Privacy policy

whatprop ("whatprop", "we", "us", or "our") operates whatprop.com, an independent research and comparison service for proprietary ("prop") trading firms. whatprop.com is operated from the European Union, and for the purposes of the EU General Data Protection Regulation (GDPR) the operator of whatprop.com is the data controller for the personal data described in this policy.

If you have any question about this policy or how we handle your data, or wish to exercise any of your rights, you can reach us through our contact page.

We collect the following categories of personal data:

Information you provide to us

• Account data: if you create an account, your email address, authentication identifiers, and an encrypted (hashed) password managed by our authentication provider.
• Profile and preferences: saved or favourited firms, rule-change alert subscriptions, and display preferences such as theme.
• Reviews and other contributions: ratings, written reviews, comments, and any supporting material you upload, such as payout screenshots or proof of a funded account.
• Messages and applications: the contents of contact-form messages and affiliate-program applications, including your name, email, website or social profiles, and any audience details you choose to share.

Information we collect automatically

• Usage data: pages viewed, referring URLs, search and filter queries, links clicked, and timestamps.
• Device and connection data: browser and device type, operating system, language, and an approximate location derived from your IP address.
• Affiliate attribution data: when you click an outbound offer or "go" link, we record the click and may set or read identifiers so that a resulting sign-up can be attributed to us.
• Cookies and similar technologies: small identifiers stored in your browser, described in the "Cookies and analytics" section below.

We do not intentionally collect special categories of data (such as health, political, or biometric data), and we ask that you do not include such information in reviews or messages.

Under the GDPR we must have a lawful basis for each use of your personal data. We rely on the bases noted below:

• To provide and operate the site, your account, saved firms, and alerts: performance of a contract with you, or our legitimate interest in running the service.
• To publish and moderate reviews and other user contributions: our legitimate interest in maintaining a trustworthy, accurate directory, and your consent where you submit content.
• To measure traffic and improve our content, rankings, and features: your consent for non-essential analytics, or our legitimate interest in understanding and improving the service.
• To attribute affiliate referrals and report on commercial performance: your consent and our legitimate interest in operating a sustainable, advertising-funded service.
• To respond to your enquiries and process affiliate applications: taking steps at your request prior to entering a contract, or our legitimate interest in responding to you.
• To keep the service secure and prevent fraud, abuse, and manipulation of reviews or rankings: our legitimate interest in protecting users and the integrity of the platform, and compliance with legal obligations.
• To comply with law and respond to lawful requests: compliance with a legal obligation.

Where we rely on consent, you may withdraw it at any time without affecting processing that took place before withdrawal.

We use cookies and similar local-storage technologies for a few distinct purposes: strictly necessary cookies that keep you signed in and remember essential preferences; analytics that help us understand how the site is used; and affiliate-attribution identifiers that link an outbound click to a later sign-up.

We use privacy-respecting, primarily first-party analytics and do not sell your personal data or use it to build advertising profiles about you across other websites. You can control or delete cookies through your browser settings, though blocking strictly necessary cookies may stop parts of the site from working.

We do not sell your personal data. We share it only as follows:

• Service providers (processors): hosting and content delivery, database and authentication, analytics, and email delivery providers that process data on our behalf under contracts that require appropriate safeguards.
• Prop firms and affiliate networks: when you click an outbound offer link you leave whatprop and visit a third party whose own privacy policy applies. We may receive aggregate or pseudonymous conversion data confirming that a referral occurred.
• Legal and safety: authorities, advisers, or other parties where disclosure is necessary to comply with law, enforce our terms, or protect the rights, property, or safety of our users or the public.
• Business transfers: a successor entity in connection with a merger, acquisition, or sale of assets, subject to this policy.

Reviews and other content you choose to publish are visible to the public by their nature; please do not include personal details you do not want to be seen.

Some of our service providers may process personal data outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as an adequacy decision or the European Commission’s Standard Contractual Clauses to ensure your data remains protected.

We keep personal data only for as long as necessary for the purposes set out above:

• Account data: for as long as your account is active, and for a reasonable period afterwards to handle disputes and meet legal obligations.
• Reviews and contributions: for as long as they remain published, unless you ask us to remove them or we moderate them.
• Contact and application messages: for as long as needed to handle your request and keep a reasonable record.
• Analytics and security logs: for limited retention periods, after which we delete or aggregate them.

When data is no longer needed we delete it or anonymise it so it can no longer be linked to you.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you and receive a copy.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten") where there is no overriding reason to keep it.
• Restrict or object to certain processing, including processing based on our legitimate interests and any direct marketing.
• Receive your data in a portable, machine-readable format and have it transmitted to another controller where technically feasible.
• Withdraw consent at any time where we rely on consent.

To exercise any of these rights, contact us through our contact page. We may need to verify your identity before acting, and we will respond within the timeframes required by law. You also have the right to lodge a complaint with the data protection supervisory authority in your EU member state or country of residence.

We use technical and organisational measures designed to protect personal data, including encryption in transit, access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to address incidents promptly.

whatprop concerns prop trading and is intended for adults. The service is not directed to children, and we do not knowingly collect personal data from anyone under the age of 16 (or the higher minimum age that may apply where you live). If you believe a child has provided us with personal data, please contact us and we will delete it.

Our site links to prop firms, brokers, and other third-party websites. We are not responsible for their content or privacy practices. Review the privacy policy of any third-party site before providing personal data to it.

We may update this policy from time to time. When we make material changes we will revise the "last updated" date above and, where appropriate, provide a more prominent notice. Your continued use of the site after an update means you accept the revised policy.