Privacy policy
This policy explains what personal data The Gold Agent collects, why, who else handles it, how long it is kept and what your rights are. The short version: you can read everything on this site without an account, the community needs no email address, and analytics cookies are only set if you say yes.
Last updated 10 October 2026
Who is responsible
The data controller is Ethan Hunt, who runs The Gold Agent as a sole trader in Norway. Contact us about anything in this policy via a direct message to @the_goldagent on Instagram.
- Name
- Ethan Hunt (sole trader)
- Contact
- a direct message to @the_goldagent on Instagram
What we collect
- Community account. When you join the community you only choose a display name. We create an anonymous account with a random ID that is stored in your browser. We do not ask for your email address, real name or password. We store your display name, the questions, replies and reports you post, any TradingView chart links you add, and when you posted them. If a moderator hides a post or bans an account, we record that too.
- Sign-in security data. Our login provider (Supabase) records the IP address and browser details of sign-in requests, which we use to stop spam and abuse, for example to limit how many accounts one network can create.
- Browser push alerts. If you turn on alerts, your browser gives us a push subscription: a web address at your browser maker's push service plus encryption keys. We also store whether you asked for economic news alerts. The subscription doesn't include your name or email.
- Analytics, only if you accept. Google Analytics records which pages you visit, your device and browser type, your approximate location (country or city) and the site that sent you here. It uses cookies to recognise returning visitors.
- Server logs. Like every website, our hosting (Netlify) and database (Supabase) providers process your IP address, browser details and the pages you request in order to serve the site and protect it from attacks.
- Settings stored in your browser. Your time zone, whether alert sounds are muted and your cookie choice are kept in your own browser and never sent to us.
- Emails you send us, including your email address and whatever you choose to write.
You don't have to give us any personal data to read the site. Joining the community and turning on alerts are optional. We do not sell personal data, use it for advertising, or make automated decisions about you.
Why we use it, and the legal basis
| Purpose | Legal basis | Article |
|---|---|---|
| Running the community: your account, display name and posts | Needed to provide the service you asked for | GDPR art. 6(1)(b) |
| Keeping the community safe: rate limits, reports, bans, security logs | Legitimate interest in preventing spam and abuse | GDPR art. 6(1)(f) |
| Browser push alerts | Your consent, given when you allow notifications | GDPR art. 6(1)(a) |
| Google Analytics | Your consent, given in the cookie banner | GDPR art. 6(1)(a); ekomloven § 2-7b |
| Hosting, server logs and security | Legitimate interest in running a secure website | GDPR art. 6(1)(f) |
| Answering your emails | Legitimate interest in replying to you | GDPR art. 6(1)(f) |
Where we rely on legitimate interest, you can object at any time (see your rights).
Who else receives data
We use these providers to run the site. Each only receives what it needs to do its job.
- Netlify, Inc. (USA): hosting, content delivery and server functions. Receives server log data for every visit.
- Supabase, Inc. (USA): database, community sign-in and file storage. Stores community accounts, posts, push subscriptions and sign-in security data.
- Google (Google Ireland Ltd. and Google LLC, USA): Google Analytics, only if you accept analytics cookies.
- Your browser's push service (for example Google, Mozilla, Apple or Microsoft, depending on your browser): delivers push alerts if you turn them on. They receive the alert and your subscription address.
- TradingView, Inc. (USA): chart images on signals, posts and community threads are loaded from TradingView's servers, and the live charts are TradingView widgets. When those load, your browser connects directly to TradingView, which receives your IP address and may store its own cookies or data in your browser under the TradingView privacy policy.
- Telegram, YouTube, Instagram, TikTok and Facebook: we only link to our channels there. Nothing is loaded from these platforms until you click a link, and after that their own privacy policies apply. We publish signals to our Telegram channel, but we send no data about you to Telegram.
Transfers outside the EU/EEA. Netlify, Supabase, Google and TradingView are based in the USA, so your data may be processed there. These transfers rely on the EU–US Data Privacy Framework where the provider is certified under it, or on the European Commission's Standard Contractual Clauses.
How long we keep it
- Community account and display name: until you ask us to delete it. Clearing your browser data signs you out for good, because the account has no password, but the account and its posts stay until you ask us to delete them.
- Community posts: for as long as the community runs, unless you or a moderator delete them. When an account is deleted, its posts are either deleted too or kept without any link to the account, whichever you ask for.
- Reports and bans: as long as needed to moderate the community. A ban is kept until it is lifted.
- Push subscriptions: until you turn alerts off or your browser cancels the subscription. We delete expired subscriptions automatically the next time an alert fails to deliver.
- Google Analytics: no longer than 14 months. The
_gacookies expire after up to 2 years, or right away if you withdraw consent. - Server and sign-in logs: a short period under Netlify's and Supabase's standard log retention, after which they are deleted automatically.
- Emails: as long as needed to deal with your message.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and get a copy;
- correct data that is wrong;
- delete your data, including your community account and posts;
- restrict how we use your data, or object to uses based on legitimate interest;
- data portability: receive the data you gave us in a machine-readable format;
- withdraw consent at any time, for analytics through Cookie settings and for push alerts by turning them off on the site or in your browser. This doesn't affect anything done before you withdrew.
Contact us via a direct message to @the_goldagent on Instagram to use any of these rights. We reply within one month. Community accounts are anonymous, so we may ask you to prove the account is yours, for example by posting a short code we send you from that account.
Complaints
If you think we handle your data unlawfully, you can complain to Datatilsynet, the Norwegian Data Protection Authority, at datatilsynet.no. We'd appreciate the chance to fix the problem first, so please contact us too.
Children
The Gold Agent is about trading and is not meant for anyone under 18. Don't join the community if you are under 18.
Changes to this policy
If we change how we handle personal data, we will update this page and the date at the top. See also our terms of use and about page.