How we collect, use, and protect your information
Last updated: May 27, 2026
Registration data: email, nickname, password (bcrypt hashed). MT5 binding info: broker server name, account number, investor password (AES-256-CBC encrypted at rest). Trade data: historical deals, positions, account equity synced via MT5 API. Usage data: login times, action logs, AI review call counts (for quota management). We do NOT collect payment info, government IDs, geolocation, or other sensitive personal data.
(i) Display trade analytics and AI reviews in your personal dashboard. (ii) Show anonymized (email masked) stats on the public leaderboard and trader pages (enabled by default; can be disabled in Settings). (iii) Send sanitized trade statistics (excluding investor password, account number, etc.) to DeepSeek API for AI personalization. (iv) Send account security notifications via email (password changes, unusual login alerts). We never use your data for ads, sell it to third parties, or share it without your permission.
Investor passwords are stored AES-256-CBC encrypted with the master key kept separately from the database. Login passwords use PHP password_hash() bcrypt, irreversible. The entire site is HTTPS-only (TLS 1.2+). The server is on a dedicated VPS (IP 38.147.172.128) with only necessary ports open. fail2ban and periodic database backups are enabled.
We use cookies for: • tj_session: login session identifier (HTTPOnly, Secure, SameSite=Lax). • tj_lang: your interface language (zh / en). We do NOT use third-party tracking cookies, Google Analytics, 51.la, or similar trackers.
The Service integrates with: • DeepSeek API: for AI review generation, sending anonymized trade statistics. • MT5 broker servers: for reading your trade data via the investor password, using the native MT5 protocol. We do NOT integrate ad networks, social share plugins, or third-party tracking SDKs.
Your account and trade data are retained until you delete the account. Upon deletion: • Personal info and MT5 bindings are permanently deleted within 24 hours. • Historical trade records (anonymized, password-free) are kept for 90 days for abuse investigation, then permanently deleted. • Public comments are kept (marked "deleted user") to preserve discussion context.
You may at any time: • Access, modify, or export all your data (one-click CSV export in Settings). • Disable public mode to remove yourself from the leaderboard. • Unbind your MT5 account to stop data sync. • Delete your entire account.
The Service is for adults aged 18 or older. If you are under 18, do not register. We will terminate any account found to be that of a minor.
For material changes to this Policy, we will notify users via on-site notice and email at least 7 days in advance. We encourage you to revisit this page periodically.
For questions about this Policy, to exercise your data rights, or to report violations, email hello@huihezuo.com. We respond within 3 business days.