Last updated: October 2, 2026
This Privacy Policy explains what personal data Vectixs collects, why, how long we keep it, who receives it, and the rights you have under Thailand's Personal Data Protection Act (PDPA). It should be read alongside our Terms of Service.
The data controller is the individual operator of Vectixs, based in Thailand ("we", "us", "our"). You can reach us at support@vectixs.com for any privacy question or request.
Vectixs is a free paper-trading and backtesting site. Paper trading means trading with simulated money. No real orders are placed for you, and nothing is sold.
| Category | What it includes |
|---|---|
| Account | Your username, your email address and whether you have verified it, and your password. The password is stored only as a bcrypt hash, never in plain text, so we cannot read it. We also keep when you signed up, when you last signed in, and when you accepted the Terms. |
| Two-factor authentication (optional) | If you turn it on, the secret your authenticator app uses, stored encrypted, and your recovery codes, stored only as hashes. |
| Profile (optional) | An avatar image if you upload one, whether you appear on the leaderboard (off unless you turn it on), and whether your forum profile is private. |
| Session cookie | One essential cookie that keeps you signed in. It is signed so it cannot be altered, it cannot be read by page scripts, and it expires after 14 days without a visit. It is not used for advertising or tracking. |
| Visitor log | For each page you load: the time, your IP address, the page address, your browser's user agent, an approximate country and city worked out from your IP address, the outside site that linked you (if any), and your account id if you are signed in. The location lookup uses a database stored on our own server; your IP address is not sent to anyone for it. You can see your own entries on your profile page. |
| Activity log | For sign-ins (including the two-factor step), sign-outs and failed sign-in attempts, signups, password resets, changes to your username, password, email or profile, account deletion, forum posts, comments, votes and reports, waitlist entries, and administrator actions: the time, your account id and username, the action, the address it was sent to, whether it succeeded, your IP address and your browser's user agent. |
| Forum content | Posts, comments, images and votes you make in the forum. Posts and comments are public. |
| Reports you send | When you report a post or comment: your account id, the reason, any note you add, and a copy of the reported text. If you report by email, your email and what you wrote. |
| Paper trading | Your simulated balances, bots and their settings, simulated orders and trades, backtests, watchlist, saved presets, and TradingView alert settings with the alerts received. |
| Notifications | Your notification preferences, the notifications shown in your dashboard, and, if you turn on push notifications, the push address your browser issues for delivering them. |
| Waitlist | Your email address, if you join the waitlist while signup is full. |
| Messages to us | Your name, email address and message, if you use the contact form or email us. |
| Past billing records | The Service once sold paid plans. If you paid for one, we keep the records of those payments: plan, billing period, status, amount and the payment provider's references. We never received full card numbers. |
| Your browser | Display preferences such as theme and currency are saved in your browser's local storage. They stay on your device and are not sent to us. |
| Purpose | Legal basis |
|---|---|
| Running your account, the paper-trading tools, the forum and the emails you need (verification, password reset, and the warning before inactive paper bots are stopped) | Performing our agreement with you (the Terms) |
| Keeping the activity log for 90 days | Legal obligation: Thailand's Computer Crime Act requires service providers to keep this traffic data |
| Reviewing reports and removing unlawful forum content | Legal obligation, and our legitimate interest in a safe forum |
| Keeping the Service secure, spotting abuse, and counting visits in aggregate | Legitimate interest |
| Keeping past billing records | Legal obligation to keep financial records |
| Sending push notifications | Your consent, which you can withdraw at any time in your notification settings or your browser |
| Answering your messages | Legitimate interest, or performing our agreement with you |
We do not use your data to make automated decisions that have legal or similarly significant effects on you.
We do not sell or rent personal data to anyone.
Our servers are in Singapore, and Resend, Cloudflare, Google and Discord are based in the United States. Using the Service therefore means your data is transferred outside Thailand. These transfers are needed to provide the Service you asked for. Where a provider offers contractual data-protection terms, we rely on them.
Passwords are stored as bcrypt hashes. Two-factor secrets are encrypted. The session cookie is signed and cannot be read by page scripts. Administrator pages are checked on the server. Our Security page describes these measures and the gaps we still have. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
Under the PDPA you have the right to:
To use any of these rights, email support@vectixs.com from the address on your account. We aim to answer within 30 days.
The Service is for people aged 18 or over. We do not knowingly collect data from anyone younger. If you believe a minor has created an account, email us and we will remove it.
We may update this Privacy Policy from time to time. If we make a material change, we will update the "Last updated" date above and make a reasonable effort to tell active users.
Questions and requests about your personal data: support@vectixs.com. You can also use the Contact form.