you know before you buy. Activating a copy will send the license key, so that the license can be recognised, together with the name of the computer and the type of operating system it runs – that description is there so you can tell your own activations apart when you need to move one. The confirmation sent back will record the name and email address from your purchase, the date of the activation, and a reference number for it. Afterwards the application will check by itself that the license is still valid, and that check will identify the license and the activation without sending the license key. Where a change needs your approval – moving an activation when all three are in use, for example – the licensing service will write to the email address on the license. As with any network request, infrastructure providers may process technical connection data, such as the IP address and the time of the request.
Your trading and journal data is not part of any of this: it stays on your computer and is not sent to us. Polarisor Proof does not collect or transmit data about how you use it – which screens you open, what you click, or how long you spend in the application. It includes no usage analytics and no usage telemetry.
7. Update checks
Polarisor Proof contacts the Polarisor update service from time to time for a signed catalogue of versions. The request carries no trading data and no journal data. As with any network request, infrastructure providers may process technical connection data – the IP address, the time of the request, and connection metadata.
8. Why we process data, on what basis, and for how long
For each thing we do with personal data, this is why we do it, on what legal basis under the GDPR, and how long we keep the data.
- Delivering and protecting the website (Cloudflare). Basis: our legitimate interest in a working, secure website. Kept: technical logs only as long as needed for security and for fixing faults.
- The cookies described in section 2. They are strictly necessary for what you asked for: the language you chose and the purchase you started. Basis: the contract, or our legitimate interest for the language cookie. Kept: the cookie lifetimes are given in section 2; for the server records linked to them, see the purchase item below.
- The waitlist (MailerLite). Basis: your consent. Kept: as described in section 2.
- Answering you in support. Basis: the contract, when you write about a purchase or a license; otherwise our legitimate interest in answering you. Kept: as described in section 3.
- Completing a purchase: showing the result and resending the key. Basis: the contract. Kept: the purchase session record only as long as needed to complete the purchase and deliver the key; after that only the order and license record remains.
- Issuing, activating and checking the license. Basis: the contract. Kept: while the license is in force; after it ends, only as long as needed for our records and to deal with claims.
- Order records and taxes. Basis: a legal obligation. Kept: for the periods set by tax and accounting law.
- Revoking a license after a full refund, and preventing misuse. Basis: our legitimate interest. Kept: as long as needed for that purpose.
- Update checks. Basis: our legitimate interest in delivering updates, including security updates. Kept: technical connection data only for a short period, as for the website.
9. Third parties we use
- Cloudflare – the website, the download and licensing infrastructure, DNS, content delivery, and security.
- Creem – payment processing, invoicing, and indirect taxes on the transaction, as Merchant of Record and the authority on whether a payment has been made. Creem does not issue or administer Polarisor license keys.
- Brevo – delivery of outbound support email and of licensing email: the license key, and notice that a license has been revoked.
- MailerLite – the waitlist at polarisor.com/early: keeping the list and sending the confirmation letter and launch news to the addresses on it. For our account the processor is MailerLite, Inc. (USA). It stores the list in data centres in the European Union, but may process it outside it; such transfers are covered by the Standard Contractual Clauses in MailerLite's data processing agreement.
Creem processes purchase data as a separate controller, for its own purposes and under its own privacy policy; the data it passes to us we process as controller, for the purposes in section 8. Cloudflare, Brevo and MailerLite are processors: they process data on our behalf, under data processing agreements.
We are based in Ukraine. Where personal data is transferred to us, or to our providers, outside the European Economic Area, the safeguards provided for in Chapter V of the GDPR apply: for our processors, the Standard Contractual Clauses approved by the European Commission in their data processing agreements; purchase data is passed to us by Creem, as a separate controller, on its own terms. To get information about these safeguards, write to support@polarisor.com.
We do not sell personal data and do not share it with anyone else, except where the law requires it.
10. Your rights and how to contact us
Depending on where you live, you may have rights under data protection law, in particular to: access your personal data and get a copy of it; have inaccurate data corrected; have it deleted; restrict its processing; object to processing based on our legitimate interest; receive the data you gave us in a commonly used, machine-readable format; and withdraw your consent at any time, which does not affect processing before the withdrawal. To exercise any of these rights, write to support@polarisor.com. You also have the right to lodge a complaint with a data protection authority, in particular in the country where you live or work; in Ukraine, with the Ukrainian Parliament Commissioner for Human Rights. Requests concerning payment data held by Creem may need to be addressed to Creem; we will help you get there.
11. Changes to this policy
We may update this policy when the website, the application, or our providers change. The current version is always published at polarisor.com/privacy with its date.