Privacy Policy

ForexCracked (forexcracked.com, and our other official domains fxcracked.com and justforforex.com) is run by FXC Group. In this policy, "we", "us" and "our" mean FXC Group. We decide how and why your personal data is used, which makes us its "controller".

Contact for anything in this policy: [email protected].

2.1 When you visit the site

• Connection data. Every request passes through Cloudflare (security and delivery) and reaches our web host. Both see your IP address and browser details. Cloudflare tells us which country your IP address is in, and we use that to show content for your country, such as brokers that accept clients there. We do not store the country for this.
• Analytics. Google Analytics records the pages you view, how you arrived, your device and browser, and your approximate location.
• Advertising partner tags. On most pages, tags from Google Ads, Meta (Facebook) and AdRoll run on behalf of an advertising partner. They let the partner measure its ads and show you its ads later on other sites ("remarketing"). They do not run on our Learn and FXC Foundry pages, the account page or order pages.
• Searches. We keep what you type into the site search, with a one-way code made from your IP address and browser, for 90 days. We use it to show trending searches and to see what people look for.
• Broker link clicks. When you click a broker link, we record which broker, where on the page, your country, and a one-way code made from your IP address.
• "Is this still working?" votes. We store a one-way code made from your IP address, so each person votes once.
• Downloads. When you download a file we host, our download system records your IP address and browser. Some downloads are hosted elsewhere (Google Drive, Dropbox, MQL5 or freeforexdownload.com). For those, your browser connects to that site directly.
• Where you came from. If you arrive from an ad link, a cookie remembers the ad source for 90 days. If you buy something, we save that source with your order, so we know which ads work.
• Fonts, libraries and embeds. Pages load fonts from Google Fonts and code libraries from unpkg, cdnjs and jsDelivr. Some pages embed YouTube videos or TradingView charts. The language switcher uses Google Translate. These providers see your IP address when your browser loads their files.

2.2 When you join the newsletter or a waitlist

We keep your email address, your name if you give it, which form you used, the date, and your IP address at the time. Our email provider, Mailtrap, sends the emails. After you join, you get a welcome email and a few follow-ups over the first two weeks.

When you open or click an email, Mailtrap tells us. It also tells us your approximate location (country and city) and the email app you use. We use this to see which emails are useful.

Every newsletter has an unsubscribe link. When you unsubscribe, we keep your address marked "unsubscribed", so we never email you again by mistake. Waitlists (for example an FXC Fusion drop or the FXC Terminal) work the same way.

2.3 When you create an account

• Signing in. You sign in with your email address (by password or a one-time link) or with Google. Our account provider, Supabase, stores your password in a scrambled form that we cannot read. With Google, we receive your email address, name and profile picture. Your Google picture becomes your avatar unless you choose another one.
• Your profile. You can set a display name, a username and an avatar. If you don't pick a username, we make one from the part of your email address before the "@". Uploaded avatars are re-saved without the photo's hidden details, such as location. If you have no picture, we generate a pattern avatar from a scrambled form of your email.
• What is public. Once you post a comment while signed in, your profile page at /user/your-username becomes public. It shows:
  • your display name, avatar, rank, title and badges;
  • your comment count, points and the month you joined;
  • your approved comments.

We ask search engines not to list profile pages.

• Accounts made when you buy. If you buy without an account, we create one for your order email, so you can reach your licence.
• Settings. We keep your preferences, such as time zone and layout, for the FXC Terminal app.
• Emails. Sign-in and account emails are sent through Mailtrap.

Your email address is never shown publicly.

2.4 When you comment, upload, vote or review

• Comments. We keep your name, email address and comment. The name and comment are public; the email never is. Like every WordPress site, we also store your IP address and browser details with each comment, for spam checks. To filter spam, comments are checked by Akismet (Automattic). It receives your name, email, IP address, browser details and the comment.
• Reply emails. If the "email me when someone replies" box is ticked, we email you replies to your comment. Each email has a one-click unsubscribe.
• Images. Images you attach to a comment are public. They may still carry hidden details your camera or phone added, such as the location where the photo was taken. Please remove those before uploading.
• Files (set files, indicators, EAs, archives):
  • stored privately and given to other visitors once your comment is approved;
  • to count downloads, we use a one-way code from the downloader's IP address and browser, kept for 6 hours.
• Upvotes. We record who voted. Others see only the totals.
• Points and ranks. We keep a record of the points you earn.
• Reviews in comments:
  • star reviews on posts are public;
  • if you edit one, earlier versions stay visible;
  • you can delete a review within 7 days, as long as nobody has replied.
• Claiming old comments. If you sign in with a confirmed email address, you can link comments you wrote earlier under that email to your account.
• FXC Foundry product reviews. We keep your rating, text and display name, linked to your account. Reviews of paid products are marked as from a verified buyer. We keep earlier versions of an edited review, but don't show them.
• Broker reviews. We keep your name, email, ratings, review text, IP address and browser details. Only the name, ratings and text are shown. If your email has a Gravatar picture, we show it, which sends a scrambled form of your email to Gravatar (Automattic).
• "Helpful" votes on broker reviews. We combine a random cookie ID and your IP address into a one-way code, so each person votes once.

