Privacy notice.

Draft for review · last updated 15 October 2026

The short version

This site sets no tracking or advertising cookies and runs no advertising trackers. We collect only what we need to run access plans and to see, in aggregate, which pages people read.

Who is responsible for your data

DISTILLEDTRADES LTD, trading as The Distilled, is the controller of the personal data described here. Registered in England and Wales, company number 17518566. Registered office: Office 21548 182-184 High Street North, East Ham, London, United Kingdom, E6 2JA.

What we collect, and why

Site analytics. We use Cloudflare Web Analytics, which counts page views and loading speed without cookies and without building a profile of you. We see totals, such as how many people read a guide, not individuals. Lawful basis: our legitimate interest in knowing which content is useful.

Fonts. The website and The Distilled Desk serve their fonts from this site. Opening a page does not make a font request to Google.

Waitlist. If you join the waitlist on Whop, we use your email address to tell you when access plans open. We only send other marketing emails if you've agreed to them, and you can unsubscribe at any time. Lawful basis: your consent, which you can withdraw whenever you like.

Registering interest (before launch). If you use our register form, we collect your name, email address, the plan you're interested in (Free, Core or Pro, monthly or yearly), your TradingView username and your Discord username. How you heard about us is optional. We also record when you confirmed you'd read this notice and whether you ticked the marketing box. We use these details to tell you when access plans open, to set up the plan you picked if you then join, and to see which plans people want. Lawful basis: to take steps you asked for before a possible contract, and our legitimate interest in running the launch. Registering is free and doesn't commit you to anything. If you register again with the same email, we update your choice rather than keep a second copy.

Marketing emails. The register form has a separate, optional box for news, guides and offers by email. We only send these if you tick it. Lawful basis: your consent. You can withdraw it at any time by using the unsubscribe link in any email, by emailing us, or by registering again with the box unticked. Withdrawing doesn't affect your registration.

Stopping misuse of the form. To stop automated sign-ups, the form has a hidden field that people never see, and we limit how often one connection can submit. For that limit we keep a scrambled (hashed) form of your IP address for no more than 24 hours. We never store the IP address itself. Lawful basis: our legitimate interest in keeping the form working and secure.

Access plans. When you join through Whop, Whop collects your name, email address and payment details, and processes the payment. We receive your subscription status and email, and the TradingView username you give us so we can grant indicator access. Lawful basis: to provide the access plan you signed up for.

The Distilled Desk. If you sign in to the Desk, you do it with your Whop account. Whop tells us your Whop user ID, your username and which access plan you hold; we don't receive your password or payment details, and we don't keep Whop's sign-in tokens. We then set one cookie, dstl_desk, which keeps you signed in for up to 12 hours. During sign-in a second, short-lived cookie (10 minutes) protects the sign-in from being tampered with. Both are strictly necessary for the Desk to work, so we don't ask for consent to them, and neither is used for tracking. The Desk also remembers your display settings in your own browser's storage (keys starting dstl.desk.); they never leave your device. Lawful basis: to provide the access plan you signed up for.

Personal Journal. If you choose to use it, we store the trades and ideas you enter, including market, direction, session, setup name, dates, prices, quantities, costs or results, your account label, reasons, plans, tags, notes and reflections. These are manual records, not verified broker fills. They are stored in Cloudflare D1 under your signed-in account; another Desk user cannot read them through the Journal. You can export your records and delete individual entries, or contact us to request deletion of the whole journal. Do not enter broker passwords, API keys or other sensitive credentials. Lawful basis: providing the journal you ask us to operate.

Chart settings. Drawings, saved colours, indicator appearance and chart layout preferences use browser storage with keys starting dstl.web-terminal.. They remain on that browser; the Desk does not send your private scripts or indicator detection code to chart viewers.

Welcome preferences. If you complete or skip the Pro welcome screen, we store your selected market, display timezone, completion status and save time in Cloudflare Workers KV under your Whop user ID. These preferences are separate from the browser-only chart settings above. They let us restore your welcome choices when you sign in. We retain them until you ask us to delete them or close your Desk account. Lawful basis: providing the personalised Desk you request.

Discord. If you join our Discord, we see your Discord username and anything you post in our server. To verify legacy OG Desk access, we check the Discord account linked to your Whop account and its OG role in our server. A typed username is not proof of access. This check is used to provide your existing access entitlement, not for advertising. Discord's own privacy policy covers your account. If you ask our Discord assistant bot a question, your message is sent to Anthropic, whose AI model writes the answer.

Messages to us. If you contact us, we keep the conversation so we can help you.

Who we share it with

Only the services that run The Distilled: Whop (payments, access plans, the waitlist and Desk sign-in), TradingView (indicator access), Discord (community), Cloudflare (hosting, analytics, registrations and journals in D1, and welcome preferences in Workers KV, acting as our processor) and Anthropic (the AI model behind our Discord assistant). Whop, TradingView and Discord also operate their own accounts and privacy notices. We don't sell your data or share it for advertising.

International processing

These services may process data outside the UK, including in the United States. The providers describe the following protections in their published terms and privacy notices:

• Cloudflare. Its Data Processing Addendum provides EU Standard Contractual Clauses together with the UK International Data Transfer Addendum for restricted UK transfers.
• Whop. Its privacy policy describes data-processing and transfer agreements. Its Seller Data Sharing Addendum includes controller-to-controller Standard Contractual Clauses and a UK Addendum for restricted buyer-data transfers covered by that agreement.
• Discord. Its privacy policy describes Standard Contractual Clauses and participation in the UK Extension to the EU-US Data Privacy Framework for transfers covered by that framework.
• Anthropic. For its commercial API, its Data Processing Addendum includes Standard Contractual Clauses and a UK Addendum for customer data subject to UK GDPR.
• TradingView. Its privacy policy says data may be processed in the US, EU and other locations and that it takes steps to protect transfers. It asks users to contact it for details of its safeguards; it does not name a specific UK mechanism in that notice.

This notice remains under review. Provider statements do not, by themselves, confirm which agreements and transfer safeguards cover our specific accounts. The account-specific review, including TradingView's UK safeguard, is still outstanding. Contact us for further details or a copy of the safeguards applicable to your data.

How long we keep it

Registrations are kept until 31 March 2027. If you choose an access plan, the details move into your subscription record. If you don't, we delete them then, or sooner if you ask. Marketing consent lasts until you withdraw it.

Subscription records are kept while your access plan is active and for up to six years afterwards, for tax and accounting. Analytics are kept in aggregate only. You can ask us to delete anything we don't have to keep by law.

Your journal records remain until you delete them or request deletion. They are not part of our six-year billing-record retention. Deleting a record removes it from the active journal database; it does not immediately erase provider backups. Our current Cloudflare D1 Free plan has a seven-day point-in-time recovery window. Contact us to request deletion of your whole journal or closure of your Desk account. Account-specific retention and backup-restoration procedures remain under review.

Your rights

Under UK GDPR you can ask to see the data we hold about you, correct it, delete it, restrict or object to how we use it, and receive a copy of data you gave us in a portable format. Where we rely on your consent, you can withdraw it at any time. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk).

Contact

Email [email protected], open a ticket in the #support channel on our Discord, or message @DistilledTrades on X. Please don't send personal details in a public channel.