Privacy

What this site stores about you, who else ever sees it, and how to get rid of it. Last updated 7 September 2026.

Who runs this

Moon The Train is run by one person, Pham Minh Truong, from Hanoi, Vietnam. There is no team, no support desk and nobody else with a login to the database.

Anything on this page, and any request about your own data, reaches me at support@moonthetrain.com. By post:

If you only read the site

Nothing is stored about you and no cookie is set. You can check that: open the site in a private window, look at the cookie list, and it is empty until you either sign in or agree to analytics. The pages carry no advertising trackers and no social widgets.

Two things do leave your browser even so. Product screenshots are served from cdn.jsdelivr.net, a public code and file network, so your address reaches them the way it reaches any site you load an image from. And if you agree to the analytics bar, Google Analytics starts — see below.

If you open an account

The account itself holds a username, an email address, and a password that is stored as a hash rather than as the password. Around it sit the things the service cannot work without:

• Your subscription and orders — which plan, what it cost, when it starts and ends, and a reference for each order.
• The trading accounts you licence — the MetaTrader account number, the broker name it reports, whether it is a demo, and when it was last seen. This is what a licence check compares against; without it an indicator on your terminal cannot tell that it is yours.
• Which products you have installed — the product, the platform, the version and when it last checked in. It is how the download page knows what you are already running.
• Questions you send to the stats service — the symbol, the timeframe, your question, the messages either way, and any file you attach.

What is never collected

No card or bank details, ever. Nothing on this site takes a payment. Paying happens at PayPal, on a blockchain, or by a bank transfer you make yourself, and what comes back here is a reference and a date — never a number you could pay with.

Your trading is not collected either. The licence check reads an account number, not a balance, not a position and not a trade. Nothing on your terminal is uploaded.

Analytics, and only if you say yes

The site uses Google Analytics to count visits and see which pages get read. It stays switched off until you press Accept on the bar at the bottom of the page: before that no request is made to Google at all, so there is nothing to opt out of. Your answer is remembered in your own browser rather than in a cookie sent to us.

Change your mind at any time with the Cookies link in the footer. Declining after having accepted also deletes the cookies Google set. Analytics never runs on the account or admin pages, whatever you answered.

Server logs

The web server keeps ordinary access logs. Repeated failed sign-ins are counted per address to slow down guessing; that count lives in memory and is gone when the site restarts. Neither is used to build a picture of you.

Who else sees any of it

• Hetzner — the server sits in Helsinki, Finland, and they host it. The database is on that machine and nowhere else.
• Google — analytics, and only after you agree.
• jsDelivr — serves the product images your browser loads.
• PayPal, or a blockchain, or your bank — whichever you choose to pay with. They see the payment; this site sees that it arrived.

Nothing is sold, rented or handed to advertisers. There is no mailing list, and this site sends no marketing email — it currently sends no email at all.

Getting your data back, or deleted

Everything the site holds about you is on your own account pages, which is the fastest way to read it. You can edit what is editable there, and delete the whole account yourself from the profile page. That removes the account, the subscription, the orders, the licensed trading accounts and the stats conversations. It cannot be undone.

One row is deliberately kept: the record that a particular trading account has already taken a free trial. It is filed under the account number rather than under you, and it stays so that deleting and re-registering does not turn one trial into an endless supply. It holds an account number and a date, nothing else.

Deleted data also survives in the nightly backup for up to thirty days, after which that copy is rotated out. If you would rather I did any of this by hand, or you want a copy of your data in a file, write to me and I will do it.

When this changes

This page changes when the site does, and the date at the top moves with it. If a change ever means data being used for something new, the bar at the bottom of the page will ask again rather than assume the old answer still holds.