Most trading journals ask you to upload your entire P&L history to a company
you've never met. Market Daybook can't, structurally.
The extension ships a Content Security Policy of connect-src 'none'.
That is Chrome enforcing, at the browser level, that this extension cannot make a
network request — not to us, not to anyone. It's not a promise in a privacy policy.
It's a line in the manifest you can read yourself before you install it.
It requests no host permissions. It runs no content scripts. It loads no remote code.
There is no account to create, no server to sign into, and nothing to leak in a breach
we couldn't have, because we never receive your data in the first place.
Your trades live in your browser, on your machine. Export them or delete them whenever
you like, from the Data & privacy screen.
The one optional exception: if you turn on the downloads watcher, the extension asks for
permission to notice when a broker CSV lands in your Downloads folder. It reads the
filename only, and never opens the file until you click Import. It's off by default, and
turning it off removes the permission again.