PropFirmGrade home
Futures Forex Crypto

Privacy policy

Last updated: 18 September 2026

This notice explains what PropFirmGrade does with personal data, and what you can ask us to do about it. It is written to the EU General Data Protection Regulation.

Who we are

The controller of your personal data is:

Upshift Media LTD
4 Agias Elenis Street, MICHAELIDES BUILDING, 1st Floor, Flat/Office 104
1060 Nicosia
Cyprus

UpshiftMedia LTD operates PropFirmGrade, an independent review desk for proprietary trading firms. For anything in this notice, write to data@propfirmgrade.com.

The short version

We use Google Analytics, and only if you accept it. We do not track you across other websites. We do not sell or share your personal data, and we never have. Apart from analytics, the cookies this site sets are the ones it needs to work.

What we collect, why, and on what lawful basis

Server logs. Our hosting records requests made to the site: your IP address, the page requested, the time, and your browser’s user-agent string. We use these to keep the site available and secure and to investigate faults and abuse. Lawful basis: our legitimate interest in running a secure and working website (Article 6(1)(f)).

Essential cookies. The site sets the cookies it needs to function and, if you accept analytics, the cookies Google Analytics sets. Lawful basis: our legitimate interest in providing the service you asked for (Article 6(1)(f)) for the essential cookies, which do not require consent; your consent (Article 6(1)(a)) for the analytics cookies.

Email you send us. If you write to us we keep your message and your address so we can reply, and so we hold a record if a correction to a review follows from it. Lawful basis: our legitimate interest in answering correspondence and in keeping an accurate editorial record (Article 6(1)(f)).

The accuracy vote is not personal data. The thumbs up and thumbs down on a review’s summary increments an anonymous counter on that page. It records nothing about you: no address, no device, no identifier of any kind.

Affiliate referrals. Where you follow a link to a trading firm from this site, we count that the referral came from us so that a commission can be attributed. Our link carries no personal data about you. What we store is a count against the link itself, with no address, no device and no identifier of any kind, because our records have no field to put one in. Lawful basis: our legitimate interest in operating the business that funds this site (Article 6(1)(f)).

We do not collect special category data, and we do not ask for it.

Cookies and similar technologies

Essential cookies. These are the cookies the site needs to function. Strictly necessary cookies do not require your consent under GDPR, so we do not ask for it for these. We do ask before any analytics cookie is set.

Analytics cookies: only if you accept them. This site uses Google Analytics 4. It runs only if you choose “Accept analytics” in the cookie bar. If you choose “Reject”, or make no choice, the Google Analytics script is not loaded and no request is sent to Google. If you accept and later reject, the analytics cookies are deleted. We do not use analytics for advertising.

Advertising cookies: none. We host no ad network and run no behavioral advertising.

Affiliate links. When you follow a link to a trading firm, you leave this site. The site you arrive at sets its own cookies under its own policy, which we do not control.

Your browser lets you block or delete cookies. Blocking the essential ones may stop parts of the site working.

Analytics

We use Google Analytics 4 to understand how the site is used, for example which reviews people read and where visitors arrive from, so we can improve it. It runs only if you choose “Accept analytics” in the cookie bar. If you choose “Reject”, or make no choice, the Google Analytics script is not loaded and no request is sent to Google.

What is collected. Once you have accepted analytics, Google Analytics records:

  • the pages you view, the page that referred you, and when
  • how you interact with a page: scrolling, clicks on links that leave the site, site searches and file downloads
  • your browser, device type, operating system, screen size and language
  • your approximate location (country, region and city), worked out from your IP address
  • a random identifier stored in a cookie, so repeat visits can be counted without knowing who you are

We do not send your name, email address or any other information that identifies you directly. We do not use Google Analytics for advertising: advertising storage, ad personalization and Google signals are all switched off.

The cookies it sets. Only after you accept analytics, Google Analytics sets two cookies, both lasting 13 months. One, _ga, distinguishes one browser from another with a random ID. The other, _ga_F8TE89P1CX, keeps track of the current session.

Where your choice is stored. Separately from those, the site records your answer in your browser’s local storage under the name pfg_consent, with the date. It is not a cookie, it never leaves your browser, and we ask again after six months.

Your IP address. Google states that it does not log or store individual IP addresses from visitors in the EU, Switzerland or the UK. For that traffic the IP address is used only to work out approximate location, on servers in those regions, and is then discarded. What Google keeps is the derived location, meaning the city, region and country, and not the address itself.

