Privacy policy

When you visit nruno.com, technically necessary connection data may be processed, including your IP address, access date and time, requested URL, data volume, referrer, browser, operating system and HTTP status. This is required to deliver the site securely, detect attacks and errors, and keep the service stable.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and abuse-free operation of the website.

The website is provided through an OpenAI hosting platform and uses Cloudflare services for delivery, TLS encryption and network protection. The listed connection data may be disclosed to these providers. See the privacy information of OpenAI and Cloudflare.

Your selected language is saved as “nruno-language” in your browser's local storage. When you log into the NRUNO dashboard, the technically necessary signed session cookie “tb_session” is also set. It cannot be read by JavaScript (HttpOnly), is restricted to NRUNO requests (SameSite=Strict), and normally expires after no more than twelve hours or is deleted on logout.

The legal bases are Section 25(2)(2) TDDDG and Article 6(1)(b) and (f) GDPR. Storage is required to remember your chosen language or securely provide the signed-in dashboard.

If you arrive through an affiliate link and select “Accept all”, we store the affiliate code in your browser for up to 90 days. This allows a later registration or payment to be attributed to the person who recommended NRUNO and their commission to be calculated. The legal basis is your consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR. If you select “Necessary only”, no affiliate attribution is stored. You may change your choice at any time through “Cookie settings” in the footer; withdrawal applies for the future.

NRUNO currently uses no first-party analytics or advertising cookies and no tracking pixels. The hosting provider may process technically necessary security or session information. Before adding further cookies or tracking services, we will update this policy and request consent where required.

Fonts are delivered with the website; visiting a page does not create a connection to Google Fonts.

If you contact us by email, we process your email address, message content and metadata, and any details you provide voluntarily in order to respond. Email is provided through IONOS.

The legal basis is Article 6(1)(b) GDPR where the message concerns steps before or during a contract, and otherwise Article 6(1)(f) GDPR. Our legitimate interest is handling enquiries properly. Messages are deleted once the matter is resolved unless legal retention or evidentiary duties apply.

Provider information: IONOS privacy policy.

When you register or make a direct purchase, we process your display name, email address, password and acceptance of the contractual terms. The information is transmitted over an encrypted connection to the NRUNO account server. Passwords are stored only as secure hashes; plain-text passwords are not retained.

For the customer account, we also process username, account, plan and validity status, hashed connector and webhook tokens with shortened identifying hints, and creation, update, login, connector and webhook timestamps. Personal keys are displayed in full only when created or renewed.

For a free trial, we send a confirmation link to the supplied email address. For a direct purchase, the selected plan and billing period are passed into the payment flow. The legal basis is Article 6(1)(b) GDPR.

NRUNO uses personal connector keys and webhook addresses to assign incoming TradingView signals to the correct customer access and connected cTrader instance. Treat a connector key as a confidential access token and do not publish it.

Depending on the signal, we may process a connector/customer identifier, signal ID, date and time, symbol, action such as Entry, Exit, Buy or Sell, volume, optional stop-loss and take-profit values, connection status, execution result, error messages, and processing and latency data. IP and connection data may also be processed for authentication, system security and abuse prevention.

Processing is required to validate and route signals, show status, troubleshoot and perform the contract under Article 6(1)(b) GDPR. System security, abuse prevention and technical records additionally rely on Article 6(1)(f) GDPR.

NRUNO does not require your broker password or any deposit or withdrawal permission. Orders are executed by the NRUNO cBot configured inside your cTrader environment.

To show signal history and troubleshoot technical issues, the system retains a rolling history of the latest 500 signals, including the signal, status, timing and error data described above. It also logs the latest 250 technical system events, such as connection, authentication, delivery and acknowledgement.

Older entries are automatically overwritten in these rolling histories. Security and error data is otherwise kept only as long as needed to resolve incidents, prevent abuse or establish, exercise or defend legal claims. Statutory retention duties remain unaffected.

