Privacy
Last updated 6 October 2026
Who we are
Exposed FX Journal (journal.exposedfx.com) is a trading journal for members of the Exposed FX VIP Telegram channel. It is run by Exposedfx LTD., the data controller for the personal data described here. You can reach us at support@goldenstraddler.com.
What we collect, and why
| Data | Why | Legal basis |
|---|---|---|
| From Telegram when you sign in, with the button or by opening the journal from the bot: your Telegram user ID, first and last name and username (Telegram also sends your language and similar details, which we don't keep) | To know who you are and keep your journal yours | Contract: providing the journal you asked for |
| Whether you are a member of the Exposed FX VIP channel, as Telegram reports it, and when we last checked | The journal is for VIP members only. We ask Telegram at each sign-in and about once a day | Contract, and our legitimate interest in limiting the journal to members |
| Your journal: trading accounts (name, broker, server, account number, currency, starting balance, limits, and the current balance and equity the connector reports), trades, the price candles around each trade the connector sends, notes, tags, setups, ratings, daily plans and reviews, screenshots you upload, whether a trade was a VIP signal or your own idea | This is the journal itself | Contract |
| Questions you ask the AI coach and its answers; and a record of each use of the coach (credits and cost, no questions or answers) | To answer you and to keep the monthly limits | Contract |
| A session cookie and, for the MT5 connector, a token (we keep only a fingerprint of it) | To keep you signed in and to accept trades only from your own connector | Contract |
| If you sign in but Telegram can't confirm you're a VIP member: your Telegram user ID, name and username, why you couldn't come in, and when you tried | So the Exposed FX team can see who is waiting and let you in by hand | Our legitimate interest in letting members in when the automatic check can't |
| Technical data such as your IP address and browser type, in our host's request logs | Security, preventing abuse and fixing faults | Our legitimate interest in running a safe service |
| Your IP address, kept only in the server's memory: to limit how many requests one address can make (for up to a day), and to shut out for an hour an address that keeps asking for other software's files | Preventing abuse | Our legitimate interest in running a safe service |
We never ask for your email address, phone number, password or payment details, and we never collect your broker password. Your MT5 account number is shown only by its last four digits. The connector only reads your trade history; it cannot place, change or close trades.
Who can see your journal
Only you see your trades, notes and screenshots. The Exposed FX team sees who uses the journal (your Telegram name, username and user ID), how you got access, when you joined and last opened it, how many trades you have, and totals for the whole journal, never the trades, notes or screenshots themselves. If you signed in but couldn't be confirmed as a VIP member, the team also sees your name, username and when you tried (and may get a Telegram message from the bot saying so), so they can let you in. If you share an account's results page, anyone with that link can see that page, with or without money amounts and the trade list as you choose. The page asks search engines not to list it. You can stop sharing at any time.
Services that handle your data for us
| Service | What it does | Where |
|---|---|---|
| Telegram | The "Log in with Telegram" button (Telegram's own script and window on our sign-in pages), opening the journal inside Telegram from the bot, the membership check, and the bot's messages to you | Telegram's own infrastructure, under Telegram's privacy policy |
| Railway (Railway Corporation) | Hosts the website and stores the database, screenshots and backups | Servers in the Netherlands (EU); Railway is a US company |
| Anthropic (Anthropic PBC) | Runs the AI coach. Only when you ask a question or request a review: your question, the earlier messages in that conversation, and the statistics, trades, excerpts of trade notes and of your daily journal, and the account, setup and tag names and rules it needs to answer are sent to Anthropic | United States |
Where data goes to the United States, it is protected by the European Commission's standard contractual clauses or an equivalent safeguard in that provider's terms. Anthropic's commercial terms say it does not use this data to train its models. The journal also downloads a public economic calendar (ForexFactory) to mark news on trades; no personal data is sent to do that. Fonts and everything else on the site are served from our own server.
Messages from the bot
When you sign in, Telegram asks whether the Exposed FX Journal bot may message you. If you allow it, the bot sends account limit warnings and a Monday summary (you can turn both off in Settings), one message if your access ends, one message when the team lets you in after you've been waiting, and a reply when you message it. If you block the bot, it stops.
How long we keep it
- Your journal: for as long as you are a VIP member, or until you delete it yourself under Settings.
- If you leave the VIP: your journal is locked within a day (when Telegram next confirms you've left) and deleted for good 30 days later, unless you rejoin before then.
- If you were waiting for access: until the team lets you in or dismisses the request, or 30 days after your last try.
- Backups: daily copies of the database are kept for 14 days. Deleted data disappears from backups as they expire.
- Our record of actions (for example "signed in", "access ended"), which identifies you by an internal number or your Telegram user ID, not your name: 12 months.
- The record of each use of the AI coach (credits and cost): about 13 months. If your journal is deleted it stays, with nothing linking it to you, so the month's total for the journal stays right.
Cookies and storage on your device
We use one cookie, to keep you signed in for up to 30 days or until you sign out. It is needed for the journal to work, so we don't ask for consent. Your browser also stores your light or dark choice, your journal filters and calendar view, and, for that tab only, whether you opened the journal from Telegram. Telegram's sign-in window may set its own cookies, under Telegram's policy. We don't use analytics, advertising or tracking of any kind.
Your rights
You can see your data in the journal at any time, download your trades with their notes, tags and setups as a CSV file under Settings, correct it, and delete all of it with "Delete my journal". You also have the right to restrict or object to our use of your data and to data portability. Contact us at support@goldenstraddler.com for anything the journal doesn't let you do yourself. If you think we've mishandled your data, you can complain to the Information and Data Protection Commissioner in Malta (idpc.org.mt) or the authority where you live.
Age
The journal is for adults (18 and over).
Changes
If we change this policy, we'll update the date at the top, and for important changes we'll tell members in the journal or through the bot.