Privacy

Privacy policy · Tapebook, the trading journal

Last updated: 6 November 2026 (version 2)

This policy covers the Tapebook website (tapebook.dojiwave.com) and the Tapebook app (tapebookapp.dojiwave.com): creating and using your Tapebook account, your trading journal and screenshots, Tapebook Connector, and buying a Tapebook subscription. Tapebook, the trading journal, is made by Dojiwave.

1. Who we are

Dojiwave is run by Tomasz Krygowski, Northern Lights Tomasz Krygowski, ul. Chmielna 73B lok. 14, 00-801 Warszawa, NIP 6842525717, Poland (“we”, “us”). We are the controller of the personal data described here. Contact: [email protected].

2. This website

tapebook.dojiwave.com is hosted on Cloudflare Pages. To deliver and protect the site, Cloudflare processes technical data about each visit, such as your IP address, browser and the page you asked for (legitimate interest, GDPR Art. 6(1)(f)).The website sets no cookies and uses no analytics, advertising or tracking. It loads its fonts and scripts from its own domain, except the bot check in the assistant window, which loads from Cloudflare when you start using the assistant. Until you click "Buy", the website does not load Paddle Checkout or set Paddle cookies. When you click "Buy", Paddle Checkout opens and may use cookies strictly necessary to process and secure the payment. More information is available in section 5 and Paddle's Privacy Notice. Everything shown in the journal previews is demo data, generated in your browser. How prices reach our page, and what Paddle does when you press "Buy", is in section 5.

The bot check is Cloudflare Turnstile. It protects the assistant window from automated use and doesn't count or follow visitors. For this, Cloudflare, as our processor, processes your IP address and technical signals from your browser. Legal basis: our legitimate interest in keeping the assistant secure (Art. 6(1)(f) GDPR). It runs only because you use the assistant, so it doesn't ask for consent.

3. Waiting list

Tapebook is on sale and we no longer run a waiting list for it. We keep no data from it.

4. Your Tapebook account and your journal

Tapebook is an online service: you sign in to your account, and your journal is stored on our servers. We are the controller of this data.

