Privacy Policy

Who we are

JPT Trades is operated by Tim Ketterle (see our Imprint for full provider details). This policy explains what data this website and membership platform actually process, and through which services.

What we collect and why

When you sign in with Whop, we receive your Whop user ID, username, email address, and profile picture URL from Whop's authentication service. We store this — along with your membership status and role — in our own database to know who you are and whether you have active access.

We do not operate a separate password system. We do not ask for payment details directly — all billing is handled by Whop.

Third-party services that process your data

We rely on external infrastructure to run this platform. Each of the following genuinely processes data as part of how this site works — nothing below is listed defensively without actually being in use:

• Whop, Inc. — authentication (Sign in with Whop), membership status, and all payment/billing processing. Whop is the source of truth for your membership; see Whop's own privacy policy for how they handle payment data.
• Supabase — our application database. Stores your user record (Whop ID, email, username, role, membership status) and the video content catalog.
• Bunny.net — video hosting and streaming (Bunny Stream). When you watch a video, Bunny's player loads performance/CDN-routing data (which edge server delivers fastest) to serve the stream efficiently. This is a functional/performance mechanism, not advertising or cross-site tracking.
• Vercel — application hosting. Standard web server logs (IP address, request metadata) are processed as part of serving any website.
• Discord Inc. — if you join our Discord community (directly, or automatically via your Whop membership), Discord processes your Discord account data under its own privacy policy, independent of this site.

Cookies and local storage

We use one first-party, strictly-necessary cookie (jpt_session) to keep you signed in. It is httpOnly (not readable by page scripts) and expires after 7 days. We do not use advertising cookies, marketing pixels, or cross-site tracking of any kind — there are no analytics SDKs on this site.

A small local-storage flag remembers that you dismissed the cookie notice on this site. Whop and Discord may set their own cookies on their own domains when you interact with them, outside our control.

Fonts

This site's fonts are self-hosted and bundled at build time (via next/font). Your browser never contacts Google's font servers directly, and no font-loading data is shared with any third party.

How long we keep data

We retain your account record for as long as your Whop membership exists (active or lapsed), so we can restore access if you resubscribe. You can request deletion at any time (see below) — note that we can delete our own copy of your data, but Whop and Discord retain their own records under their respective policies.

Your rights (GDPR)

If you are in the EU/EEA, you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise any of these rights regarding data we hold directly, contact us at the email in our Imprint. For data held by Whop or Discord directly, you'll need to contact them.

Changes to this policy

If our data processing changes materially — for example, if we add analytics or new third-party tools — we will update this page and the date above.