Privacy policy

Updated: 2026-10-26

XAU Chart ("we") runs the XAU Chart service at https://learno.mn. This policy explains what information about you we keep, what for, for how long, and your rights. We follow the Law of Mongolia on Personal Data Protection.

1. What we keep

Account: your email address, the date you signed up, your trial and paid periods. When you sign in with Google or Facebook we take only your verified email address from them. We never receive or keep your password.
Your analysis: drawings and indicators on your charts, your trading journal, trading rules, watchlist and settings. We keep them so they are there when you sign in from another device.
Payments: the plan, amount, method (QPay, bank transfer), date and QPay invoice number. We do not keep your card or bank account numbers. Payments are handled by QPay and the banks.
Security and technical data: IP address, browser and operating system (for example "Chrome · Windows"), when and how you signed in, the days you opened the charts, and errors that occurred on the pages.
Two-step verification: if you turn it on, the secret key of your authenticator app and hashes of your backup codes.

2. Cookies and browser storage

We only use the cookies sign-in needs: your session (60 days), a short-lived cookie while you sign in with Google or Facebook (10 minutes), a short-lived cookie for two-step verification (10 minutes), and one that remembers your language. There are no advertising or tracking cookies, and we use no third-party analytics. Your chart settings live in your browser's storage (localStorage) and are copied to our server.

3. What we use it for

Providing the service: signing you in, keeping your analysis, working out your access period.
Security: telling you about sign-ins from new devices, protecting against fraud and unauthorized access.
Taking and confirming payments.
Finding and fixing errors and improving the service (aggregated statistics that do not identify anyone).
Sending service emails such as sign-in codes and security notices. We do not send marketing emails.

4. Who we share it with

We do not sell your information. We share it only as far as the service needs, with: Google and Facebook (to sign you in), QPay and banks (payments), an email delivery service (sign-in codes and notices), and our hosting provider. If an authority with legal power requires it, we disclose it within the law.

To give support, check payments and keep the service secure, our authorized staff (the admin) can see your account and saved analysis. They use it only for those purposes.

5. How long we keep it

Account, analysis and payment history: until you delete your account.
Sign-in codes: 15 minutes, or until used.
Daily backups of the database: 14 days, then deleted automatically.
Daily error counts: 4 months.

6. Protection

Connections are encrypted with HTTPS. We keep only hashes of sign-in tokens, and no passwords. We use two-step verification, limits on sign-in attempts, and a policy that stops outside scripts running on our pages (CSP). Data is backed up every day. If you find a security problem, please tell us at colizsoft@gmail.com.

7. Your rights

Download: get everything we keep about you as one file under Settings → My data.
Delete: delete your account permanently in the same place.
Review: see which devices signed in and when, and sign them out, under Settings → Security.
Questions and complaints: colizsoft@gmail.com.

8. Age

The service is for people aged 18 and over.

9. Changes

If we change this policy in an important way, we announce it on the site beforehand. The "Updated" date above shows the latest version.

10. Contact

XAU Chart · colizsoft@gmail.com · https://learno.mn