• Your account: your e-mail address, your password (we keep only a one-way hash of it, never the password itself), the versions of our Terms and this policy you accepted, with the date and time, and the state of your subscription. If you turn on the second sign-in step, also its secret.
• Signing in: when you sign in, we set one session cookie, only for tapebookapp.dojiwave.com, and keep a record of the session on our server: your account, when the session started and when it runs out, and the name of your browser and operating system, so that you can see which devices are signed in. We don't keep your IP address with the session. A session ends after 30 days without use. To protect accounts, we keep a security log for 30 days: the kind of event (for example a sign-in or a failed attempt), the account or a one-way code of the e-mail address that was entered, the IP address and the time.
• Bot protection: We use Cloudflare Turnstile to protect sign-up and password reset from bots. For this purpose Cloudflare, as our processor, processes your IP address and technical signals from your browser. Legal basis: our legitimate interest in keeping the service secure (Art. 6(1)(f) GDPR).
• Accounts that are never paid for: if you create an account and don't subscribe, we delete it after 14 days.
• Your journal: everything you enter, import or send with Tapebook Connector: your trades, your trading accounts (account login, broker, server and balance), notes, the mood you choose from a list, plans, cash flow, files you import and your trade screenshots. Your entries and screenshots are kept until you delete them or delete your account.
• Free-text notes and your consent: notes you write in your own words (before a session and on your trades) can reveal information about your health, even by accident. We store them only with your explicit consent, which we ask for the first time you write such a note (Art. 9(2)(a) GDPR). Without it, the free-text fields are off and the rest of Tapebook works as usual. The mood scale and the tags you choose from a list don't need this consent. You can withdraw it at any time in Settings > Account and plan, without affecting what we did before: Tapebook first lets you download your notes, then deletes them and turns the free-text fields off until you consent again; they are removed from backups within 30 days. We keep a record of when you gave and withdrew consent and of the wording you accepted, for as long as your account exists. We don't analyse your notes ourselves; the mentor reads them only if you turn that on (see “Mentor”). We read them only when you ask us to or the law requires it (see “We don't look through your journal”).
• Prop ledger and capital goals: if you use them, the prop firm accounts you enter (the firm's name as you type it, the account type, the starting balance, fees, attempts, payouts, and why an account was closed and what it cost) and your capital goals (milestones, how you split a payout, your monthly prop budget). You enter everything yourself; Tapebook doesn't connect to prop firms or banks. Purpose, legal basis and how long: as for your journal. You can download them with the rest of your journal.
• Tapebook Connector (optional). If you install it, it sends these data from your MetaTrader 5 terminal to your Tapebook account: (1) your executed buy and sell trades, including entries into positions that are still open and partial closes: deal and position numbers, symbol, side, entry or exit type, volume, price, profit, commission, swap, fee, stop loss, take profit, time and execution reason; (2) your broker, server, MT5 account number and account currency; (3) events from compatible Dojiwave tools, if you use them: what the tool recorded about your plans and orders, such as order numbers, the risk you intended and why an order was refused; (4) technical status: connector ID and version, terminal build, sync times, queue size, error codes, and whether it found a compatible tool and which version. With your trades it doesn't send your balance, deposits, withdrawals, credit, order numbers or trade comments. By default it sends only what happens after you connect; older history goes only if you choose it on the Connect MT5 screen. Why: to fill your journal automatically and to show you whether the sync works. Legal basis: performing our contract with you (Art. 6(1)(b) GDPR). How long: trades and events stay in your journal like the data you enter yourself, until you delete them or your account. For technical status we keep only the latest record and delete it 30 days after the connector's last contact. Your history choice and your token details (name, dates and your consent to the installation, never the token itself) stay until you delete your account, for active tokens and your 20 most recently revoked ones. Details of older revoked tokens are deleted earlier. Security log: we record your IP address for connector security events, as for other security events on your account, for the same 30 days. Your token: we store only a hash of it. Your terminal stores the token itself, so don't share your MetaTrader 5 config folder. You can revoke it at any time in Tapebook. Revoking stops new data; it doesn't delete what is already in your journal. Changing your password, e-mail address or two-step sign-in, and signing out everywhere, also revokes it. Who receives the data: the same recipients as your other journal data, listed in this policy. We don't get your MT5 password or your investor password, and the connector can't trade.
