1. Scope
Hikaru Koji, an individual trading as Shadow X, is responsible for the processing described in this notice and is the person to whom privacy requests should be directed. Shadow X is a trading name, not a company or separate legal entity.
This notice applies to the Shadow X public website, customer account area, hosted command centre, billing flow and support communications. Third-party services have their own privacy notices and terms.
2. Information we handle
Account and support information
We handle information you submit when creating or managing an account, including your name, email address, account password, selected plan, verification state, and the contents of support requests or other communications.
HFM account and provisioning information
To provision and connect a terminal, Shadow X collects and stores the HFM trading account ID, trading Master password and trading server that you enter. Those credentials are used to provision and operate the assigned MetaTrader 5 terminal for the account you instruct Shadow X to coordinate.
We also handle account role and mapping information, terminal and connection status, configuration choices, operator commands, basket and account events, notification preferences, and service activity records needed to operate and troubleshoot the system.
HFM partner verification information
When determining eligibility for verified HFM pricing and evaluating approved discount offers, Shadow X may match your mapped account against information in HFM partner reports. That information can include affiliate registration or approval status, account type, server, platform and currency, account-activity summaries such as trades, volume, commission and first or last trade dates, and the latest reported balance, equity, margin and free margin.
Billing information
Stripe-hosted Checkout collects payment-card data. Shadow X does not receive or store payment-card data. We receive and retain billing records such as your selected plan, Stripe customer and subscription references, checkout or invoice references, payment status, trial status, billing period and the amount associated with the subscription.
Telegram information
If you enable Telegram notifications, we handle the chat ID or IDs you provide, your notification preferences, delivery status and the account or trading-event message content sent to Telegram. Telegram processes those messages under its own terms and privacy practices.
Device, campaign and service information
When you use the website or account area, server and infrastructure records may include IP address, browser and device details, requested pages, timestamps, session identifiers, security events and diagnostic information. If they are present in a link you use, we may also handle campaign parameters and advertising click identifiers such as UTM values, gclid, fbclid and msclkid.
For the current browser session, Shadow X may store those campaign or click identifiers in session storage and add them only to known Shadow X marketing, signup or login links. This helps associate a visit or account handoff with its campaign source. Unrelated URL fields are not forwarded by this feature.
3. How we use information
- To register, verify and administer your account.
- To provision reserved terminals and connect the HFM accounts you map.
- To carry out operator-controlled coordination, monitoring, notifications and record keeping.
- To determine plan access and verified HFM pricing eligibility.
- To start and manage trial, subscription, payment and cancellation status.
- To send account, verification, billing, operational and support communications.
- To diagnose failures, protect the service, prevent misuse and comply with applicable legal obligations.
4. Services involved
Information is disclosed when needed to provide the feature you request or to operate the service. Current service relationships can include:
- Stripe for hosted Checkout, subscription billing, payment status and its customer billing portal.
- HFM as the third-party broker and for partner-report matching used to determine verified HFM pricing.
- Telegram when you choose to send account and trading-event notifications to a Telegram chat.
- Cloudflare for website delivery, infrastructure and traffic or security processing.
- Email delivery providers for verification, account, billing and support messages.
- Google Translate on pages where the translation control is available. Loading or using it may send device and request information to Google and may set a language-preference cookie.
We may also disclose information when required by applicable law, or when reasonably necessary to investigate abuse, protect users, or protect the service. Third-party providers may process information in countries other than your own under their respective terms and safeguards.
5. Sessions, cookies, campaign attribution and language choice
Shadow X uses session storage or cookies needed to keep you signed in, maintain account security, remember relevant service state and retain approved campaign attribution for the current browser session. The language control may store a Google Translate language preference. Browser controls can remove or block cookies or session storage, but blocking essential storage can prevent parts of the account area or campaign handoff from working.
6. Retention
We retain information for as long as it is reasonably needed to provide and administer the service, maintain billing and operational records, resolve disputes, investigate misuse, and meet applicable legal obligations. The period depends on the kind of record and why it is needed.
Closing an account or asking for deletion does not require deletion of information that must be kept for billing, fraud prevention, dispute resolution or legal compliance. Stripe, HFM, Telegram, Google and other providers control their own records under their privacy practices.
7. Your choices and requests
You can update certain account, HFM mapping and Telegram settings inside Shadow X. You may also ask to access, correct or delete information associated with your account. Depending on the law that applies to you, you may have additional rights to restrict or object to processing, receive a portable copy, or complain to a privacy authority.
Email Shadow X support from your account email. We may need to verify your identity and may retain information where applicable law permits or requires it. Do not send a payment-card number or HFM trading password by email.
8. Protecting your account
Keep your Shadow X and HFM credentials confidential, use credentials only on pages you trust, and contact us promptly if you believe an account has been accessed without permission. No internet or hosted system can be guaranteed free from every security or availability risk.
9. Changes and contact
We may update this notice as the service, providers or legal requirements change. The date at the top identifies the current published version. Questions and privacy requests can be sent to Shadow X support.