Last updated: October 30, 2026
1. Controller
The controller responsible for data processing on copytradingreports.com and in the CopyTrading Reports browser extension is:
Great Products and Ideas LLC
5830 E 2nd St, Ste 7000 #17723, Casper, WY 82609, USA
represented by Nepta eG, acting through Michael Rentmeister
Email: support@copytradingreports.com
EU representative (Art. 27 GDPR):
Nepta eG
Staufener Strasse 9a
79238 Ehrenkirchen
Germany
Email: support@copytradingreports.com
You may also contact our EU representative with any questions regarding data protection.
We have not appointed a data protection officer, as there is no legal obligation to do so.
2. Overview
We process personal data only to the extent necessary to provide this website and our service, to answer your requests, on the basis of your consent, or to comply with legal obligations. The legal bases are in particular Art. 6(1)(a) (consent), (b) (contract and pre-contractual measures), (c) (legal obligation) and (f) (legitimate interests) GDPR.
We do not use analytics or advertising tools, no social media plugins and no external fonts. All fonts are hosted on our own server.
3. Hosting and server log files
This website runs on our own server, operated for us by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, as our processor. The server is located in a data center in the United Kingdom. The European Commission has adopted an adequacy decision for the United Kingdom.
When you visit the website, technically necessary data is collected automatically (server log files): IP address, date and time, page accessed, referrer URL, browser type and operating system. This data is required to deliver the website securely and reliably and to detect attacks. The legal basis is Art. 6(1)(f) GDPR. Log files are deleted as soon as they are no longer needed for these purposes, at the latest after 30 days, unless a security incident requires longer storage.
4. Controller based in the USA
As our company is based in the USA, data you submit to us may also be processed in the USA. Where you use our service, this is necessary for the performance of the contract (Art. 49(1)(b) GDPR). We protect your data with appropriate technical and organizational measures and handle it in accordance with GDPR standards.
5. Early access list and email confirmation
If you sign up for early access, we process your email address, the platforms you use (investor and/or partner), the language of the form, the time of sign-up and confirmation and your IP address. We use this data to inform you about the launch of CopyTrading Reports and your free trial.
Sign-up takes place via a double opt-in procedure: you receive an email in which you confirm your address. Only then are you added to the list. We store the time of sign-up and confirmation as well as your IP address as proof. The form (Fluent Forms) and the contact list (FluentCRM) run on our own server; emails are sent via our mail server at IONOS SE. To improve our emails, it may be recorded whether an email was opened and which links were clicked.
The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time via the unsubscribe link in every email or by sending us a message. We then delete your data from the list, unless we are legally required to keep proof of your consent.
6. Contact form and email
If you contact us via the contact form or by email, we process the information you provide (name, email address, message) to handle your request. The legal basis is Art. 6(1)(b) GDPR where the request relates to a contract, otherwise Art. 6(1)(f) GDPR. We delete the data once your request has been fully dealt with and no retention obligations apply.
7. The CopyTrading Reports browser extension
The browser extension reads the account data that you yourself see in your logged-in browser at TAG Markets or CopyX and creates reports directly on your device. Transactions, balances, partner data and your login data are not transmitted to us and are not stored on our servers.
To check your license, the extension transmits your license key and your account number to our license server, encrypted via HTTPS. The server immediately converts the account number into a pseudonymous key (HMAC) using a secret server key and works only with this key. Your account number is never stored in plain text and is not logged. The legal basis is Art. 6(1)(b) GDPR. We store the pseudonymous key for as long as your license or trial exists.
If you create partner reports, they may contain data about other people in your downline. This data is processed only on your device. You are responsible for handling these reports in accordance with applicable data protection law.
8. Purchases and customer account
As soon as paid plans are available, we process the data required for the contract (name, email address, billing address, plan, license and payment status). The legal basis is Art. 6(1)(b) GDPR. Due to retention obligations under commercial and tax law, we store invoice data for up to 10 years (Art. 6(1)(c) GDPR). Before any payment provider is used, we will describe it in this privacy policy.
9. Cookies and local storage
We only use technically necessary cookies and storage:
- Language: the cookies
_icl_visitor_lang_js(stores your language choice, 30 days) andwp-wpml_current_language(session) ensure that you see the website in your language. - Light or dark mode: your choice is stored in the local storage of your browser.
- Forms and login: security tokens for forms and, if you log in, the WordPress login cookies.
The legal basis is § 25(2) TDDDG and Art. 6(1)(f) GDPR. As we do not use analytics or marketing cookies, no consent banner is required.
10. Recipients
Your data is received only by the service providers named above within the scope of their respective tasks and, where required by law, by public authorities. Your data is not passed on to third parties for advertising purposes and is not sold.
11. Storage period
We store personal data only for as long as is necessary for the respective purpose or as required by statutory retention periods (generally 6 or 10 years for business and accounting records). The data is deleted thereafter.
12. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and the right to withdraw your consent at any time with effect for the future (Art. 7(3) GDPR).
Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation. You may object to processing for direct marketing purposes at any time without giving reasons.
To exercise your rights, simply send an email to support@copytradingreports.com.
Right to lodge a complaint: You may lodge a complaint with any data protection supervisory authority, in particular in the EU Member State of your habitual residence. A list of authorities is available at edpb.europa.eu.
13. Information for users outside the EU
Residents of certain U.S. states (e.g. California) have additional rights, including the right to access, deletion, correction, and to opt out of the “sale” or “sharing” of personal information. We do not sell personal information. Please send requests to the email address stated above; we will not discriminate against you for exercising your rights.
14. Minors
Our service is intended for adults. It is not directed at persons under the age of 18, and we do not knowingly collect their data.
15. Changes
We will update this privacy policy if our processing or the legal situation changes. The version published here at any given time applies.