The NRUNO routing server runs in Oracle Cloud's Germany Central (Frankfurt) region. Oracle processes infrastructure, connection and stored service data as a technical provider. This supports secure and available webhooks, WebSocket connections, dashboard status and system logs.

The legal bases are Article 6(1)(b) and (f) GDPR. More information: Oracle Services Privacy Policy.

NRUNO connects services that you select and use independently. TradingView sends your configured alert to your personal NRUNO webhook. NRUNO validates and routes it to the connected cTrader cBot. cTrader/Spotware and your broker then process data independently under their own terms and privacy policies.

Do not include passwords, payment data or other content that is not required for routing in webhook messages. More information: TradingView privacy and cTrader privacy.

We use Stripe Payments Europe, Limited for paid subscriptions. The contractual information needed to complete payment is sent to Stripe, in particular the email address, selected plan, billing period, amount and an internal customer reference. Payment details such as card information are collected directly by Stripe; NRUNO does not receive complete card details.

Processing is necessary for pre-contractual steps and contract performance under Article 6(1)(b) GDPR and for statutory accounting and retention duties under Article 6(1)(c) GDPR. See the Stripe Privacy Policy.

Invoices and accounting records are kept for the applicable statutory retention periods.

When you use online cancellation, we process your name, email address, optional customer or contract number, plan, cancellation type, the stated reason for an extraordinary cancellation, requested end date, and the date, time and reference number of receipt.

This is necessary to identify, process, confirm and document your cancellation under Article 6(1)(b) and (c) GDPR together with Section 312k BGB. Cancellation and contract records are kept only as long as required to handle the contract, comply with legal duties, or establish, exercise or defend legal claims.

For an online withdrawal, we process your name, NRUNO account email address, the order, customer or contract reference you provide, language, and the date, time, reference number and content of the receipt. This information is used to assign, process, immediately confirm and document your withdrawal.

For a paid order, we also record your separate request for performance to begin before the withdrawal period expires. We store the exact wording and version of that request, its timestamp, email address, language, plan and billing period. The legal bases are Article 6(1)(b) and (c) GDPR together with Sections 356a and 357a BGB.

Withdrawal, consent and contract records are retained only as long as necessary for contract handling, statutory evidence and retention duties, or the establishment, exercise or defence of legal claims.

Personal data is available only to recipients who need it for the purposes described above, in particular hosting, network, cloud and email providers and, at your direction, TradingView, cTrader/Spotware and your broker.

Some providers have affiliates or subprocessors outside the European Economic Area. Transfers to third countries take place only under Articles 44 et seq. GDPR, in particular on the basis of an adequacy decision, certified participation in the EU-US Data Privacy Framework, or appropriate safeguards such as EU Standard Contractual Clauses.

Where no specific period is stated, we retain personal data only for as long as it is needed for its purpose. It is then deleted or anonymised unless legal retention duties, security needs or legal claims require continued storage.

Account and contract data is generally processed for the duration of the relationship and deleted after termination when statutory retention and limitation periods allow.

Subject to applicable law, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18), data portability (Article 20) and objection (Article 21). You may withdraw consent at any time for the future.

To exercise your rights, email support@nruno.com. We may request suitable proof of identity to protect your data.

You may also complain to a data protection authority. The authority responsible for our establishment is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.

You may object, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. We will stop processing unless compelling legitimate grounds override your interests, or processing is needed to establish, exercise or defend legal claims.

NRUNO does not use personal data collected through this website for solely automated decisions producing legal or similarly significant effects, and does not use it for profiling. Technical routing of a trading signal configured by you is not an assessment of you as a person.

We use appropriate technical and organisational measures. Website, webhook and connector traffic is encrypted through HTTPS or secure WebSockets (TLS), and connections are authenticated using personal keys. No internet-based service can guarantee absolute security.

We update this privacy policy when functions, providers or applicable law change. The version published on this page applies. Last updated: 16 August 2026.