Privacy Policy

Last updated October 12, 2026 · applies to ONE (propfirmloop.com/one), the ONE Sync browser extension and Prop Firm Loop's email list

ONE is a free trading journal made by Prop Firm Loop. This page explains, in plain words, what ONE collects, why, and how you can export or delete everything. Short version: your journal is yours. We don't sell it, we don't show you ad trackers, and only you can see it.

1. Who we are

"Prop Firm Loop", "we" and "us" mean the operator of propfirmloop.com. You can reach us at support@propfirmloop.com or in our Discord community.

2. What we collect

Your login

• Email address, so we can send you sign-in codes. ONE has no passwords.
• The name you choose (optional), and the date you confirmed you're 18 or older and accepted these terms.

If you join our email list

ONE's waitlist and the "Stay in the loop" form on our home page add you to Prop Firm Loop's email list. We keep your email address, when you joined, and where you signed up (the waitlist or the home page, and the ref or utm_source of the link that brought you, if it had one). We use it to tell you when ONE opens and to send you Prop Firm Loop's news and deals. Joining the list doesn't create a ONE login, and nothing else about you is collected.

Your journal

Everything you add or connect: prop accounts (firm, plan, size, rules, balances), trades and fills (symbols, times, sizes, prices, P&L, fees, funding), payouts, money spent on evaluations, setup tags, grades, notes (and any P&L you type into them), the chart screenshots you upload, and the certificates you upload (their files, and the firm, date, amount and account you give each one).

From the accounts you connect

• ONE Sync (Chrome, Edge and Brave extension, for Vest Markets). When you open Vest's website, the extension reads trading data that Vest's own page has already loaded for you: your accounts' rules, status and balances, your closed positions and their fills, and your payout records. It keeps only those trading fields before anything leaves your browser. It does not collect your Vest password, login session, wallet keys, email address, payment details or Vest user ID. It makes no extra requests to Vest, never clicks anything, never places or changes orders, and never touches login, card or password fields. Its optional on-page guide reads which Vest page, tab and account is showing, only to point at the next button for you to click; nothing it reads leaves your browser. To remind you when a trade you closed isn't in ONE yet, it also notes which of your positions are open (only their Vest ids and accounts); open positions never leave your browser. It runs only on Vest's website and on ONE's page (to link it), so it doesn't see your browsing anywhere else, and it can see which of your tabs are on Vest only to refresh one (with Positions History open) when you press Sync now or Refresh. It sends the trading data only to ONE's database, and keeps in your browser a link token (which connects it to your journal), its sync status, and how many of each Vest account's trades it has sent (their Vest ids), so it can show what's left to bring in; uninstalling it removes all of it.
• MyFundedPerps (if you connect it). You paste a Read Only API key into ONE. It goes to our server once, is stored there encrypted, and is never sent back to a browser. Our server uses it only to read from MyFundedPerps' API: your accounts (balance, rules, status, and whether a payout is pending), your closed positions and their fills. It reads them only when you connect the key and when you press Sync now, never on its own. It never places, changes or cancels anything (a Read Only key can't). Besides the key, it keeps only where its last sync stopped, so the next one asks for what's new. Remove the key in ONE and it's deleted from our server; revoking it on MyFundedPerps stops it too.
• CSV imports. The trade data inside the files you choose to import.

Technical data

Like any website, the services that host ONE and deliver its typefaces process your IP address and basic request logs to deliver pages, keep the service secure and fix problems. ONE itself doesn't use advertising or analytics trackers. Your browser stores your sign-in session and a few preferences (like privacy mode) locally. The Looper voice briefing uses your device's built-in speech, and the audio never leaves your device.

3. How we use it

• To run your journal: stats, calendar, Account Center (drawdown, consistency, payout readiness), certificates, share cards and Wrapped recaps.
• To sign you in and keep your account secure.
• To sync the accounts you choose to connect, and to stop syncing when you disconnect them.
• To answer you when you contact us, and to send service emails such as sign-in codes. We'll only send product news if you opt in, and every such email has an unsubscribe link.

We don't sell your personal information, we don't share your trading data with prop firms, and we don't use it to target ads. A few service providers host ONE, run its database and deliver its sign-in emails for us; they process data only to provide that service, and your journal is stored on servers in the United States. We may also disclose information if the law requires it, or to protect the safety and rights of our users or the public.

4. Offers and affiliate links

ONE lists offers from partner prop firms. When you buy from a partner firm through our links or with code LOOP, that firm may pay Prop Firm Loop a commission. Clicking an offer takes you to the firm's website, where the firm's own privacy policy applies. Partner firms don't receive your journal.

5. Security

Data travels over HTTPS and is encrypted at rest by our providers. Row-level security in the database means each signed-in trader can read and change only their own rows. Chart screenshots and certificates sit in private storage that only you can open. API keys are encrypted and only our server can read them. No system is perfectly secure, so please keep your email account safe: whoever controls your inbox can sign in to ONE.

6. How long we keep it

We keep your email on our list until you unsubscribe or ask us to remove it. We keep your journal for as long as your account exists. When you delete your data it's removed from the live database right away. Copies in routine backups expire within 30 days.

7. Your choices and rights

• Export: download everything ONE holds about you as one file, any time: account menu → Your account → Export my data.
• Delete: erase your journal, uploaded charts and login yourself, any time: account menu → Your account → Delete my data. It takes effect right away and can't be undone, so export first.
• Disconnect: unlink ONE Sync or remove a MyFundedPerps key at any time. Uninstalling the extension stops it immediately.
• Our emails: every email from our list has an unsubscribe link, or contact us and we'll take you off the list.

Depending on where you live (for example California, the EU or the UK), you may have extra rights to access, correct, delete or port your data, and to object to or restrict certain uses. Most of these you can do yourself right away: export, delete, and edit anything in your journal. For anything else, contact us and we'll respond within the time the law requires. You won't be treated differently for using these rights.

8. Age limit

ONE is only for people 18 or older. If we learn that someone under 18 has an account, we'll delete it.

9. ONE Sync and the Chrome Web Store

ONE Sync's use of information it receives complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. It uses that data only to keep your ONE journal in sync and for no other purpose.

10. Changes

If we change this policy, we'll update the date at the top. For significant changes we'll tell you in the app or by email before they take effect.