Privacy Policy

Effective 27 July 2026

Pattern Drill is a free candlestick pattern recognition trainer operated by CIY Capital. This policy explains what we collect, why, and what you can do about it. It is written to be read, not to be survived.

The short version

You can use Pattern Drill without an account and without giving us anything. If you choose to sign up, we collect your email address and a display name so we can save your progress and put you on the leaderboard. We do not sell your data, we do not run ads, and we do not share your email with anyone outside the services needed to run the site.

What we collect

If you play without an account
Your scores, streak, and pattern accuracy are stored in your own browser using local storage. They stay on your device. We do not receive them.

We do record anonymous session information: the type of device you are using, your operating system and browser, screen and window size, time zone, orientation, and the page that referred you. This is tied to a random identifier generated in your browser, not to you.

If you create an account

  • Your email address
  • Your display name
  • Your drill results: scores, which patterns you were shown, which you answered correctly, and how long you took to answer
  • Your streak, streak freezes, and milestone badges
  • The device and session information described above

Automatically, for security
When you sign up we process your IP address to limit abuse. We do not store it. We store a one-way cryptographic hash of it, which cannot be reversed back into your address.

Why we collect it

  • Your email is used to sign you in via a one-time link and to send you a welcome message. We do not use passwords. We will not add you to a marketing list without asking you separately.
  • Your display name appears on the public daily leaderboard alongside your score. Choose accordingly.
  • Your results are what make the product work: they produce your streak, your lifetime accuracy per pattern, and your leaderboard position.
  • Device and session data tells us which devices the drill is actually used on so we can fix what is broken on them.
  • Hashed IP addresses exist only to stop automated abuse of the signup form.

What is public

Your display name and your daily score appear on the public leaderboard. Nothing else does. Your email address is never shown to other users. Your per-pattern accuracy is never shown to other users.

Who else touches your data

We use a small number of third parties to run the site. Each sees only what it needs:

  • Lovable Cloud (Supabase) — hosting, database, and authentication. Stores your account and results.
  • Cloudflare Turnstile — verifies that signups come from a person rather than a bot. Sees a challenge token, not your account data.
  • Our email provider — delivers your sign-in link and welcome email. Sees your email address.

We do not sell, rent, or trade personal information. We do not share your email address with advertisers, data brokers, or partners.

Analytics

We track how the drill is used — sessions started, rounds completed, patterns missed, signups. These events carry a random device identifier and never carry your name or email address.

Cookies and local storage

We do not use advertising or tracking cookies.

We use browser local storage to hold your progress when you are not signed in, and an authentication token when you are. Clearing your browser storage while signed out will erase local progress permanently, because we never had a copy.

How long we keep it

Account data is kept until you delete your account. Anonymous session records are kept for 24 months and then removed. Hashed IP records used for rate limiting are removed after 30 days.

Your choices

  • See your data. Everything we hold about you is visible in your account.
  • Correct it. Change your display name at any time from the results screen.
  • Delete it. Use "Delete my account" in your account settings. This permanently removes your profile, results, streaks, pattern statistics, and leaderboard entries. It cannot be undone and we do not keep a backup copy of deleted accounts.
  • Export it. Email us and we will send you your data in a machine-readable format.

Depending on where you live you may have additional rights over your personal information, including rights of access, correction, deletion, and portability. Contact us and we will honour them.

Children

Pattern Drill is not directed at children and we do not knowingly collect information from anyone under 16. If you believe a child has created an account, contact us and we will remove it.

Security

Access to your data is restricted at the database level so that you can read and write only your own records. We use passwordless sign-in, which means there is no password of yours for us to lose. No system is perfectly secure, and we do not claim otherwise.

Changes

If we change this policy materially we will update the effective date above and notify signed-in users by email before the change takes effect.

Contact

info@ciycapital.com

One more thing

Pattern Drill is an educational tool. It is not trading advice, it does not predict markets, and nothing in it is a recommendation to buy or sell any instrument. Trading futures involves substantial risk of loss.