Privacy Notice

Effective date: 29 September 2026.

This notice describes information handled by TurtleSoupX when you use its licensing service, application, and connected account features.

Information used for licensing

When a licence is validated, the licensing service receives the licence key transiently and stores a keyed HMAC-SHA-256 hash of the key. The service also handles a SHA-256-hashed device identifier, machine label, operating-system name and version, IP address, timestamps, optional name and email address, and licence and billing metadata. A SHA-256 hash is one-way hashing; it is not encryption.

This information supports licence validation, device and subscription administration, and service support.

Information used by the application

The application stores the selected TopstepX account, settings, an order journal, and logs on the device running the application. To connect an account, credentials are sent from the client through the backend and ProjectX integration. Account and order activity is handled by the connected services when you use account or trading features.

ProjectX API access is a separate service and is billed by ProjectX. TopstepX and ProjectX have their own terms and privacy information for their services.

Retention

Retention depends on the record. Licence and customer records may remain for administration, support, security, or legal obligations. TurtleSoupX does not publish a fixed retention schedule. Contact support to request deletion.

Your privacy choices

You can contact TurtleSoupX to ask what information is associated with you, request a correction or deletion, or raise another privacy concern. The rights available and how they apply depend on where you live and the rules that apply to your request.

For a question about this notice or a privacy request, contact support@turtlesoupx.com. Please do not send passwords, licence keys, or other authentication secrets by email.

See the Cookie Notice for information about browser storage and embedded content.