Privacy Policy

Last updated: July 1, 2026

MrStockTrader is operated by apps4myself.com ("apps4myself.com," "the Company," "we," "us," or "our"). This Privacy Policy explains what information apps4myself.com collects through the MrStockTrader service, how we use it, and the choices you have. It applies to your use of the MrStockTrader website and any related services apps4myself.com offers.

1. Information we collect

We collect only what is necessary to operate the service:

• Account information. Your chosen username, email address, and a salted bcrypt hash of your password. We never store your password in plain text.
• Alpaca API credentials. The API key and secret you paste into the dashboard, stored on our server encrypted with AES-256 plus an HMAC integrity tag. The plaintext keys are never displayed back to you and never written to logs.
• Trading preferences. Your selected trading hours, schedule, and per-mode (paper/live) configuration.
• Operational logs. Standard web-server logs (IP address, user agent, request timestamps), session cookies, and application-level events such as login successes and connection-test results.
• Brokerage data we retrieve on your behalf. When the engine or dashboard calls your broker (Alpaca) using your encrypted keys, the responses (account balances, positions, orders) are displayed to you and may be cached briefly in memory or in your session. We do not sell or share this data.

2. Information we do NOT collect

• We do not collect your government ID, social-security number, or full bank-account details. That information lives with your broker, not with us.
• We do not run advertising trackers or sell data to advertisers.
• We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

3. How apps4myself.com uses the information

We use the information only to:

• Authenticate you when you log in.
• Call your broker on your behalf, with your encrypted keys, to display account information and place orders you have authorized.
• Honor your trading-hours and schedule preferences in the engine.
• Diagnose problems and improve the reliability of the service.
• Comply with legal obligations.

4. How we secure the information

• Passwords: hashed with bcrypt (industry-standard one-way hash). We cannot recover or display your password.
• Alpaca keys: encrypted at rest with AES-256-CBC and an HMAC-SHA256 integrity tag. The master encryption key lives outside the website folder so a routine "nuke and re-upload" of the site cannot expose it.
• Transport: the website is served over HTTPS where supported by the deployment.
• Filesystem: data files are stored outside the document root and protected by .htaccess deny rules in case of misconfiguration.

5. Sharing

apps4myself.com does not sell or rent your personal information. We only share information with:

• Your broker (Alpaca), to execute the API calls you have authorized.
• Service providers strictly necessary to run MrStockTrader (hosting, email, DNS), under contract terms that prohibit them from using the data for other purposes.
• Other apps4myself.com products you choose to use, but only the minimum information needed to operate them, and only if you explicitly link the accounts.
• Law enforcement or regulators when required by a valid legal request.

6. Cookies

MrStockTrader uses a single session cookie ("stocksess") to keep you logged in. apps4myself.com does not use third-party advertising or analytics cookies on this service. You may disable cookies in your browser, but then login will not work.

7. Your rights

You have the right to:

• Access the data apps4myself.com holds about you (visible in the dashboard).
• Update your email address and password from the Settings modal.
• Erase your Alpaca keys at any time by clearing them from the Alpaca tab and clicking Save.
• Delete your account. Contact apps4myself.com via the support channel; we will remove your account record and your encrypted Alpaca keys from our storage.

8. Data retention

apps4myself.com retains your account record while your account is active. When you delete your account, we remove your record from the user store within a reasonable time, except where law requires us to retain certain operational logs for a longer period.

9. Changes to this policy

We may update this Privacy Policy as the service evolves. The "Last updated" date at the top of this page will change accordingly, and material changes will be highlighted on the dashboard.

10. Contact

For questions or requests under this policy, contact apps4myself.com through the support channel listed on the website.