Privacy Policy
Overview
Matchstick Replay is an early product preview. You can use the free demo without creating an account. We collect only the information needed to understand whether the product is useful and to respond when you explicitly ask us to.
Anonymous product events
We record a small allowlist of first-party events, such as:
- Landing-page views and Replay launches
- L1/L2, live/replay, or L2/OpenCandle mode changes
- Timeline or playback interactions
- Requests for a gated capability
- Feedback-prompt and form completion
These events use a random browser-session identifier. They may include the current Matchstick page, the referring site’s hostname or campaign source, and a short allowlisted interaction label.
We do not record raw IP addresses, user-agent strings, keystrokes, session video, order-book payloads, candle data, imported files, exchange credentials, or the contents of a replay session. We do not use cross-site advertising trackers. Anonymous event records are retained for up to 180 days for product analysis.
Feedback and contact information
If you submit feedback, we collect the replay job and outcome you choose plus any text you voluntarily write. Email is optional and is stored only when you check the permission box allowing us to reply. Feedback records are retained for up to 180 days (records made before October 2026 may be kept up to 365 days).
When you send feedback, a Radar request or a waitlist signup, we send a notice to our team inbox so we see it, whether or not you added an email address. The notice does not include your address or anything you wrote. Before 16 October 2026, a copy including the address and anything you wrote was also posted to a private team channel on Discord; those copies stay until we delete them, and you can ask us at hello@matchstick.trading to delete yours. The 180-day limits below apply to the stored records, not to those copies.
If you request access to Matchstick Radar, we collect your name, email address and how you expect to use it, plus the same anonymous page-view and request events described above. We use them only to review your request and reply to you; nothing is set up or charged by sending one. Radar requests are stored with feedback records and retained for up to 180 days (earlier ones, up to 365 days).
If you join the Replay waitlist on matchstick.trading, we store the email address you enter, the time, the page or campaign you came from, and that you gave permission to be contacted, for up to 180 days. If you also tick “Reserve me a founding spot”, we store that you did, and the name and note you chose to add, for the same period. Nothing is charged and no payment details are collected. We send one confirmation email, usually right away (there is a daily sending limit, so it can be skipped), then one email when Replay ships something worth your time. It is not a newsletter. Reply “remove” to any of these emails and we will take you off the list. To avoid sending the confirmation twice, we keep a one-way hash of your address for 7 days. When someone joins, we also get a short notice that a signup happened, by push message or email, without the address.
If you join a Pro waitlist on the Replay demo, we store only the email address you enter, the gated capability you requested, and the time you joined, so we can contact you about that feature. We do not store your IP address or user agent with it. Waitlist entries are deleted automatically after 365 days. To limit abuse, we keep a counter of waitlist requests per salted one-way hash of your IP address; we do not store the address itself, and the counter expires one hour after your last request. If we give you early Pro access, we store your email address, the access tier and when it was granted, until we revoke that access. We do not sell, rent, or use this information for third-party advertising.
Signing in to the Replay app
The hosted app at app.matchstick.trading is invite-only. If you ask for access, we store your email address (lowercased), a one-way hash of the access token we give you, whether your request is pending, approved or denied, and when each happened. We use the email only so we know whom we are inviting and can reply to you. When you sign in we set a sign-in cookie for 30 days and store a one-way hash of it; the cookie is not used for advertising or tracking.
To limit abuse, we keep a counter of sign-up and sign-in attempts per one-way hash of your IP address. We do not store the address itself, and the counter is removed once its one-hour window has passed and the next request is processed. We do not store your user agent, and our logs record event names and outcomes only, never an email, token, cookie or IP address.
We keep your email until you revoke your access. You can do that yourself from the status page; revoking deletes your account and every sign-in record tied to it immediately. You can also ask us to delete it at hello@matchstick.trading.
Local product data
Browser storage may remember your local demo state, waitlist confirmation, and anonymous session identifier. Market sessions and exchange credentials are not uploaded through the analytics or feedback endpoints.
Infrastructure
Cloudflare hosts the site, serverless endpoints, analytics dataset, and feedback storage. Email may be delivered by an email service when you explicitly supply an address. These providers process only the information needed to operate those functions.
Your choices
You may use Replay without supplying an email. You may request access to, correction of, or deletion of feedback or waitlist information by emailing hello@matchstick.trading. Include the email address you used so we can locate the voluntary record; anonymous product events cannot reliably be linked back to you.
Changes
This notice will change as the preview develops. Material collection changes will be described here before they are introduced.
Contact
For privacy questions or data requests, contact hello@matchstick.trading.
Last updated: October 14, 2026.