• What we never ask for: the passwords to your trading accounts. Don't enter them anywhere in Tapebook. Tapebook isn't meant for information about your health or for other people's personal data; please don't put it in your notes.
• We don't look through your journal or your screenshots. To run your account we use only your e-mail address, your subscription and how much storage you use. We look at the contents of your account only:
  • a) when you ask us for help, to the extent needed to give it;
  • b) when it is necessary to fix a fault or a security threat to Tapebook or to other users, to the smallest extent needed;
  • c) when the law or a binding request from an authorised public authority requires it.
  We record every access (who, when and for what purpose) and keep that record for 12 months. In cases b) and c) we tell you by email about the access and its reason, unless the law forbids it or telling you would defeat the removal of the threat; in that case we tell you as soon as the obstacle is gone. We don't analyse journals and don't make statistics from them.
• On your device: Tapebook keeps a copy of your journal, including your screenshots, in your browser's storage so that it works when your connection drops. Signing out removes that copy from the device. If your session runs out instead, the copy stays in the browser, hidden, until you sign in again or remove it; changes not yet sent are sent when you sign in. If someone signs in to a different account in that browser, Tapebook shows them nothing from your journal and asks them to clear the device or sign out. You can remove the copy without signing in, with Remove data from this device on the sign-in page; changes not yet sent are then lost. On a shared or public computer, always sign out when you finish. Tapebook uses no analytics. The only script from another company is Cloudflare Turnstile, on the two forms named above and in the assistant window on the website. Tapebook keeps in your browser only what it needs to work, so it doesn't ask for cookie consent.
• E-mails. We send you service e-mails only: address confirmation, password reset, e-mail change, and security and access notices. No marketing. Data: your e-mail address, the content of the message and technical delivery data. Purpose: providing the service you signed up for (Art. 6(1)(b) GDPR). The e-mails are sent by Cloudflare, Inc. as our processor. We do not track whether you open the e-mails or click links in them. Cloudflare keeps delivery records of our service e-mails (sender, recipient, subject and status) for up to about 31 days, according to its documentation; it doesn't keep their content.
• Browser notifications (optional). If you turn them on for a device, we store that browser's push address (endpoint), its two encryption keys, the date you turned notifications on, whether the Tapebook Connector silence alert is on for that device (it is off by default) and the date of the last such alert, which we use to send it at most once a day. Purpose: account notifications, never marketing and never trade data. Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR). Recipient: the push service of your browser's maker, which is Google, Apple, Microsoft or Mozilla. It receives the endpoint and the encrypted message. These companies may process data outside the EEA, including in the United States; where a company takes part in the EU-US Data Privacy Framework, the transfer relies on the European Commission's adequacy decision. We keep this data until you turn notifications off, your session ends (a session lasts at most 180 days) or you delete your account. We also delete it if the push service reports that the address no longer works, or if you pass 10 devices, starting with the oldest. Copies in our database backups disappear within 30 days.
• AI assistant. Help in the app and the assistant window on our website answer your questions with an AI assistant. Questions you type in the assistant are sent to Anthropic Ireland, Limited, which generates the answers as our processor. Anthropic does not use them to train its models and deletes them within 30 days, except content flagged for misuse, which may be kept up to 2 years. Data may be processed in the United States under the EU Standard Contractual Clauses. With a question asked in Help, the app also sends technical details so that the assistant can help: the app version, your type of browser and system, the sync state and the number of changes not yet sent, the number of your trading accounts and trades, the screen you are on, and your plan and the date your access runs until. It never sends your e-mail address, your name, your account's identifier or the content of your journal. We don't store the conversations; to keep daily limits, we count questions per account or per IP address, without their content, and delete these counts within 2 days. Before the first question on the website, Cloudflare Turnstile checks that you are not a bot. Please don't type personal data or trade details in the assistant. Purpose: answering your questions and technical help. Legal basis: in the app, the contract (Art. 6(1)(b) GDPR); on the website, steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR); question limits and Turnstile, our legitimate interest in protecting the service (Art. 6(1)(f) GDPR).
