Privacy policy. What we collect, why, and how you control it.
Written in plain English. It covers readers everywhere, with the specific rights of the EU and UK (GDPR), California (CCPA) and Qatar, where we are based.
We collect the minimum needed to run TraderPayout: your email if you subscribe, your name and message if you contact us, and measurement data from Google Analytics. We never sell your data and we do not use advertising trackers. You can ask us to see, correct or delete what we hold at any time by writing to info@traderpayout.com.
At a glance
What we hold, why, and for how long
The legal basis applies under GDPR and UK GDPR; elsewhere we apply the same standard.
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| Newsletter email | Send the newsletter you asked for | Consent | Until you unsubscribe, then deleted within 30 days |
| Contact messages | Reply to you | Legitimate interest | Until resolved, plus up to 12 months |
| Analytics data | See which pages and tools are useful | Consent | Up to 14 months at event level |
| Server logs | Keep the site online, stop abuse | Legitimate interest | A few weeks, by our host |
| Affiliate referral | Credit us when you sign up with a partner | Legitimate interest | No personal data held by us |
01Who we are
TraderPayout (traderpayout.com) is an independent editorial publication for funded traders. It is operated by Unicorn, Building No. 60, Al‑Jazeera Street No. 342, Zone 22, Doha, Qatar, which is the data controller for the personal data described in this policy.
Because we are based in Qatar, we follow Qatar's Law No. 13 of 2016 on the protection of personal data. If you are in the European Union, the EEA or the United Kingdom, the GDPR and UK GDPR also apply to how we handle your data (section 08). If you are a California resident, the rights in section 09 apply. Wherever you are, the protections in this policy are our minimum standard.
02What we collect
Your email, and nothing else.
If you subscribe, we store your email address and the date you signed up. We do not ask for a name, a phone number or any other detail.
What you choose to send.
Your name, email, the category and message you write, and any role or link you add. We use it only to reply and to follow up on that conversation.
How the site is used.
Pages visited, time on page, device and browser type, and approximate location at city level, derived from your IP address. Measured in aggregate, never to identify you.
Technical records.
Our hosting provider records IP address, time and requested URL for security and abuse prevention. The logs are not reviewed routinely and expire after a short period.
Trading account logins, account balances, card or bank account numbers, government ID numbers, or any sensitive personal data. Please do not send them to us: we have no use for them and cannot help with accounts held at prop firms.
03Cookies and third-party services
Google Analytics. We use Google Analytics 4 to measure traffic. It sets first-party cookies to recognise returning visits. For visitors in the EU, EEA, Switzerland and the UK, we load it only after you accept analytics cookies, and you can change your choice at any time from the cookie settings link in the footer. Google states that it does not log or store IP addresses of EU, Swiss or UK users: they are used to derive an approximate location and then discarded. For other visitors, Google uses the IP address for location and spam filtering and does not associate it with user identifiers. We do not use Google Analytics for advertising, remarketing or personalisation, and we do not combine it with other personal data. You can also block it on every site with Google's Analytics opt-out browser add-on.
Fonts. Our pages load typefaces from Google Fonts. To deliver them, Google receives your IP address and browser details. Google Fonts does not set cookies.
Live data in our tools. The Trade Validator loads positioning data directly from the US Commodity Futures Trading Commission (publicreporting.cftc.gov). Your browser connects to that public government service, which therefore receives your IP address. We send it nothing else.
No advertising cookies or tracking pixels (no Meta Pixel, no LinkedIn Insight Tag, no advertising or remarketing tags), no cross-site retargeting, no fingerprinting, and no analytics tool other than Google Analytics. If we ever add one, we will update this policy and ask for your consent first where the law requires it.
05How we protect it
HTTPS everywhere
Every page, including forms, is served over an encrypted connection.
Two people, two factors
Only the two editors can open the subscriber list and the inbox, with strong passwords and two-factor authentication.
Less data, less risk
We do not collect what we do not need. The safest data is the data we never hold.
If something goes wrong. No system is perfectly secure. If a breach affects your personal data, we will notify the competent authority within the deadlines the law sets, including 72 hours under the GDPR and Qatar's data protection law, and we will inform affected users without undue delay.
06How long we keep it
We keep personal data only for as long as the purpose requires, then delete it.
- Newsletter: until you unsubscribe. Unsubscribed addresses are removed within 30 days.
- Contact messages: until the conversation is resolved, plus up to 12 months for our records.
- Analytics: event-level data is kept for no longer than 14 months, the maximum Google offers for standard properties, then deleted automatically. Aggregated reports contain no personal data.
- Server logs: a few weeks, under our hosting provider's standard retention.
07Your rights
Wherever you live, you can ask us to access, correct or delete your data, and to stop email at any time. Write to info@traderpayout.com, ideally from the address we hold, and say which right you are using. We may ask you to confirm your identity before acting on an access or deletion request.
Your rights under GDPR.
- Access, rectification and erasure.
- Restriction of processing and data portability.
- Objection to processing based on legitimate interest.
- Withdrawal of consent at any time, without affecting earlier processing.
- A complaint to your data protection authority, such as the ICO in the UK.
We reply within one month. For complex requests the law allows two more months; we will tell you if we need them.
Your rights under CCPA / CPRA.
- To know what we collected, from where, why and with whom it was shared.
- To delete and to correct your personal information.
- To opt out of sale or sharing: we do neither, so there is nothing to opt out of.
- Non-discrimination for exercising any of these rights.
- To use an authorised agent, with written authorisation.
We reply within 45 days, extendable by 45 more when reasonably necessary. We do not collect sensitive personal information as defined by the CPRA.
Qatar. Under Law No. 13 of 2016 you may access, correct and ask us to delete your data, and withdraw consent to marketing email at any time. Complaints may be addressed to the competent authority at Qatar's National Cyber Security Agency.
10International transfers
We operate from Qatar and our readers are worldwide, so your data may be processed in other countries, including the United States (Google) and the European Union (our email service). For data from the EU, EEA and UK, transfers rely on the safeguards the law requires: the EU-US Data Privacy Framework and its UK extension where the recipient is certified, as Google is, and Standard Contractual Clauses approved by the European Commission otherwise.
11Children
TraderPayout is intended for adults. Trading carries substantial financial risk and is not suitable for minors. We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe your child has sent us personal data, write to info@traderpayout.com and we will delete it.
12Changes to this policy
The current version always lives at this address, with its version number and effective date at the top. For material changes, meaning anything that affects what we collect, why, or who receives it, we will update the version and date, email newsletter subscribers before the change takes effect, and show a notice on the home page for at least 14 days. Minor edits such as typos, clarifications and link fixes are made without notice.
Version history. 2.0, 28 September 2026: controller and Qatar law identified, legal bases corrected, Google Fonts and live CFTC data disclosed, affiliate partners described as independent controllers, breach and response deadlines aligned with the law. 1.0, 12 May 2026: first version.
Privacy questions, requests or complaints
We read every message. If you do not hear back within the deadlines above, please follow up: email does go missing.
- Data controller
- Unicorn, operator of TraderPayout
- Address
- Building No. 60, Al‑Jazeera Street No. 342, Zone 22, Doha, Qatar
- Editors
- Kevin Macia, Jean Babwel
This policy describes how TraderPayout handles personal data. It does not cover third-party websites you reach from our links, including prop firms and affiliate partners, which have their own policies.
APEX OFFER