At ZaellabFX, privacy is a design decision: the tools run in your browser, you do not need an account, and we do not store your balances or trades on any server. This policy explains what data is processed and why.
1. Data controller
The controller of this website is the owner of ZaellabFX. You can contact us about any privacy matter at contact@zaellabfx.com.
2. What data we process
Data you enter into the tools: balance, risk, prices, journal trades, etc. It is processed only in your browser and is never sent to our servers.
Data stored on your device: to remember your language, theme, recent calculations, favorite instruments and trading journal we use your browser’s local storage (localStorage). It exists only on your device and you can delete it at any time from your browser settings or with each tool’s delete buttons.
Technical data: like almost any website, the hosting provider may log technical connection data (IP address, date and time, requested pages, browser type) in server logs for security and operational purposes.
We do not collect visitors’ names, email addresses or payment details. If you email us, we will use your address and message content only to reply to you.
3. Third-party services
Advertising (Google AdSense): this site uses Google AdSense. Google and its partners may use cookies and identifiers to show ads, cap their frequency, measure their performance and, if you allow it, personalize them. In the European Economic Area, the United Kingdom and Switzerland, Google displays a consent message (a Google-certified consent management platform compatible with the IAB TCF standard) where you can consent, not consent or manage your options; if you do not consent, ads are limited to non-personalized ads or are not shown, as required by applicable law. More information in how Google uses data from partner sites or apps (policies.google.com/technologies/partner-sites) and in its advertising policy (policies.google.com/technologies/ads).
Exchange rates (Frankfurter): the “Use today’s rate” feature in some calculators and the EUR/USD chart on the home page query the public service api.frankfurter.dev, which publishes European Central Bank reference rates. In calculators the request is made only when you click the button; for the home chart, only when the data saved in your browser is more than a few hours old. As with any web request, that service may receive your IP address.
Fonts and resources: typefaces and other resources are served from our own domain; we do not load third-party fonts.
4. Legal basis
We process security-related technical data on the basis of our legitimate interest in keeping the site secure and available (Art. 6(1)(f) GDPR).
The use of advertising cookies or identifiers is based on your consent (Art. 6(1)(a) GDPR), which you can withdraw or change at any time via the “Cookie settings” link in the footer (where Google’s consent message is available for your region). Withdrawing it does not affect the lawfulness of prior processing.
Local storage of your preferences and tool data is necessary to provide the functionality you request.
5. Retention
Data stored in your browser remains until you delete it. Your advertising consent choice is stored and managed by Google through its consent platform, for the period it determines, before asking you again. Technical server logs are kept for the minimum time necessary according to our hosting provider’s policy.
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, as well as withdraw your consent, by writing to contact@zaellabfx.com. Since we do not keep user accounts or user databases, in many cases we will hold no data about you to provide; we will tell you so.
If you believe your rights have not been honored, you may lodge a complaint with your data protection authority.
7. Minors
This site is about trading and financial markets and is not directed at people under 18. We do not knowingly collect data from minors.
8. Security
We apply reasonable technical measures: encrypted connections (HTTPS), a strict Content Security Policy (CSP), security headers, no user databases and regular dependency updates. No system is infallible, but we keep exposed data to a minimum.
9. Changes to this policy
We may update this policy to reflect changes to the site or to regulations. The date of the last review appears at the top of this page.