• Mentor (AI review). We now call the mentor Tapebuddy. In this policy “the mentor” and “Mentor profile” mean Tapebuddy and the Tapebuddy profile. If you turn on the mentor in Settings, Tapebook uses AI to review your own trading. When you ask for a review or ask the mentor a question, the app works out the numbers in your browser and sends them through our server to Anthropic Ireland, Limited, which writes the answer as our processor. What it can send: your results (in R, per cent and money), win rate and breakdowns by time, symbol and setup, deviations from your plan and risk rules, your balance, deposits and withdrawals, prop firm fees and payouts, your equity path, pre-trade events you import (rejected orders, abandoned plans, the risk you intended and stop moves), your tags, symbols and dates. Your notes and the mood you choose are sent only if you also turn on “Let the mentor read my notes”, which is your explicit consent. The mentor never receives your e-mail address, your name or your account's identifier. It receives a screenshot only when you send one to it yourself (Tapebook Pro, below). We don't store the reviews or the conversations, except the profile and weekly summaries described below (Tapebook Pro); to keep the limits of the plan, we count requests and their cost per account, without their content, and delete these counters at the latest 32 days after they are created. Anthropic does not use this data to train its models and deletes it within 30 days, except content flagged for misuse, which may be kept up to 2 years. Data may be processed in the United States under the EU Standard Contractual Clauses. Legal basis: performance of the contract (Art. 6(1)(b) GDPR), because you ask for the review; for your notes and mood, your explicit consent (Art. 9(2)(a) GDPR), which you can withdraw in Settings at any time without affecting what was done before. The mentor makes no decisions about you and gives no investment advice. If a question you ask in Help is about your own trading, Help passes it to the mentor: the question is then sent to Anthropic twice, once for Help and once for the mentor, and we keep neither.
• Tapebook Pro. With Tapebook Pro the mentor also does the following. (1) Mentor profile: it keeps a short profile of your trading - your strategies, instruments, sessions, habits against your own rules and strengths - and a summary of each week's conclusions for the last 12 weeks. Both are built from your journal, contain only trading conclusions with the app's numbers, and never contain quotes from your notes or anything about your health. You can read and correct the profile at any time. They are stored on our servers in the EU until you turn off “Mentor profile” or delete your account; then we delete them at once, and from backups within 30 days. If you withdraw consent to your notes, we also delete the profile and summaries and the mentor builds them again without your notes. Both are included when you download your journal. Building the profile is profiling, but it has no legal or similarly significant effect on you. (2) Charts: when you send a chart screenshot to the mentor, it goes through our server to Anthropic to be read; our server doesn't save it. Cover your account number and name before you send it. (3) Checking each trade: if “Check each trade after it's saved” is on, each trade you save in the trade form (not imported trades), with your plan and rules, goes to Anthropic; your notes go with it only if you gave the consent described above. This check is on from the start of Tapebook Pro. The mentor's note is saved with that trade in your journal. (4) Your setup checklists and, if you import them, your plans from a risk tool you use are sent when you ask the mentor to set an idea against your rules. Legal basis for (1) to (4): performance of the contract (Art. 6(1)(b) GDPR); your notes only with your consent, as above. You can turn the profile and the trade checks off at any time in Settings. The mentor makes no decisions about you.
• Why: to provide the service you subscribed to. Legal basis: contract, Art. 6(1)(b). The sign-in log and the record we keep after an account is deleted: legitimate interest, Art. 6(1)(f), in keeping accounts secure and in being able to show what was agreed.
• Where. Account and journal data and screenshots are stored in the European Union. The app runs on Cloudflare's global network, so data may also be processed by Cloudflare, Inc. in the USA; section 6 says how transfers are protected.
• Backups: we back up the database and files daily and keep each backup for 30 days.
• How long: your account and journal, for as long as you have a subscription. When it ends, your account becomes read-only and we keep your journal for 90 days, then delete it; we e-mail you before we do. If you have started buying Tapebook again when that date comes, we wait up to 33 more days before deleting it, or up to 47 days if your payment is already in progress at Paddle. If you ask us to delete your account, we do it at once.
• Deleting your account: you can do it at any time in Settings > Account and plan ("Delete account"). We delete your journal, screenshots and sign-in data from our systems straight away, and from backups within 30 days. If you have paid for Tapebook at least once, we keep only your e-mail address, the dates your account was created and deleted, the versions of the Terms and this policy you accepted, and your subscription periods, payments and refunds, to defend ourselves against claims under your contract, refunds or complaints. We keep them until the end of the sixth calendar year after the year of the last billing event (see section 5). If you have never paid, nothing of this is kept; only the security log stays until its 30 days run out. Legal basis: legitimate interest, Art. 6(1)(f).
• Taking your data with you: you can download your whole journal at any time, in read-only mode too: your journal as a JSON file, your trades as CSV, your screenshots, in parts, what Tapebook Connector sent, and your plan and consent details.

