Privacy Policy

Cookies on the website

The website uses functional cookies and, after consent, Yandex Metrica analytics cookies. Functional cookies include: your chosen interface language (xtester.lang), your decision on analytics cookies (xtester.consent), and a record that you accepted the Terms of Use and the Disclaimer before downloading (xtester.dl_accepted), which is used so that confirmation is not shown to you again.

Each of xtester.lang, xtester.consent and xtester.dl_accepted lasts 365 days (31536000 seconds) from being set. Creating a chat session additionally sets the functional __Host-xt-copilot cookie for one hour (3600 seconds) from session creation, without extension on reuse. These functional cookies are not used for advertising and can be deleted from your browser at any time.

On root pages, Yandex Metrica (counter 110764218) and Vercel Analytics load only after you allow analytics. They measure public page visits; Metrica also measures download goals, public outbound-link clicks and click maps excluding chat and input fields. Session Replay and form recording remain disabled: exclusion classes alone cannot guarantee chat privacy. No chat text is included in our analytics events. Before consent and after refusal analytics are not loaded. Your choice (xtester.consent) lasts 365 days; change it in the footer. Revoking consent reloads the page to unload analytics. /new review pages do not load analytics. Yandex and Vercel process analytics data under their privacy policies.

The blog is read-only; no registration is required.

Website AI chat

When server chat is enabled, pressing Send or Enter shares your question and limited conversation history through the website server with DeepSeek. Workspace files, editor contents and configuration paths are not sent automatically. Do not enter secrets or personal data. Missing configuration produces an unavailable message, never a fabricated AI answer.

The website key stays on the server; visitors do not need their own key. AI answers can be wrong. Chat cannot execute code, place orders or connect MCP. Local synthetic examples are separate from AI answers.

Abuse protection uses the one-hour __Host-xt-copilot functional cookie (Secure, HttpOnly, SameSite=Strict). Server storage contains counters and HMAC identifiers for IP/session, without short-lived leases. Chat code does not log prompts, raw IPs, provider error bodies or keys. Existing telemetry retention removes windows older than one day; chat does not trigger cleanup or create new tables. Conversation history stays in page memory, not localStorage. DeepSeek processes submitted messages under its own privacy policy; cancelling cannot guarantee cancellation of processing already started by the provider.

Chat input and contents carry Yandex Session Replay exclusion classes (ym-disable-keys and ym-hide-content). The new root presentation and /new pages load no recorders. These classes remain as additional protection, not a universal guarantee for other recorders.

Data in the XTester application

The application runs locally on your computer. Your strategies, history, settings and parameters are stored on your machine; telemetry is optional and enabled only with your consent. Network features (AI provider, exchanges, updates) can send requests over the network.

AI features use your own key for the provider you choose, or a local model — the relevant requests are sent directly to the service you selected.

You configure API keys and exchange connections yourself; they are stored locally on your device.

Processing by service providers

We do not sell your personal data. To run the website and the application, however, some data may be processed by the service providers described above, within those limits: Yandex Metrica web analytics and Vercel statistics (only after you consent to analytics cookies), website hosting, DeepSeek for website chat questions and limited history after Send or Enter, and the AI provider you choose and the exchanges you connect (as configured by you in the application).

Such processing takes place based on your consent, your own configuration, the need to deliver a feature you requested, or the requirements of applicable law. Each of these services processes data on its side under its own privacy policy.

Your rights

You can decline analytics cookies or change your choice in the footer. You can also delete cookies in your browser. Contact: Telegram @foreasytrading.