Who processes the data. Google acts as our processor for Google Analytics, under the Google Ads Data Processing Terms, which we accepted on 4 August 2026. The data may be processed in the United States. Google LLC is certified under the EU-US Data Privacy Framework (and its UK Extension), and the Data Processing Terms include the European Commission’s Standard Contractual Clauses.

What Google may do with it. We have turned off sharing this data with Google’s own products and services, so Google does not use it to improve its advertising products. Three other sharing settings are on: they let Google include this site’s data, in aggregate and combined with other websites, in the modeled insights and benchmarks it publishes; let Google’s technical support staff look at it when we ask for help; and let Google use it to suggest improvements to our own setup.

Legal basis. We rely on your consent (UK GDPR and EU GDPR Article 6(1)(a), and the Privacy and Electronic Communications Regulations for the cookies themselves). Refusing has no effect on how the site works for you. How long this data is kept is set out under “How long we keep things” below.

Changing your mind. You can withdraw or give consent at any time:

  • Select Cookie settings at the bottom of any page, or open cookie settings, and choose “Reject” or “Accept analytics”.
  • When you reject after previously accepting, the site stops Google Analytics on the page you are on and deletes the analytics cookies. Withdrawing does not affect data collected while you had consented.
  • You can also clear this site’s cookies and local storage in your browser, or install Google’s Google Analytics opt-out browser add-on.

For how Google handles data, see the Google Privacy Policy and How Google uses information from sites that use its services. Contact us about analytics data at data@propfirmgrade.com.

Who else sees your data

We do not sell, rent or share personal data with data brokers or advertisers.

We use service providers who process data on our behalf, under contract and on our instructions only:

  • Cloudflare, which provides our DNS, sits in front of the site as a content delivery network and security layer, and routes email sent to our addresses. Every request to this site passes through Cloudflare, so it processes your IP address and request data on our behalf.
  • A hosting provider, which stores the site and its server logs.

We may also disclose data where the law requires it.

Transfers outside the EEA

Some providers may process data outside the European Economic Area. Where that happens we rely on the European Commission’s adequacy decisions or on standard contractual clauses.

How long we keep things

We keep personal data only for as long as we need it for the purpose it was collected for, and no longer.

  • Email correspondence: while it is needed to answer you, and thereafter as a record of any published correction that followed from it.
  • Server logs: only as long as they are needed for the security and operation of the site.
  • Google Analytics data: event-level data, meaning individual page views and interactions, for 2 months. User-level data, meaning the random identifier and what is tied to it, for 14 months after a visitor’s last visit, since that period starts again on each visit.

Money, and why it does not affect what you read

Where you use a link or a discount code from this site, we may earn a commission from the firm, at no cost to you.

A firm cannot buy a grade, a placement, or the removal of a finding. Commissions are agreed before any partnership exists and never touch the scoring method. A downgrade is published for a partner on the same terms as for anyone else. The full position is in our editorial independence policy.

Automated decision-making

We do not make automated decisions about you, and we do not profile you.

We do publish grades about trading firms, and software helps calculate them. Those are decisions about a company, not about a reader, and no grade is published until a named person has approved it. Nothing on this site decides anything about you by automated means.

Your rights

Under GDPR you can ask us to:

  • give you a copy of the personal data we hold about you;
  • correct anything that is wrong or incomplete;
  • erase it, where we have no overriding reason to keep it;
  • restrict how we use it while a question about it is resolved;
  • object to use we base on legitimate interests, including at any time;
  • port it to you or another controller in a machine-readable form;
  • withdraw consent at any time, where our use rests on consent. Withdrawing it does not affect what we did before. Analytics is the only thing here that relies on your consent, and you can withdraw it at any time from Cookie settings at the foot of any page. Every other purpose above rests on legitimate interests, and the cookies we set without asking are strictly necessary.

Write to data@propfirmgrade.com. We answer within one month, and there is no charge.

Complaints

If you are not satisfied with our answer, you can complain to the Cyprus supervisory authority, the Office of the Commissioner for Personal Data Protection, or to the supervisory authority in the EU country where you live or work.

Children

This site is not intended for anyone under 18, and we do not knowingly collect personal data from children.

Changes to this notice

When this notice changes we update the date at the top. Material changes are also recorded in our methodology changelog.

Contact