privacy policy

last updated: 2 may 2026

this page explains what data blank (the desktop trading terminal by certified random) collects, where it goes, and what it is used for. the short version: almost everything stays on your own machine. the backend server only sees what it needs to validate your licence, serve you updates, and keep the thing alive.

who we are

certified random is the publisher of blank. you can reach us at support@useblank.ai. the backend service is hosted on render and the installer is distributed through github releases.

what we collect on the server

the backend at blan-api.onrender.com stores:

• account data — your name, email address, hashed password, and stripe customer reference (we never see your full card number — stripe handles that). last-seen timestamp for your account.
• download events — when someone clicks the download button on this site, we record the ip address, the user-agent string, and a timestamp. this is used to count installs and is not linked to any individual.
• crash / error logs — if the desktop client encounters an error, it can post the error level and message to the server, tagged with the licence key. these are used to spot bugs. we do not include your portfolio, trades, api keys, or personal files in these reports.
• heartbeat pings — the app sends a minute-cadence ping so the update log, maintenance flag, and last-seen timestamp can refresh. these pings include your auth token and the installed version; nothing else.

what stays on your machine

everything else blank handles stays on your own pc and is never transmitted to us:

• your trading 212 api keys and any broker credentials
• your portfolio, positions, orders, and trade history
• your watchlist and strategy configuration
• agent journals, memory scratchpads, and chat history
• the sqlite database the app writes in its user-data folder
• any notes, tags, or protected-ticker lists you set

third parties the app talks to (directly, not through us)

when you use blank, your local copy of the app makes direct requests to the following services under your own credentials or public endpoints. we do not proxy, log, or store any of this traffic:

• advisor inference provider — the bundled advisor engine sends your queries for the analyst and agent features directly from your own machine to the upstream model provider. we do not proxy, log, or store any of this traffic. the provider's own privacy terms apply to those requests.
• trading 212 — only if you configure live trading. your api key lives in your local config file and is sent directly to trading 212. see trading 212's privacy policy.
• market data & news feeds — yfinance, google news rss, bbc, financial news via google news, marketwatch, reddit, youtube, stocktwits, and others. these are public feeds. the app fetches them over plain https with a browser-style user-agent.
• github — the installer and its updates are downloaded from github releases. see github's privacy statement.
• render — our backend is hosted on render, which acts as our infrastructure provider. see render's privacy policy.

cookies & tracking

this website does not use cookies. there is no analytics script, no advertising pixel, and no third-party tracker embedded on the landing page or on this privacy page. the only outgoing request the site makes is a post /api/download when you click the download button — described above.

how long we keep your data

• licence rows are kept for as long as the licence is active.
• download events are kept for up to 12 months, then aggregated.
• crash logs are kept for up to 90 days. you can request earlier deletion by emailing us.

your rights

if you are in the uk or eu, you have rights under the uk gdpr and gdpr to access, correct, or delete the personal data we hold about you, and to object to processing. email us at support@useblank.ai with your licence key (or the email used to buy it) and we will action the request within 30 days.

children

blank is not intended for anyone under 18. we do not knowingly collect data from children. if you believe a minor has provided us with personal data, contact us and we will delete it.

disclaimer

blank is a tool for informational and educational purposes. it is not investment advice. trading carries risk, including the loss of capital. any decision you make using the app — practice or live — is your own. certified random is not liable for trading outcomes, broker errors, missed orders, or downtime of third parties the app depends on.

changes to this policy

we may update this policy from time to time. the date at the top of this page always reflects the last revision. material changes will be announced in the in-app update log.