Privacy policy

Last updated October 19, 2026

Payoutboard is a tool for tracking prop-firm funded accounts. This page explains what it stores about you, why, who else handles it, and how to take it with you or delete it. The short version: it keeps what you type in and what Google tells it when you sign in, uses it only to run the app for you, and never sells or shares it.

What's stored

• From Google, when you sign in: your email address, your name, a link to your profile picture, and Google's account id for you. Payoutboard never sees your Google password.
• What you enter: your firms, rule profiles, accounts, daily P&L entries, liquidation thresholds, payouts, notes and journal.
• Sessions: when you sign in, your browser gets a cookie with a random token. The database keeps only a one-way hash of it and when it expires (30 days, or when you sign out).
• The waitlist: if you joined it, your email address and when you joined. It's used to send one email when Payoutboard opens to everyone, and nothing else.

Payoutboard doesn't connect to your broker or prop firm, and it doesn't store passwords, payment details or IP addresses. To slow down abuse, the server counts recent requests per IP address in memory; those counts aren't saved and are gone within the hour. The hosting provider keeps short-lived server logs, which can include IP addresses.

How it's used

Only to run Payoutboard for you: to sign you in, show your own data back to you, and work out your accounts' payout status. There are no ads, no analytics or tracking scripts, and nothing is loaded from other websites. Your data is never sold, rented or shared with anyone for their own use.

Cookies and browser storage

One cookie keeps you signed in, and two short-lived ones (ten minutes) protect the Google sign-in step. Your light or dark theme is saved in your browser's local storage. Nothing else is stored in your browser, and there are no third-party cookies.

Who else handles it

• Google handles sign-in. Its own privacy policy covers your Google account.
• Railway hosts the app and its database. Data travels to and from it encrypted (https).

Payoutboard may disclose data if the law requires it, and would tell you unless it's not allowed to.

Backups

The database is backed up by the hosting provider so it can be restored after a failure. Deleted data can remain in those backups until they expire, after which it's gone for good. Backups are never used for anything else.

Your choices

• See and correct it: everything you entered is visible and editable in the app.
• Download it: Settings → Profile → Download your data gives you one JSON file with everything you've entered.
• Delete it: Settings → Profile → Delete account permanently deletes your account and everything in it, removes your email from the waitlist, and signs you out.
• Revoke Google access: you can remove Payoutboard from your Google account's third-party access settings at any time.

Children

Payoutboard is for adults who trade. It isn't meant for anyone under 18.

Changes

If this policy changes, the date at the top changes too. A change that affects how your data is used will be announced in the app before it takes effect.

Contact

Questions or requests: [email protected].