Effective as of 22 October 2026
A cookie is a small file placed on your device when you visit a website or web application. It is used in particular to ensure the technical operation of the service, to remember certain preferences or to secure a given operation.
As of the date of the last update of this policy, EloTrades uses only the following cookies. They are all set by the site itself (first-party cookies), with the exception of the Stripe cookies.
| Category | Name | Purpose | Duration | Provider |
|---|---|---|---|---|
| Necessary | __Secure-authjs.session-token | Maintaining the session and authentication | 30 days | Hecatek |
| Necessary (security) | authjs.csrf-token, authjs.callback-url, authjs.pkce.code_verifier, authjs.state, authjs.nonce | Protection of the login process (protection against request forgery, return to the correct page, securing sign-in with Google) | Duration of the session or of the current sign-in | Hecatek |
| Necessary (security) | et_mfa_trust | Remembering a trusted device for two-factor authentication, only if you tick “Don't ask again on this computer for 30 days” | 30 days | Hecatek |
| Functional | NEXT_LOCALE | Remembering the language preference | 1 year | Hecatek |
| Necessary | Stripe cookies | Securing the payment | Payment session | Stripe Inc. |
| Optional, subject to your consent | et_ref | Affiliation: remembering that you arrived via a partner's link, in order to attribute any subscription you take out to that partner | 30 days from the click on the link | Hecatek |
No behavioural advertising, marketing or retargeting cookies are used, nor any Google Analytics, Matomo or Hotjar cookies.
Cookies that are strictly necessary for the operation of the Service and for securing payment do not require prior consent when they are set exclusively for that purpose.
The et_mfa_trust cookie is an authentication security tracker. It is set only if you tick the option “Don't ask again on this computer for 30 days” during two-factor authentication, and its sole purpose is to exempt you from entering the code on that device for 30 days. It is signed and serves no other purpose. You can revoke it at any time from your account settings (Security section).
The NEXT_LOCALE cookie is used to remember the language chosen in the interface. You can delete cookies from your browser settings, subject to any consequences for the operation of the Service.
When you click on the link of an EloTrades partner, a window offers to remember for 30 days that you arrived via the partner indicated. The et_ref cookie is set and read only after you accept. The “Accept” and “Decline” buttons are presented in the same way.
This cookie contains the partner's name, the date of the click and a cryptographic signature intended to prevent fraud. It contains neither your name, nor your email address, nor your IP address. Its sole purpose is to attribute to the partner any subscription you may take out within that period.
If you decline, no affiliate cookie is set. You may nevertheless enter the partner's promotional code when subscribing.
You can withdraw your consent at any time, as easily as you gave it, using the button below; the cookie is then deleted. Deleting EloTrades cookies from your browser has the same effect.
Clicks on partner links are counted in aggregate form, per day and per partner, without IP address or identifier.
In addition to the cookies above, EloTrades stores in your browser's local storage (“localStorage”) information needed for the features you use: interface theme and language, status of the guided tour, backtest and journal settings (indicators, costs, account sizes, favourites), menu state and, if you use Topstep synchronisation, your Topstep API key, which is never transmitted to our servers. The site also keeps there a temporary copy of your dashboard statistics to speed up display (erased on sign-out), your chart drawings, a cache of your trade images and your response to the MT5 Expert Advisor warning. The browser's session storage (“sessionStorage”) remembers, for the duration of the visit, that a partner code has already been taken into account.
This information remains on your device, is read only by EloTrades, is used neither for advertising nor for audience measurement and therefore does not require prior consent. You can erase it at any time from your browser settings (site data), the only effect being a return to the default settings.
As of the date of the last update of this policy, EloTrades does not use audience measurement cookies such as Google Analytics, Matomo or equivalent.
EloTrades counts its visits without any cookie or other tracker: when a public page is reached, a daily total per source (for example "Instagram" or "direct access") is incremented on our servers, without any IP address or identifier. Nothing is stored on or read from your device, and these statistics cannot be used to recognise you.
The lifetimes of the cookies used are set out in the table above: 30 days for the session cookie, the trusted-device cookie and the affiliate cookie (from the click on the link), one year for the language cookie.
For any question relating to this policy:
Hecatek SARL
183 Chemin des Négadoux, 83140 Six-Fours-les-Plages, France
infos@hecatek.com
Last updated: 23 October 2026