5. Buying Tapebook

Tapebook is sold by Paddle.com Market Limited, 30 Old Bailey, London, EC4M 7AU ("Paddle"), our reseller and Merchant of Record. Paddle is a separate controller, under its own privacy policy, for your payment, tax, invoices, refunds and subscription. We never see your card details. This section says what we receive from Paddle, why and for how long.

• Prices on our page. To show you the price in your currency, with the right tax, our server asks Paddle for the price for your country. It tells Paddle only the country, which Cloudflare works out from your connection, never your IP address. Nothing from Paddle loads on our page until you press "Buy". Then Paddle's checkout opens, and Paddle and its payment providers use their own cookies for the payment, under Paddle's privacy policy. Paddle's checkout sends Paddle its own technical and usage data. Buying and renewing always happen on our sales page, never inside Tapebook itself.
• What we give Paddle: a one-time purchase token that links the payment to your Tapebook account, and your account e-mail address. We do not give Paddle your journal data.
• What we receive from Paddle: Paddle's IDs for the transaction, your subscription and you as its customer, your plan and billing period, and the state of the subscription: paid, cancelled or refunded. We don't receive your card details or your postal address. We link your subscription to your account by the account's identifier. Your account shows the date your subscription is paid until.
• Managing your subscription: cancelling, changing your card and your invoices are in Paddle's customer portal. You reach it through "Invoices and payment method" in Settings > Account and plan, which asks Paddle for a one-time sign-in link and sends you there; we don't keep or log that link. You can turn off renewal at any time in Settings > Account and plan, or in Paddle's customer portal (Invoices and payment method). You keep access until the end of the period you have paid for. Deleting your account also turns renewal off and ends your access at once. If you delete your account before the end of the period you have paid for, you can ask us to refund the unused part; see section 10 of the Terms. You can also sign in to Paddle directly with the link from Paddle's e-mail.
• E-mails about payment: receipts and subscription e-mails come from Paddle.
• Why: to run your subscription and support you if something goes wrong. Legal basis: contract, Art. 6(1)(b).
• How long: as long as your account exists; after that, your subscription periods stay in the record described in section 4. After your account is deleted, Paddle still keeps its own payment records as a separate controller. Records of Paddle's messages to us about payments (webhooks): 90 days. A payment dispute (chargeback): until it is closed. Documents the law requires us to keep: as long as the law says. After your account is deleted, we keep Paddle's ID of your subscription for 30 days after the subscription ends, so that a deleted account isn't charged and a late payment can be refunded. Only if Paddle hasn't confirmed the cancellation do we keep it longer, up to 400 days, while we resolve that case; we review such cases every month. A refund from Paddle that we can't yet match to a payment waits up to 13 months: with a yearly plan a refund of the unused part can come at any time during the paid year, and Paddle may need about a month to process it.
• Complaint correspondence: we keep it until the end of the sixth calendar year after the year in which the contract the complaint concerns ended. If you complain after the contract ended, we count from the year of the complaint. Why: a consumer's claims under the contract expire after 6 years, at the end of a calendar year (art. 118 of the Polish Civil Code). Legal basis: our legitimate interest in defending against claims (Art. 6(1)(f) GDPR).
• Your account's billing data (who paid, when and how much, refunds, Paddle identifiers): we keep it until the end of the sixth calendar year after the year of the last billing event. Why: tax law - income of a year is settled in a return due the next year, and the tax liability expires 5 years after the end of the year in which it was due (art. 70 § 1 and art. 86 § 1 of the Polish Tax Ordinance); legal basis: a legal obligation (Art. 6(1)(c) GDPR). The same period also covers your possible claims for a refund of that payment (art. 118 of the Civil Code); legal basis: legitimate interest (Art. 6(1)(f) GDPR). After that, we delete it in a monthly review.
• Accounts that never paid: we keep no billing data.

6. Who processes data for us

Cloudflare hosts the website and runs Turnstile. dHosting (Poland) handles our e-mail: we send from [email protected], and replies go to [email protected]. Cloudflare, Inc. is based in the United States. Where it processes data there, the transfer relies on the EU-U.S. Data Privacy Framework; where the Framework doesn’t apply, on the EU Standard Contractual Clauses in Cloudflare’s data processing addendum.

• Cloudflare, Inc. (USA) hosts the app, stores account and journal data in the EU, protects sign-up from bots and sends our service e-mails.
• Anthropic Ireland, Limited (Ireland) generates the AI assistant's answers and the mentor's answers (section 4). Transfers to the USA: the EU Standard Contractual Clauses.
• Paddle is a separate controller for payments, invoices, tax and the customer portal.
• Transfers: as in the policy (EU-U.S. Data Privacy Framework; where it doesn't apply, the EU Standard Contractual Clauses).
• Courts, the police, prosecutors and other authorities, when the law requires us to give them data (for example under the EU Digital Services Act). Legal basis: legal obligation, Art. 6(1)(c) GDPR.

7. Your rights

You can ask us for access to your data, correction, deletion, restriction and portability, and you can object to processing based on legitimate interest. You can withdraw your consent at any time, without affecting what we did before. Write to[email protected]. You can also complain to the Polish supervisory authority, the President of the Personal Data Protection Office (uodo.gov.pl). We don't make decisions about you by automated means alone. If you write to our support, we keep the correspondence for 12 months after the last message about that matter. Correspondence about a complaint we keep as described in section 5.

8. Age

Tapebook and its sale are for adults. We don't knowingly collect data from anyone under 18.

9. Changes

If we change this policy, we'll update the date at the top.

Earlier versions: 6 November 2026 · 2 November 2026 · 1 November 2026 · 30 October 2026 · 29 October 2026 · 28 October 2026

Tapebook