Security & privacy

What Recap does with your data, stated plainly.

What protects your data

• Your footage stays on your machine. Your recordings, clips, and trade data are written only to your own computer. There is no cloud upload of your footage or trades.
• Recap can’t touch your account. It has no way to place, change, or cancel an order. It only ever reads your trades — “Flatten” just updates Recap’s own view of a position, never your broker’s. That includes the Tradovate connection: its access is read‑only.
• Nothing on the network can push trades into Recap. Recap only accepts trade data sent from your own machine. Other devices, websites, and programs can’t inject fake trades or read your data. The optional Tradovate connection is outbound‑only — Recap dials out to Tradovate to hear your fills; nothing can dial in.
• Your sign‑in is stored securely. Your session — and your Tradovate connection, if you link one — is kept in the Windows Credential Manager — the operating system’s protected store — not in browser storage. Your Tradovate password is never seen by Recap at all: you sign in on Tradovate’s own page in your browser.
• Account numbers can be hidden for screenshots and streams. Click the eye icon in the top bar, or use Settings → Trading accounts, to stop Recap showing your real broker account id (like APEX-38229-16) in the Library or the Review screen. Choose to blank every account to Account 1, Account 2, … or keep the nicknames you’ve set and blank the rest. It stays on until you turn it off, including across restarts — the lit eye is your reminder. Settings → Trading accounts itself always shows your real ids, so you can still match them to nicknames there.

What Recap sends — and what it never does

Three things can leave your machine, all visible and controllable in Settings → Diagnostics & usage data. None of them ever include your footage.

• Usage data (on by default; switch it off any time) — anonymous signals about how the app is used, so we can improve it. It never includes your trading data: no symbols, no prices, no P&L, no account numbers, no journal entries. Recap shows a one‑time notice about this on first launch.
• Crash reports — after a crash, Recap asks before sending a report (or sends automatically only if you’ve opted in). Your Windows username is removed.
• Logs you choose to send — the Send logs button (for support) uploads ~14 days of logs, a crash dump if present, and system info. A confirmation lists exactly what’s included — window titles and file paths among it — before anything is sent.

Things to know

• Your files aren’t encrypted by Recap. Recordings, clips, and trade data are stored as ordinary files on your machine. Recap relies on your computer’s own protections (your Windows account, and disk encryption if you have it enabled) rather than encrypting files itself.
• Logs include trade details. Account names, sizes, prices, and P&L are written in plain text to Recap’s rotating logs (kept ~14 days) to help with support. They stay on your machine unless you use Send logs. Your sign‑in key is never written to the logs.
• A nickname that spells out your account number is still shown. Masking hides the raw broker id, not whatever you typed as a nickname — so nicknaming APEX-38229-16 as “Apex 38229” defeats the point. Pick a nickname that doesn’t embed the number if you plan to screenshot or stream with masking on.

Because this machine holds both your account activity and continuous screen recordings, treat Recap’s data folder as sensitive.