Privacy Policy
Last updated: September 2026
1. Who we are
TRADEwithTRILLY is operated by TRILLY CLUB LLC, a South Dakota limited liability company based in Rapid City, South Dakota, USA. We sell crypto and trading education and the AI-Predict TradingView indicator. We are the controller of the personal information described here.
2. What we collect
We collect only what the site actually needs to run:
- Your email address — when you request the free starter kit, buy something, or log in to the member portal.
- Your first name — only if you type it into the free-kit form.
- Purchase records — which products you bought and when, so we can unlock them for you.
- Course progress — which lessons you have finished, so the player can pick up where you left off.
- Usage data — pages visited, approximate location from your IP, browser and device type.
We never see your card number. Payment details are entered on Stripe's own checkout page and are processed by Stripe. We do not sell your personal information, and we do not share it with advertisers.
We do not collect anything about your TradingView account. The AI-Predict indicator is delivered as a source file you download, so we never ask for a TradingView username and have no connection to your account there.
3. Analytics and session replay — plainly
We use PostHog for product analytics, and it includes session replay: a reconstruction of how a visitor moved through a page. Because that is more invasive than a page counter, here is exactly how it is configured:
- It is switched off entirely on the member portal and on the order-confirmation page — anything under
/membersor/successis never recorded, and click tracking is disabled there too. - Text you type into any field is masked before it leaves your browser, on every page. Replays show that a field was filled, not what you filled it with.
- Request and response contents are stripped from anything the recorder captures.
- Your order ID is redacted from the page addresses we send to analytics.
We also use Vercel Analytics and Vercel Speed Insights, which measure page performance and traffic. Neither sets an advertising cookie or builds a cross-site profile of you.
If you would rather not be measured at all, enable Do Not Track or a content blocker — our analytics are ordinary third-party scripts and a blocker will stop them. Nothing on this site is gated behind analytics running.
4. Cookies and browser storage
We set no advertising cookies and run no ad-network pixels. What we do store:
| Name | Kind | Why | Kept for |
|---|---|---|---|
| twt_session | Cookie (httpOnly, Secure, SameSite=Lax) | Keeps you logged in to the member portal | 30 days |
| twt_checkout | Cookie (httpOnly, Secure, SameSite=Lax) | Links your order confirmation page to your Stripe payment, so we can verify a purchase without putting the order ID in the web address | 2 hours |
| trilly_email / trilly_first_name | localStorage | Pre-fills checkout so you don't retype your email | Until you clear site data |
| twt_exit_dismissed_until | localStorage | Remembers that you closed the free-kit popup so it stops asking | 30 days, or 1 year if you took the kit |
| mobile-cta-dismissed | sessionStorage | Remembers you dismissed the sticky mobile bar | Until the tab closes |
| twt_portfolio | localStorage | Your holdings in the member Portfolio Tracker. This stays in your browser — we never receive it and it is not on our servers | Until you clear it |
| twt_resume_… (one per lesson) | localStorage | Where you stopped in a course video, so it resumes there | Until you clear site data |
| twt_purchase_… (one per order) | localStorage | Marks an order as already counted, so a page refresh doesn't record the same purchase twice | Until you clear site data |
PostHog also sets its own cookie to recognise a returning visitor. Clearing your browser's site data removes everything in this table.
5. Who processes your data
These are the only services that receive your information, and each acts on our instructions:
| Service | What for | What it sees |
|---|---|---|
| Stripe | Card payment, checkout, receipts | Your name, email, and payment details. Card numbers go straight to Stripe — they never touch our servers. |
| Resend | Transactional and nurture email | Your email address and the contents of emails we send you. |
| Upstash (Redis) | Login links, purchase entitlements, rate limiting | Your email, which products you own, and a short-lived login token. |
| Vercel | Hosting, course video delivery, traffic analytics | Request logs, and — for members — signed links to your course videos. |
| PostHog | Product analytics and session replay | Pages visited, clicks on public pages, and a replay of public-page browsing. See below. |
| Discord | Community (optional) | Only what you choose to share by joining. Governed by Discord's own policy. |
We may also disclose information if the law requires it, or to establish or defend a legal claim.
6. How long we keep it
- Purchase and entitlement records — kept while you have access to what you bought, and afterwards as long as tax and accounting rules require.
- Email list — until you unsubscribe. Every email we send has a one-click unsubscribe link.
- Download links — the signed link in a delivery email stops working 72 hours after it is issued. The link itself is not stored: it is a signature we re-check, not a record.
- Login links — 15 minutes, single use.
- Analytics — retained by PostHog and Vercel under their own schedules.
7. Your rights
Wherever you live, you can ask us to show you what we hold about you, correct it, delete it, or stop emailing you. If you are in California, the EU or the UK you have these rights by statute, including the right not to be discriminated against for exercising them; we extend the same handling to everyone.
To exercise any of them, email us (see below). We will respond within 30 days. Deleting your account data means losing access to any course you bought, so we will confirm before we do it.
8. Children
This site is for adults. We do not knowingly collect information from anyone under 18. If you believe a minor has given us information, tell us and we will delete it.
9. Security
The site runs over HTTPS. Login is passwordless — we never store a password, because we never ask for one. Course videos are served through short-lived signed links that cannot be shared usefully. We cannot promise perfect security, and nobody honestly can, but we do not keep data we do not need.
10. Changes
If we change what we collect or who processes it, we will update this page and the date at the top. Material changes will be announced by email to subscribers.
11. Contact
Privacy questions, or a request to see or delete your data? Reply to any email we have sent you, or write to trillyinthemaking@gmail.com. We are TRILLY CLUB LLC, Rapid City, South Dakota, USA.
See also our Terms & Refund Policy.