This policy explains what personal data Hidden Blocks ("we", "us", "our") collects when you use our websites, the Hidden Blocks Scanner, our TradingView indicators, alerts and related services (the "Services"), why we collect it, who we share it with, and the rights you have over it. We are the data controller for this data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
The short version: we collect what we need to run your account, take payment (through Stripe), deliver your alerts and keep accounts secure. We do not sell your data, we do not use advertising or analytics trackers, and we never store your card details or your raw IP address.
Your email address, your password (stored only as a one-way hash, so we cannot read it), when you accepted our Terms of Service, and the state of your subscription (plan, status and renewal date).
Payments are processed by Stripe. We never see or store your full card number. Stripe shares limited details with us, such as your name, email, billing country and address, your Stripe customer reference, and the card type and last four digits, so we can manage your subscription and answer billing questions.
If you buy a TradingView indicator, the TradingView username you give us (and your Discord username, if you choose to give it) so we can grant and remove access to the indicator on TradingView.
When you sign in and while you use the Scanner, we record:
We use these records to keep your account secure, enforce the device limit on each subscription, detect accounts being shared in breach of our Terms, and understand how the Scanner is used. A visit is recorded at most once every 15 minutes per device, plus whenever your network or browser changes.
Saved filter presets, favourites, and alert rules, so they follow you across devices.
If you connect Telegram alerts, your Telegram chat ID and the alert rules you set up. Alerts are delivered through Telegram. You can disconnect at any time.
If you send us a bug report or contact us, the content of your message, the page you were on and your browser type.
We use only the cookies needed for the Services to work:
| Name | Purpose | Lasts |
|---|---|---|
| hb_session | Keeps you signed in. Holds a random token; the matching record on our side is stored hashed. | 90 days, renewed while you use it |
| wy_preview | Remembers that you unlocked a preview feature. | 30 days |
The Scanner also saves display preferences (such as your chosen filters and layout) in your browser's local storage. These stay on your device. We do not use advertising, analytics or third-party tracking cookies. Because the cookies above are strictly necessary, we do not show a cookie banner.
| Purpose | Lawful basis |
|---|---|
| Creating and running your account, taking payment, giving you access, granting TradingView indicator access, password resets | Performance of our contract with you |
| Sign-in and usage records, device limits, detecting account sharing, preventing fraud and abuse, keeping the Services secure | Our legitimate interests in protecting accounts and our Services and enforcing our Terms |
| Telegram alerts | Your consent, which you can withdraw by disconnecting |
| Keeping payment and tax records | Legal obligation |
| Answering your messages and fixing reported bugs | Our legitimate interests in supporting customers and improving the Services |
We use automated checks to limit how many devices can be signed in to one subscription at a time (signing in on a new device may sign out the oldest one) and to flag patterns that suggest an account is being shared, such as one login being used in two countries at once. A flag on its own does not close your account. A person reviews it before we suspend or end access, and you can contact us if you think we have got it wrong.
We do not sell your personal data. We share it only with service providers that help us run the Services, and only as much as they need:
We may also disclose data if the law requires it, or to protect our rights, our users or the public.
Some of these providers process data outside the UK, including in the United States and the European Economic Area. Where they do, the transfer is covered by UK adequacy regulations or by appropriate safeguards such as the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.
You have the right to:
To use any of these rights, email us at the address below. We will reply within one month. Some data (for example payment records) we must keep by law even if you ask us to delete it, and we will tell you if that applies.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the chance to sort it out with you first.
All traffic is encrypted with HTTPS. Passwords, sign-in tokens and password-reset tokens are stored only as one-way hashes, and IP addresses are hashed before they are stored, so a leak of our database would not reveal them. No system is perfectly secure, but we take reasonable steps to protect your data.
The Services are for people aged 18 or over. We do not knowingly collect data from anyone younger.
We may update this policy from time to time. When we do, we will change the date at the top of this page, and for significant changes we will let you know by email or in the Scanner.
For privacy questions or requests, email 786@hiddenblocks.io. You can also reach us on our Discord.