Privacy policy

Last updated: 1 October 2026

This policy explains what personal data Dojiwave collects, why, and what you can do about it. It covers the website dojiwave.com, our waiting list, and RiskDeck, our panel for MetaTrader 5.

1. Who we are

Dojiwave is run by Tomasz Krygowski, Northern Lights Tomasz Krygowski, ul. Chmielna 73B lok. 14, 00-801 Warszawa, NIP 6842525717, Poland (“we”, “us”). We are the controller of the personal data described below. Contact: [email protected].

2. The short version

• RiskDeck keeps your trading data on your computer. We don’t receive your trades, logs or settings.
• We receive personal data only when you join the waiting list or write to us, for example when you send a Diagnostics report to support.
• This website sets no cookies and uses no analytics.
• We never ask for the password to your trading account, and we never sell your data.

3. This website

dojiwave.com is hosted on Cloudflare Pages. To deliver and protect the site, Cloudflare processes technical data about each visit, such as your IP address, browser and the page you asked for. The website itself:

• sets no cookies and stores nothing on your device;
• uses no analytics, advertising or tracking;
• loads its fonts and scripts from dojiwave.com, except the waiting list form's bot check, which loads from Cloudflare when you start using the form.

The waiting list form is protected by Cloudflare Turnstile, which checks technical data about your browser and connection to tell people from bots. It sets no cookie.

The RiskDeck simulation runs entirely in your browser, on generated prices. Nothing you click or type in it is sent anywhere.

4. The waiting list

Our trading tools are not on sale yet. If you join the waiting list, we e-mail you when they are, and after that when there's something new. The waiting list is for adults.

• Voluntary: giving your e-mail address and your consent is voluntary, but without them we can't put you on the list.
• What we keep: your e-mail address, the page you signed up on, when you signed up and confirmed, and the wording of the consent you gave. We don't store your IP address in the list.
• What we send: commercial information and direct marketing by e-mail about RiskDeck, Tapebook and other Dojiwave trading tools: launches, product updates and offers. We write only when there's something new, never a countdown, nothing about products outside trading and nothing from other companies. We send them only with your consent (GDPR Art. 6(1)(a)), which you give by ticking the box on the form.
• Confirmation first: after you sign up, we send one e-mail with a link to confirm. Until you confirm, you're not on the list. The link works for 7 days; if you don't confirm, we delete the address when the link expires.
• Leaving: every e-mail after the confirmation has an unsubscribe link. It opens a page with one button; press it and we delete your address from the list straight away. Your e-mail app may also show its own unsubscribe button, which does the same. You can also write to [email protected]. Withdrawing your consent doesn't affect the e-mails we sent before.
• Proof of consent: when you leave, we keep a short record that you had consented: a code made from your e-mail address with a secret key (HMAC-SHA-256) instead of the address itself, the dates you signed up, confirmed and left, the wording of the consent you gave, and the address of the form. This is pseudonymised data, not anonymous: with the key, we can check whether a given address is in the record. We keep it for 5 years from when you left or from our last e-mail to you, whichever is later, only to show that we had your consent and to defend ourselves against claims. Legal basis: our legitimate interest, Art. 6(1)(f).
• How long: until you withdraw your consent, until we close the list, or 12 months after the last e-mail we sent to the list, whichever comes first.
• No tracking: our e-mails contain no tracking pixels and no tracked links. We don't profile you. We don't sell your data or pass it to anyone else for their own marketing.
• Bot protection: the form is protected by Cloudflare Turnstile, which loads from Cloudflare only when you start using the form. To tell people from bots, your browser sends technical data about itself and your connection, including your IP address, directly to Cloudflare. Turnstile sets no cookie on your device. We rely on our legitimate interest in keeping the form free of spam and abuse, Art. 6(1)(f). We don't store your IP address in the list.
• Where it's kept and who sends: the list is stored by Cloudflare. Our e-mails come from [email protected] and go out through the mail servers of dHosting, our e-mail provider in Poland. Replies go to [email protected].
• Transfers outside the EEA: Cloudflare, Inc. is based in the United States and may process this data there. The transfer relies on the EU-U.S. Data Privacy Framework; where the Framework doesn't apply, on the EU Standard Contractual Clauses in Cloudflare's data processing addendum.

5. RiskDeck

• RiskDeck stores its settings, event log and journal on your computer, in your MetaTrader data folder (MQL5\Files\RiskDeck). These files include your trading account number, broker and server. They are not sent to us.
• RiskDeck uses no DLLs and no web requests. The only things that leave your computer are the orders MetaTrader sends to your broker and, if you set them up, push notifications.
• Push notifications. In two situations RiskDeck raises an alert and, if you have set up push notifications in MetaTrader (your MetaQuotes ID), sends one to your phone: a position RiskDeck could not put a stop on, and positions that Close all on breach could not close. The notification goes through MetaQuotes’ servers under their privacy policy. We don’t receive it.
• RiskDeck will be sold through the MQL5 Market. When you buy it, MetaQuotes processes your purchase, your MQL5 account and your activations under its own privacy policy.

6. The Diagnostics report

If something doesn’t work, support may ask you for a Diagnostics report. You create it yourself and you decide whether to send it.

• How it is made: in RiskDeck’s Settings, the row Diagnostics report, press save. RiskDeck writes one text file to MQL5\Files\RiskDeck\diagnostics on your computer. The file name has the date, time and version, never your account number. Saving it sends nothing and changes nothing, and RiskDeck deletes its reports from your computer after 90 days.
• What is inside: the version, your RiskDeck settings, the environment (terminal, broker, server, account type) and the last lines of the log. Your account number appears only masked (for example 47****18), and your Windows user name is replaced with <user>. It never contains your name.
• How to send it: a private message on MQL5, or an e-mail to [email protected]. Please send it privately, never in a public comment, because it contains details of your account (broker, server, settings).
• What we do with it: we use it only to handle your request. We keep it for 90 days after your request is closed, and you can ask us to delete it sooner at any time.

7. What we collect, why, and on what legal basis

8. Who processes data for us

• Cloudflare hosts dojiwave.com, runs the waiting list form and stores the list, protects the form with Turnstile, and processes the technical data above on our behalf.
• dHosting (dhosting.pl, Poland) handles our e-mail: [email protected], and [email protected], from which we send the waiting list e-mails.
• MetaQuotes runs the MQL5 Market, MQL5 messages and the push notifications you enable, under its own privacy policy.

Cloudflare, Inc. is based in the United States. Where it processes data there, the transfer relies on the EU-U.S. Data Privacy Framework; where the Framework doesn’t apply, on the EU Standard Contractual Clauses in Cloudflare’s data processing addendum.

9. Your rights

You can ask us for access to your data, correction, deletion, restriction and portability, and you can object to processing based on legitimate interest. You can withdraw your consent at any time, without affecting what we did before. Write to [email protected]. You can also complain to the Polish supervisory authority, the President of the Personal Data Protection Office (uodo.gov.pl).

Data kept only on your computer, such as RiskDeck’s files, is under your control. We can’t access, correct or delete it, and you don’t need to ask us to.

10. Age

RiskDeck and our waiting list are for adults. We don’t knowingly collect data from anyone under 18.

11. Changes

If we change this policy, we’ll update the date at the top. If a change affects the waiting list, we’ll tell you by e-mail.

Dojiwave · RiskDeck