JSKAPPSPrivacy page
Overview
TradeProof analyses your trades inside your own spreadsheet. Your trade data is not
uploaded, not transmitted and not stored by us. Not in summary, not anonymised, not at all.
There is no analytics, no telemetry and no crash reporting in the product.
This is a property of how it is built rather than a promise about how we behave: the analysis
is arithmetic performed by the add-in in your workbook, and there is no server for it to run on.
Information we collect
Your trade data: none. It is read from your sheet, analysed locally, and written back to
new sheets in the same workbook.
Your licence key, when you enter one. To check what you are entitled to, TradeProof sends
your key to https://api.jskapps.com and reads back your tier, your account id and whether
your account is a test account. The request contains your key and nothing else: no
trades, no figures, no file names, no identifiers we generated.
If you enter no key, TradeProof makes no network request whatsoever.
When TradeProof contacts the network
Exactly three requests are possible, and each is a consequence of something you did:
| When | Where | What is sent |
|---|---|---|
| You press Activate, or open the panel with a saved key | https://api.jskapps.com/api/access/jsk-tradeproof/ |
Your licence key, as an Authorization header |
| (Pro, Google Sheets only) you put a logo link on the settings sheet | The address you typed | An ordinary image request, with no cookies and no key attached |
| The very first time you open TradeProof after installing | Our own documentation page, .../docs?src=install |
Nothing but that one word, install, so we can tell how many people read the guide |
The first of those three happens once per installation and never again. It opens the guide
in a new tab and marks you as an existing user, on your own device. It carries no account
id, no key, no email and nothing at all from your spreadsheet, because it happens before
you have signed in and there would be nothing worth sending even if it did not.
The logo is fetched once and embedded in the report as image data, so the document you download
contains no link back to anywhere. It renders with the network off, and opening it tells
nobody you opened it.
How we use it
The key is used to answer one question, free or Pro, and to return your account id. We do
not build a profile, and we cannot: we never receive anything about your trading.
Permissions and why we need them
Excel requests ReadWriteDocument: read your trades, write the report sheets. It is the
narrowest permission that can write a sheet. AppDomains is limited to www.jskapps.com and
api.jskapps.com.
Google Sheets requests exactly two scopes:
spreadsheets.currentonly: the current spreadsheet only. The add-on cannot open, list
or read any other file in your Drive. This is the narrowest spreadsheet scope Google offers.script.container.ui: show the sidebar and the download window.
It does not request script.external_request, the scope that appears on a consent screen
as "connect to an external service". The licence check runs in the sidebar, in your browser,
so no such permission is needed.
Data storage and retention
This is the complete list. TradeProof writes to two places and no others: your workbook,
and your own browser storage on the machine you are using. Nothing is written to a server
of ours, because there is no server for it to be written to.
In your workbook, and therefore shared with the file
| What | Where it lives |
|---|---|
| Your trades and the report | The sheets you can see |
| Your settings | The TradeProof Settings sheet |
| A copy of the last report, so Download can produce exactly what was written | A hidden sheet named _jsk_report, replaced on each build (Google Sheets) |
| A half-finished simulation, so a long Monte Carlo can resume | A hidden sheet named _jsk_state, removed the moment the run finishes (Google Sheets) |
The two hidden sheets hold nothing that is not already in the workbook: both are built from
the trades sitting in front of you. They are hidden rather than merely oddly named because a
scratch sheet in your own file reads as a fault, and people delete things that look like
faults. Deleting them costs you a rebuild and nothing else.
⚠️ Settings and both hidden sheets travel with the workbook. That is the point of putting
settings there, because it is what lets somebody else reproduce your report. Delete the
hidden sheets before sharing if you would rather not send a second copy of the report.
On your device only, and never shared with the file
| What | Where it lives | Host |
|---|---|---|
| Your licence key | The task pane's own per-user storage | Excel |
| Your brand logo, as image data, if you set one | The same storage | Excel |
| A marker that says you have opened TradeProof before, so the guide opens once | The same storage | Excel |
| The report on its way to the preview window, cleared as that window reads it | The same storage | Excel |
| Your licence key | Not stored at all. Re-entered each session | Google Sheets |
| A marker that says you have opened TradeProof before, so the guide opens once | Google's own per-user storage for the add-on, against your account | Google Sheets |
The key never travels with the workbook, on either host. Sharing a file does not share
your licence, and it does not share your logo or your first-run marker either.
To clear all of it in Excel, press Sign out in the panel before removing the add-in.
Removing the add-in without signing out leaves the key in your own browser storage, where
clearing the site data for the add-in removes it.
Never, anywhere
| What | Where |
|---|---|
| Your trades, on our servers | Nowhere. We never receive them |
| Your figures, summarised or anonymised | Nowhere. There is no summary to send |
| Anything at all, when you have entered no key | No request is made |
Sharing and third parties
We do not sell, rent or share your information. There is no advertising network, no analytics
provider and no third-party script in the product. The only third party involved in a licence
check is our own hosting provider, carrying a request to our own API.
Security
The licence check is HTTPS only. Your key is a credential: the panel masks it by default,
because a spreadsheet sidebar sits open through screen shares and screenshots. Sign out
clears it.
What happens when you remove TradeProof
Nothing is sent to us, because neither Excel nor Google Sheets provides any way for an
add-in to know it has been removed. There is no uninstall callback on either platform,
so there is no removal survey, no final message and no record of your leaving.
We record this here rather than leave it unsaid, because the absence cuts both ways: it
means we cannot contact you after you remove it, and it means any figure we ever quote for
why people stop using TradeProof would be guesswork drawn from the few who wrote to us.
To remove everything TradeProof has stored on your device, sign out in the panel before
removing the add-in. That clears the key, and your spreadsheets keep every sheet it wrote.
Your choices
- Use it with no account, and no network request is made at all.
- Sign out at any time to remove the stored key.
- Delete the report by deleting the TradeProof — sheets.
- To have an account and its purchase history removed, write to info@jskapps.com.
Changes to this policy
Material changes will be noted on this page with a date. The add-in's own behaviour is
verifiable: what it sends is in the request above and nowhere else.
Contact
info@jskapps.com · JSK Business Solutions