Last updated: 25 June 2026

Sortino Labs ("we", "us", "our") operates the website sortinolabs.com and a waitlist for early access to our trading simulation, research, and education platform.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, how long we keep it, and the choices and rights you have. Our Terms and Conditions separately govern your use of the website and related services.

To join the waitlist we require only your email address. We do not ask for your name, phone number, postal address, payment details, or trading account information. We use your email only to run the waitlist and to send you early-access, launch, and product-update emails about Sortino Labs — a research, simulation, backtesting, journaling, and education tool. We never sell or share your email for third-party marketing.

1. Who we are

Sortino Labs is the data controller for the personal data described in this Privacy Policy.

You can contact us about privacy matters at: [email protected]

2. Scope of this Privacy Policy

This Privacy Policy applies to the public website sortinolabs.com and the Sortino Labs waitlist.

It covers the personal data collected when you:

• visit the website;
• submit the waitlist form;
• consent to receive waitlist, launch, or product update emails;
• contact us directly.

Additional privacy information may apply in the future if we launch the full Sortino Labs platform, user accounts, paid subscriptions, analytics dashboards, journaling features, payment processing, or other services.

3. What we collect

3.1 Waitlist data

If you join the waitlist, we collect:

• your email address;
• the date and time you signed up;
• a record that you submitted the waitlist form, agreed to receive waitlist emails, and were shown the applicable Terms and Privacy Policy at the time of signup;
• the version of the Privacy Policy you saw;
• the result of the email-provider sync, such as success, duplicate, or failed;
• unsubscribe status, if you later unsubscribe;
• a suppression record, where needed, to make sure we do not accidentally email you again after you unsubscribe.

The waitlist form itself does not ask for your name, phone number, postal address, payment information, or trading account information.

3.2 Technical website data

Like most websites, our hosting, security, website statistics, email, or infrastructure providers may process technical information when you visit or interact with the website.

This may include:

• IP address;
• browser type and version;
• device type;
• operating system;
• approximate location based on technical information;
• pages visited;
• referring page or source;
• date and time of visit;
• basic server logs;
• security and error logs;
• interactions with forms or website pages;
• bot-detection and security signals;

We do not use this information to profile or directly identify individual visitors.

We use it only in a limited way to operate, secure, debug, improve, and understand the website.

3.3 Contact data

If you contact us directly by email or another channel, we may process:

• your email address;
• your name, if you provide it;
• the content of your message;
• any other information you choose to send us.

We use this information to respond to your message and keep a record of the conversation where necessary.

4. Why we collect and use your data

We use your personal data for the following purposes:

4.1 To manage the waitlist

We use your email address and signup information to add you to the Sortino Labs waitlist, manage your signup, prevent duplicate or abusive submissions, and keep a record of your consent.

4.2 To send waitlist, launch, and product-update emails

We use your email address to send early-access updates, launch updates, product updates, and important information about Sortino Labs.

We only send these emails where you have opted in.

Every email will include a way to unsubscribe.

4.3 To honour unsubscribe requests

If you unsubscribe, we stop sending marketing emails.

We may keep a minimal suppression record, such as your email address or a hashed version of it, to make sure we do not accidentally email you again through a future import, migration, or email-provider change.

4.4 To operate and secure the website

We use technical information, server logs, and security logs to keep the website working, identify errors, prevent abuse, detect suspicious activity, and protect the website and waitlist from spam, automated submissions, or attacks.

We also use Cloudflare's network and security services, including traffic filtering, performance optimisation, bot detection, and abuse prevention. As part of providing these services, Cloudflare may process technical information such as IP addresses, browser information, request metadata, and security-related signals.

4.5 To understand website usage

We use Plausible to understand basic website traffic, such as pages visited, referring sources, device type, country, and general usage patterns.

Plausible does not use cookies and does not identify individual visitors. We use this information to understand how the website is used and how it can be improved.

We do not use Google Analytics, advertising cookies, or marketing tracking pixels. If this changes in the future, and we use non-essential cookies or similar tracking technologies, we will ask for consent where required.

4.6 To respond to messages

If you contact us, we use the information you provide to respond to your request, question, or message.

5. Lawful basis for processing

We process personal data under the following lawful bases:

5.1 Consent

We use consent to send waitlist, launch, and product update emails.

You give consent by submitting the waitlist form and agreeing to receive these emails.

You can withdraw consent at any time by using the unsubscribe link in our emails or by contacting us at: [email protected]

Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew consent.

5.2 Legitimate interests

We may rely on legitimate interests to:

• operate and maintain the website;
• keep basic technical logs;
• prevent spam, abuse, fraud, automated submissions, or security issues;
• understand basic website performance;
• respond to direct messages;
• maintain a minimal suppression record after unsubscribe;
• protect our legal rights and the rights of others.

When we rely on legitimate interests, we only do so where we believe our interests are not overridden by your rights and freedoms.

5.3 Legal obligation

We may process or retain limited information where necessary to comply with legal obligations, regulatory requirements, or lawful requests.

6. Email marketing and unsubscribe

We only send waitlist, launch, and product update emails where you have opted in.

You can unsubscribe at any time by:

• clicking the unsubscribe link in any marketing email; or
• contacting us at [email protected].

