Privacy policy

Last updated: June 7, 2026

Hoofade lets traders connect a brokerage account and publish a curated, redacted view of their trading activity. This policy describes what we collect, why, where it lives, and the controls you have. The short version: your brokerage data is pulled read-only, it is private by default, and nothing becomes public unless you explicitly publish it.

Who is responsible

Hoofade operates this service and is accountable for how it handles personal data. For any question or request about your data, email support@hoofade.com.

What we collect

• Account information: your email address, a handle, an optional display name, and an optional avatar image.
• Brokerage data: trades, open positions, cash balances, cash transactions (deposits, withdrawals, dividends, fees, and taxes withheld), and account metadata such as account identifiers, aliases, and types. This arrives through a read-only connection, either via SnapTrade (a brokerage-connection provider) or directly from Interactive Brokers Flex reports using a token you create.
• Technical data: session records that store a hashed version of your IP address, and standard server logs used for debugging and rate limiting. Raw IP addresses appear briefly in web-server logs before those logs rotate.
• Invitations: when an existing user invites someone, we collect the invitee's email address to send one invitation on that user's behalf. The invitation names the person who invited them. We use the address only for that invitation and the resulting sign-up. If you received an invitation you didn't want, email support@hoofade.com and we will remove your address.
• Waitlist: if you join the waitlist, we store your email address and IP address so we can send your invite and limit abuse.
• Connection logs: we keep an encrypted, per-user log of our exchanges with SnapTrade. We use it to debug problems with your brokerage connection.

How brokerage connections work

Connections are read-only. Hoofade cannot place, modify, or cancel orders, and cannot move money. If you connect through SnapTrade, you enter your broker login on SnapTrade's own connection portal; your broker username and password never pass through Hoofade. Connection credentials (SnapTrade user secrets, IBKR Flex tokens) are stored encrypted at rest. SnapTrade processes the connection on our behalf and their privacy policy also applies to that step.

Where your data lives

Our servers are hosted by Amazon Web Services in the United States (Oregon). Your data is stored and processed there, and while it is in the United States it can be subject to access by US authorities under US law. SnapTrade and Resend also process data in the United States. Hoofade is aimed at North American traders.

How we use your data

• To render your private trade feed, portfolio view, and performance chart. These are visible only to you when signed in.
• To render your public profile and share links, but only if you publish one, and only with the redactions you chose (for example position sizes as percentages instead of dollars, cash hidden unless opted in, account identifiers always stripped).
• To send transactional email: sign-in links and invitations. We do not send marketing email.

What we never do

• Sell or rent your data.
• Show third-party advertising.
• Trade or transact on your accounts. Access is read-only by construction.
• Publish anything without an explicit action from you.

Cookies and local storage

We use one cookie: the session cookie that keeps you signed in. We do not use analytics or advertising cookies. Your browser's local storage holds your theme and feed-filter preferences; that data stays on your device.

Service providers

• AWS: hosting. All service data lives on AWS infrastructure in the United States.
• SnapTrade: brokerage connectivity, if you choose that connection method.
• Resend: delivery of sign-in and invite emails. They receive recipient email addresses.
• Market-data providers: we request quotes and price history by ticker symbol only. No personal data or position sizes are sent to them.

Your rights

You can ask what personal data we hold about you, ask for a copy, and ask us to correct it. You can withdraw consent by disconnecting a brokerage or asking us to close your account. Email support@hoofade.com from your sign-up address; we respond within 30 days. If you are not satisfied with our response, you can complain to the data protection authority where you live.

How long we keep data

• Account and brokerage data: while your account is open.
• History from a disconnected brokerage: until you delete your account. We keep it so your own feed history doesn't silently rewrite.
• Server logs: rotated out within about 14 days.
• Waitlist and invitation addresses: until the invite is used, you ask us to remove you, or the waitlist closes.

Deleting your account

To delete your account, email support@hoofade.com from your sign-up address. We deactivate the account right away and delete your personal data, including brokerage data and connection credentials, within 30 days. Brief traces may remain in server logs until those rotate.

Unpublishing your profile takes effect immediately: the public link stops working. Share links you created are separate; each stays live until you revoke it. Copies other people or platforms already made (for example cached link previews) are outside our control.

Security

All traffic is served over HTTPS. Broker credentials are encrypted at rest. Sessions use secure, same-site cookies. If a security incident creates a real risk of significant harm to you, we will notify you and report it to the regulators required by law, as soon as feasible. To report a vulnerability, email support@hoofade.com with a subject line starting [SECURITY].

Children

Hoofade is not for children. We do not knowingly collect data from anyone under 18. If you believe we have, email support@hoofade.com.

Changes

We will update this page when the policy changes and revise the date above. Material changes will be announced to signed-in users before they take effect.

Contact

Questions about this policy: support@hoofade.com.