Privacy Policy
Effective date: August 29, 2026
1. Limited account and device data
Citadel stores the account information required to authenticate you and protect your private paper workspace. When a browser is first linked to an authenticated Citadel account, Citadel stores only a one-way device hash and coarse browser and platform categories. Citadel does not store the raw device cookie, full user-agent strings, IP addresses, or device fingerprints.
2. No Broker Data
Citadel does not connect to any broker, prop firm API, trading platform, or financial data provider. All account figures shown are mock data for planning demonstration purposes only.
3. No Payment Data
Citadel does not collect, process, or store any payment or financial credentials. Citadel does not process card payments or collect payment-provider passwords. A payment reference is used only to request a manual credit review. Citadel stores only an account-scoped one-way reference hash and the final four characters; raw references are not retained in new requests and are compacted when legacy requests are read for review.
4. Cookies and Analytics
Citadel sets host-only, Secure, HttpOnly, SameSite=Lax cookies named__Host-citadel_device and an opaque per-account link cookie. They are used only to avoid repeating the first-link registration and are not used for owner privileges. No analytics or tracking scripts are loaded. Device registration occurs on successful authentication; ordinary page requests and session refreshes do not read or write the registry.
5. Contact
For privacy questions, contact us at citadel@kizanlabs.com.
6. Changes
This policy will be updated as Citadel adds features that involve data collection. The effective date above reflects the most recent revision.