Legal
Privacy Notice
Preview draft. This notice describes the Astra preview site only and has not been reviewed by counsel. A full notice will be published before accounts go live.
Last updated: 2026-10-08
1. Opening a trading account through Astra
If your country is eligible, signing up opens a trading account with a partner broker. To do that we send your first and last name, email, phone number, a random password Astra generates for the broker account, your IP address, your country, your preferred language, the page you signed up from, and your chosen starting agent to our lead partner Traffaholics, which passes them to the partner broker. The broker then handles identity checks and your account under its own privacy notice. Astra may be paid for this referral.
Astra itself keeps only a minimal record: a one-way hash of your email, the partner's lead ID and brand name, your starting agent, the sign-up method (email or Google), your country, the page you came from, and the time. Astra never shows, stores, or logs that password or your phone number; they pass through to the partner once. The broker's auto-login link signs you in, and the broker's password reset lets you set your own password later. Nothing is sent until you press Create my account beside this disclosure on the sign-up page.
Google sign-in. If you continue with Google, Google tells us your name and verified email address. We keep them in a signed, HttpOnly cookie for 30 minutes so the form can be prefilled, and store nothing else from your Google account.
2. What the early-access list collects
When you join the early-access list (because your country is not eligible for a partner account) we store your email address, the agent you chose as your starting seat, the page you signed up from, the time, the country Cloudflare reports for the request, and the fact that you agreed. Your IP address is used only to limit repeated sign-ups and is stored as a one-way hash that expires within two minutes.
We use your email only to tell you when your seat opens and to send launch updates. We do not sell or share it. The list is stored on Astra's own server, which sits behind Cloudflare's network.
To leave the list or have your record deleted, email privacy@astratrading.ai from the address you signed up with, or use the unsubscribe link in any email we send.
3. Analytics and your choices
Astra uses Google Analytics 4 to see which pages help visitors and where sign-up loses people. On your first visit a banner offers three equally easy choices: Accept all, Analytics only, and Reject all. Your choice is kept in your browser's local storage (astra-consent, with the date) for 180 days, then we ask again.
Before you choose, and after Reject all. The Google tag still loads, in Google's consent mode with every consent type denied. It sets no cookies and stores nothing on your device, and sends Google cookieless signals for each page view and event: the page address, the referring page, the time, browser and device type, screen size, language, and the fact that consent was not given. Google receives your IP address with the request to derive an approximate location and does not store it. The cookieless signals carry no identifier that links your visits; Google uses them to estimate total visits in aggregate.
Analytics only. Google Analytics also sets first-party cookies (_ga and _ga_*, kept for up to two years) holding a random ID that tells repeat visits apart, and records which buttons, agents, menu items and questions you open, how far you scroll, page-speed measurements (Core Web Vitals), and whether a sign-up or waitlist request succeeded or failed. Advertising features stay off.
Accept all. Astra also turns on Google signals: if you are signed in to a Google account that allows ad personalization, Google links the visit to that account to give Astra aggregated audience reports (age range, gender, interests) and cross-device reports. Google advertising cookies (_gcl_*) may be set. Astra does not run ads and sees only aggregated reports.
Astra never sends Google your name, email, phone number, or anything you type into a form. Event and user-level data is kept for 14 months in Google Analytics, and Astra uses it only in aggregate to improve the site.
Legal basis and withdrawal. Analytics cookies and Google signals run only on your consent (UK and EU GDPR Art. 6(1)(a); PECR and the ePrivacy rules for cookies). The cookieless signals sent before a choice store nothing on your device; Astra relies on its legitimate interest in counting visits for them (GDPR Art. 6(1)(f)), and you can object by blocking the Google tag in your browser. You can change your choice at any time with Cookie settings at the bottom of every page ; Reject all deletes the _ga and _gcl cookies and returns to cookieless signals. Apart from the cookies you accept, the only cookies are the short-lived, functional Google sign-in cookies described above.
4. Third parties
- Astra's server (a rented virtual server we operate) runs the site and the sign-up functions and stores the early-access list.
- Cloudflare sits in front of that server as a network and security proxy, and processes standard request data, such as IP address and user agent, to deliver pages and protect against abuse.
- Google Fonts serves the typefaces. Your browser requests font files from Google, which receives your IP address and user agent as part of that request.
- Traffaholics and its partner broker receive the sign-up details listed in section 1, only after you consent.
- Google processes your sign-in if you choose Continue with Google.
- Google Analytics (Google LLC) receives the data described in section 3: cookieless signals before a choice, and full measurement only with your consent. It processes that data on Astra's behalf. Google LLC is in the United States and certified under the EU-U.S. Data Privacy Framework and its UK Extension, which covers that transfer.
5. Your choices
You can block third-party font requests in your browser; the site falls back to system fonts. You can accept or reject Google Analytics, and change that later, with Cookie settings at the bottom of every page; blocking cookies or using a content blocker also stops it. To delete what Astra stores about you, email privacy@astratrading.ai. To close your trading account or delete data held by the broker, contact the broker directly.
6. Risk reminder
Astra is analysis and rules, not a broker and not advice. Leveraged products such as CFDs carry a high risk of losing money rapidly. Trading involves risk of loss.