2.5 When you ask us for something

• Support tickets. We keep:
  • your email, message and attachments;
  • the product details you give (platform, plan, version);
  • your browser details;
  • a one-way code made from your IP address, to limit spam.

Our staff read tickets in our admin area and in our support inbox.

• Broker review requests. We keep the broker, your reason, your email, IP address, country and browser details, and email the request to our team.
• Tool requests. We keep your name, idea, email, IP address and the page you came from.
• Advertising enquiries. We keep your name, email, company, website, budget, the placements you picked, your message and your IP address. We also email them to our team.
• Contact forms and email. When you write to us, we keep what you send.

2.6 When you buy

• Card and PayPal. Lemon Squeezy sells our products for us as "merchant of record". It takes the payment, handles tax and sends your receipt. It sends us a record of the order, which we keep. The record has:
  • your name, email and billing address;
  • what you bought, the price, tax and discount;
  • basic payment details, which can include the card's last four digits.

We never receive your full card number. Your subscription page (cancel, change card, invoices) is run by Lemon Squeezy.

• Crypto. NOWPayments handles crypto payments. We send it the price and the product; it sends us the payment record. If you ask for a refund, we ask for a wallet address to send it to.
• Your licence. We keep your licence key, product, plan, status and dates. We also keep the MetaTrader accounts you use it on (account number, broker and server), up to 5 at a time. You can free an account slot yourself on your account page.
• Emails. We send your licence and any payment notices through Mailtrap.

We keep order and licence records for as long as we need them for your licence, refunds, tax and accounting, and to deal with fraud and chargebacks.

2.7 When you use our MetaTrader products

None of our products reads your MetaTrader password. None collects a hardware or machine ID.

Licence checks: FXC Fusion and paid FXC Foundry products

• When: each time the product loads on a chart, and about once a day after that.
• What it sends: your licence key, MetaTrader account number, broker, server name, the chart's symbol and timeframe, and the product's version and platform details.
• Why: to confirm your licence, keep it to 5 accounts, and spot a key that is being shared (for example, many accounts or many networks in a short time).
• What we log:
  • FXC Fusion: every check, with your IP address;
  • paid FXC Foundry products: only when an account is first added or a check is refused, with your IP address.

The log is deleted after 90 days. Paid FXC Foundry checks are also encrypted and signed. To answer quickly, Cloudflare keeps a recent answer under a one-way code for a few minutes, and for up to 3 days as a backup.

• Update checks: FXC Fusion asks about once an hour whether a new version exists, sending the product, version and account number. We don't store these requests, but they can appear for a short time in our providers' logs.

Free FXC Foundry indicators

Our free indicators collect analytics once your trading account is logged in. Cloudflare tells us your country from your IP address. We don't store your IP address for this, though Cloudflare keeps short-term logs of its own.

What we use it for:

• to count how many traders run each indicator (we publish these counts);
• to choose which sponsor card to show;
• to give sponsors campaign results, as totals only;
• to turn sponsor cards off for accounts that own one of our paid products.

If you own one of our paid products, we don't store analytics from your free indicators. We show you no sponsor cards, so we have no reason to keep them. Each report is only checked against your licence to keep the cards off, and nothing from it is kept.

When you click a sponsor card, we record the click (which account, card, indicator and day) for 90 days. Your browser then opens the sponsor's page directly.

We keep each account's analytics until 400 days after its last report, then delete them. There is no setting to switch the analytics off in the free indicators.

FXC Fusion EA: the Expert Advisor itself makes no internet connections.

2.8 FXC Terminal and the Journal (beta)

FXC Terminal and the Journal run at app.forexcracked.com, and only invited beta users can use them for now. They use your ForexCracked account (§2.3).