After you unsubscribe, we will stop sending marketing emails to that email address.

We may still keep a minimal suppression record to make sure your unsubscribe request is respected.

7. Cookies and website statistics

Sortino Labs does not use Google Analytics, advertising cookies, marketing pixels, or cross-site tracking technologies.

We may use essential cookies or similar technologies where needed to make the website work properly, maintain security, prevent abuse, remember basic preferences, or operate essential functionality.

We use Cloudflare Turnstile on certain forms to help prevent spam, automated submissions, and abuse. Turnstile may process technical information such as IP addresses, browser characteristics, and other signals necessary to distinguish human visitors from automated traffic. Turnstile is designed to minimise data collection while providing security and abuse-prevention functionality.

We use Plausible to understand basic website traffic, such as pages visited, referring sources, device type, country, and general usage patterns. Plausible does not use cookies and is designed to provide aggregated website statistics without identifying individual visitors.

We may also process technical information, such as IP addresses, temporarily for security purposes, rate limiting, abuse prevention, server logs, and approximate country-level statistics. Where possible, we keep this information limited, aggregated, or short-lived.

If we introduce non-essential cookies, advertising cookies, Google Analytics, marketing pixels, or similar tracking technologies in the future, we will provide appropriate information and ask for consent where required.

You can also control cookies and similar technologies through your browser settings.

8. Processors and service providers

We use third-party service providers to operate the website, waitlist, email delivery, hosting, infrastructure, analytics, and security.

These providers may process personal data on our behalf only as needed to provide their services to us.

We currently use, or may use, the following service providers:

• Hetzner — hosting and infrastructure provider;
• ZeptoMail (a Zoho service) — email delivery for waitlist, launch, and product-update emails;
• Strapi CMS — software used to manage website content and waitlist records. If self-hosted, the data is stored with our hosting provider rather than by Strapi as a separate processor;
• Cloudflare — website security, content delivery network (CDN), traffic routing, bot protection, abuse prevention, and Turnstile verification services;
• Plausible - cookieless website statistics used to understand basic traffic, such as pages visited, referring sources, device type, country, and general usage patterns;
• Other technical providers we may use for security, monitoring, backups, website statistics, or website operation.

We do not sell, rent, or share your email address with third parties for their own marketing purposes.

9. International transfers

Some of our service providers may process personal data outside the United Kingdom or European Economic Area.

Certain providers, including Cloudflare, may process limited technical information, such as IP addresses and security-related request data, through globally distributed infrastructure as part of providing security, content delivery, and network services.

Where personal data is transferred internationally, we rely on appropriate safeguards, such as adequacy decisions, standard contractual clauses, UK International Data Transfer Agreements (IDTAs), or other lawful transfer mechanisms provided by the relevant service provider.

10. How long we keep your data

We keep waitlist data until you unsubscribe, request deletion, or the waitlist is no longer needed.

If you unsubscribe, we stop sending marketing emails.

We may keep a suppression record, such as your email address or a hashed version of it, to make sure we do not accidentally email you again.

Technical logs are kept only for as long as reasonably necessary for security, debugging, abuse prevention, and website operation.

If you contact us directly, we may keep your message for as long as reasonably necessary to respond, manage the relationship, and protect our legal interests.

We may delete or anonymise personal data when it is no longer needed.

11. Security

We use reasonable technical and organisational measures to protect personal data.

However, no website, database, hosting provider, or email system can be guaranteed to be completely secure.

If you choose to send us sensitive personal information, please only provide information that is necessary for your request or enquiry.

12. Your rights

Depending on your location and the circumstances, you may have the right to:

• ask whether we hold personal data about you;
• request a copy of your personal data;
• correct inaccurate or incomplete personal data;
• request deletion of your personal data;
• restrict how we process your personal data;
• object to certain processing;
• withdraw consent at any time, where processing is based on consent;
• request data portability, where applicable.

To exercise your rights, contact us at: [email protected]

We usually respond to data protection requests within one month.

We may need to verify your identity before responding to certain requests.

13. Right to complain

You have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, if you are unhappy with how we handle your personal data.

We would appreciate the chance to respond to your concern first, but you are not required to contact us before contacting the ICO.

14. Age requirements

The website and waitlist are intended for people aged 18 or over.

We do not knowingly collect personal data from anyone under 18.

If you believe someone under 18 has provided personal data to us, contact us at [email protected] and we will take reasonable steps to review the situation and, where appropriate, delete the personal data in accordance with applicable data protection laws.

15. Automated decision-making

We do not use your waitlist data for automated decision-making or profiling that produces legal or similarly significant effects.

16. Financial disclaimer

Sortino Labs is a research, backtesting, simulation, journaling, and education tool.

It does not provide financial, investment, trading, tax, legal, accounting, or professional advice.

Nothing on this website is a recommendation to buy, sell, hold, invest in, or trade any security, currency, cryptocurrency, derivative, contract for difference, commodity, or other financial instrument.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

The date at the top of this page shows when this Privacy Policy was last updated.

If we make material changes that affect existing waitlist members, we may notify them by email where appropriate.

18. Contact

For questions about this Privacy Policy or how we handle personal data, contact: [email protected]