Privacy policy
What Red Shield collects about you, what it is used for, how long it is kept, and what you can ask us to do with it. Written from what the system actually does, not from a template.
Last updated 31 August 2026
What we collect
Account details — your email address, user name, membership tier, and the referral code you signed up through, if any.
Trading account details — port number, broker name, the account holder name your broker has on record, account currency, and licence expiry. Some of this is reported automatically by the EA running on your own machine.
Activity — sign-in history, EA downloads, videos watched, course progress, and anything you post in the forum.
Technical data — your IP address and browser type at the moment you sign in, download, or watch a video.
What we use it for
Signing you in and keeping your account secure.
Checking that an EA or Indicator is licensed for the port it is running on, which is why the software contacts our server.
Giving you access to the courses, videos and content your tier includes.
Calculating partner commission, if you signed up through a referral link.
Spotting unusual use, such as repeated sign-in attempts or account sharing.
We do not sell your data, and we do not pass it to anyone for advertising.
Signing in with Google
If you choose to sign in with Google, we receive only your email address, name and profile picture.
We do not request and cannot reach your Gmail, Google Drive, contacts, or any other Google service.
We never see or store your Google password. Google handles that entirely.
If the Google address matches an account you already have, the two are linked into one account rather than a second one being created. Your existing password still works.
You can disconnect it at any time from your own Google account settings.
How long we keep it
Account and trading account details, for as long as your account is open.
Sign-in history, 180 days.
Video viewing history, one year.
EA download history, two years.
These periods are enforced by an automated job that deletes anything past them every week, rather than by someone remembering to clear them.
Who else sees it
Google — only when you choose to sign in with a Google account.
Cloudflare — sits in front of the site as a shield and content network, and so sees the IP address of every request.
Resend — our email provider, used for verification and password reset messages.
Sentry — records system errors so we can fix them.
Telegram — only if you have configured your own bot in the EA to receive notifications, using a token you entered yourself.
We do not send your data to brokers. Your relationship with your broker is between you and them.
Cookies
We use cookies to remember that you are signed in, and to remember the language and theme you chose. Nothing else.
We do not use advertising cookies, and there are no third-party marketing trackers on this site.
Your rights
Under Thailand's Personal Data Protection Act (PDPA), you may ask to see your data, correct anything wrong, receive a copy, have it deleted, or have its use restricted.
Worth knowing — deleting your account ends the EA and Indicator licences on all of your ports immediately, because licensing is resolved directly from your account record.
Some records kept for audit purposes, such as a log of administrator actions, may be retained for as long as the law allows.
Security
All connections are encrypted with HTTPS.
Passwords are stored in a form that cannot be reversed. Nobody on the team can see yours.
EA files, courses and videos are stored where they cannot be reached directly; every request for one is checked against your account first.
No system is perfectly secure. If a breach affects you, we will tell you.
Changes to this policy
If anything material changes, we will say so on the site or by email, and update the date at the top of this document.