The FXC Terminal EA reads your MetaTrader account and sends it to your Terminal. It cannot place, change or close trades. It sends:

• account number, broker, server, currency, leverage, platform, and real or demo;
• balance, equity, margin and floating profit or loss, as they change;
• your full closed-trade history (on first run) and each new closed trade;
• deposits and withdrawals, including the broker's comment on them;
• open positions and pending orders. These include each order's "magic number", which identifies the EA that placed it. Order comments are left out, unless they start with "FXC:";
• symbol settings and your MetaTrader build.

It identifies you with a personal EA key that comes inside your download. Keep it private: anyone with your key can add their account to your Terminal. You can replace the key from the app.

What you add yourself:

• trade notes, moods, tags, playbooks, goals and rules;
• imported trades;
• prop-firm challenge details, including the fee you paid.

Share links show your account name and summary stats to anyone who has the link, until you delete it.

How long we keep it:

• live balance and equity: detail for 7 days, 5-minute steps for 90 days, hourly steps for 2 years;
• trade events: 13 months;
• sync logs: 30 days;
• everything else (trades, deposits, notes, reports): until you delete that trading account in the app or ask us to delete your account.

We also count how many connected accounts use each broker server. These counts have no account details and may be published.

2.9 Our browser extension

The FXC browser extension keeps your settings and recent rates on your own device. It loads rates from forexcracked.com and an economic calendar from Tradays (MetaQuotes). These see your IP address like any website. It sends us nothing else about you.

Cookies, and the browser's local storage, are small pieces of data a site keeps in your browser.

Your choice. These tags run when the page loads. You can block them with your browser's settings or a content blocker. We are adding a cookie choice for visitors in the EEA, UK and Switzerland.

We do not sell your personal data for money.

Service providers process data for us:

Others:

• Advertising partners. The partner tags in §2.1 send your visits to Google, Meta and AdRoll for the partner. Some laws, California's for example, count this as "sharing". You can block them with your browser's settings (§3).
• Sponsors of cards in our free indicators get totals only, such as views and clicks by day and country. They never get your account number.
• The public sees what you choose to publish: comments, reviews, your profile, and Journal share links.
• The law. We may share data when the law requires it, or to protect our users, our site or our rights.
• A new owner. If the site is ever sold, the data goes with it, under this policy.

• Our main database (Supabase) is in South Korea.
• Our website host (OVH) is in Germany.
• Our other providers work from the United States and other countries.
• We run ForexCracked from outside the European Economic Area and the United Kingdom, so we also manage your data from there.

These countries may not protect personal data in the same way as your own. We use providers who protect data under their own data protection terms.

Our providers keep their own logs for their own standard periods.

You can ask us to:

• give you a copy of the personal data we hold about you;
• correct it;
• delete it;
• stop using it, or limit how we use it, including for marketing (always, free);
• send it to you in a file you can reuse elsewhere.

Where we rely on your consent, you can withdraw it at any time.

How to ask. Email [email protected] from the address linked to your data. We may ask you to confirm it's you. We reply within 30 days, and it's free.

What you can do yourself:

• change your name, username and avatar in account settings;
• unsubscribe from any newsletter with the link in the email;
• free a licence slot on your account page;
• delete a trading account, and everything synced from it, in the FXC Terminal app;
• manage or cancel a subscription in your Lemon Squeezy subscription page.

There is no self-service button to delete your whole account yet. Email us and we will do it.

What we keep after deleting an account: records of orders and licences that we need for tax, accounting, refunds, fraud and chargebacks. Comments you posted stay on the site unless you ask us to remove them as well.

If you are unhappy with how we handled your data, you can complain to the data protection authority where you live.

• Connections: all connections to our site and our product API use encryption (HTTPS).
• Database: access rules limit each user to their own data.
• Licence checks: paid FXC Foundry products also encrypt and sign each check.
• Payments: card and wallet details stay with Lemon Squeezy and NOWPayments.
• Staff: only our team can open admin tools.

No system is perfect. If a breach puts your data at risk, we will tell you as the law requires.

ForexCracked is for adults. You must be 18 or older to use it, and we do not knowingly collect data from anyone under 18. If you think a child has given us their data, email [email protected] and we will delete it.

When we change this policy, we update the date at the top. If a change matters to how we use your data, we will say so on the site, or by email to account holders, before it takes effect.

[email protected]