Last updated: October 7, 2026
IBKR Analyzer ("we", "us", or "our") operates the website ibkr-analyzer.com. This page explains what data we collect, how we use it, and your rights.
Account information: When you sign in with Google, we receive your name, email address, and profile picture from Google. We store this to identify your account.
Trade data: CSV files you upload are parsed on our servers to generate analysis results. If you are signed in, your analysis results are stored in your account so you can access them later. Raw CSV files are never stored permanently.
Billing information: Payments are handled by Stripe. We do not store card details. We store your Stripe customer ID and subscription status to manage your plan.
Sync requests: If you request automated IBKR sync, we store your email address, signup date, signup source, and the version of the consent you accepted. We use this to contact you about automated sync and weekly PnL reports. Your request does not connect your IBKR account, and no trading data is attached to the email signup.
Connected Flex queries (Pro beta, when enabled): We process your IBKR report in memory and discard broker names, account numbers, aliases, addresses, and raw XML. We retain only instrument details, trade dates, quantities, prices, proceeds, cost basis, commissions, and realized P/L needed for analysis and reconciliation. Keyed, opaque identifiers prevent duplicate trades and detect a change of broker account. Your Flex token and query ID are stored encrypted. Synced trades remain sensitive financial data linked to your app account; they are not anonymous.
Disconnecting Flex: “Disconnect & delete synced data” removes the encrypted connection credentials and synced trades from the active app database, including when a sync is running. It does not delete separately uploaded CSV analyses or revoke the token at IBKR. You can revoke the token in IBKR Client Portal. Provider backups may retain deleted records until their retention window expires. Synced dashboards are fetched through your authenticated session and are not saved using the browser snapshot feature.
Browser-saved dashboard: After a successful signup, we save your current analysis in this browser on this device. It can include your account details and trades. Anyone using this browser can open it. You can remove it with “Remove saved dashboard” on the upload page or by clearing this site’s browser data. It is not an email login or a backup across devices.
Optional weekly reports: When enabled and explicitly requested, we send your weekly realized P/L, net commissions, execution count and a dashboard link to your verified Google account email using Resend. The email does not include broker identifiers, individual trades, names or credentials. Your email provider and Resend process the recipient address and financial totals to deliver the report. We store email verification and consent records, delivery status and a small snapshot of those totals for reliable retries, not another raw broker report. You can turn reports off in IBKR sync or unsubscribe using the email link. An email already submitted cannot be recalled.
Service monitoring: We record worker timestamps, fixed error categories and aggregate job counts to detect delayed or failed syncs. Monitoring output does not contain broker credentials, account identifiers, emails, symbols or trading totals.
Anonymous campaign counts. When you arrive from one of our ad links, we add one to anonymous daily totals for that campaign as you reach each step: landing on the site, opening the example, analyzing a CSV, creating an account, starting checkout and completing a subscription purchase. We store only the date, campaign label, step and a count. These totals contain no identifier, IP address, account, ad-click ID or trade data, and we do not share them with advertising platforms. While your browser tab is open, it remembers the campaign label and which steps it has already counted, so a reload is not counted twice; closing the tab clears it.
Reddit conversion measurement is switched off. We previously offered optional, consent-based measurement that shared ad-click IDs and events with Reddit. It is currently off: no banner is shown, no measurement token is created and nothing is sent to Reddit. If we turn it on again, we will ask for your permission first and update this policy. Any records from that measurement expire and are deleted within 30 days; contact us if you would like them removed sooner.
We do not sell or share your personal data with third parties, except:
Your account data and saved analyses are retained as long as your account is active. You can delete your analyses at any time from the analysis history page. To fully delete your account and all associated data, contact us at the email below.
Sync requests are retained until you ask us to remove them. To opt out of sync updates or delete your request, email info@ibkr-analyzer.com. Browser-saved dashboards remain until you remove them, replace them with a new save, or clear your browser data.
Weekly delivery records and their summary totals are removed by the configured worker after 35 days, or when you disconnect Flex. Email consent and delivery-suppression preferences remain with your app account. Provider mailboxes and delivery-service records have their own retention; unsubscribing does not erase emails already delivered.
All data is transmitted over HTTPS. We use JWTs for session management and passwords are never stored - authentication is handled entirely via Google OAuth. We take reasonable technical measures to protect your data.
You may request access to, correction of, or deletion of your personal data at any time by contacting us. If you are in the EU, you have additional rights under GDPR.
For privacy questions or data deletion requests, email us at: info@ibkr-analyzer.com