Last updated: 1 November 2026
This policy explains what personal data Break the Backtest collects, why we collect it, and what your rights are. We collect as little as we can.
The controller is Sven Van Achte, trading as Break the Backtest, a sole proprietorship registered in Belgium.
We have not appointed a Data Protection Officer because the law does not require one for an activity of this size.
| What | Why | Legal basis (GDPR art. 6) |
|---|---|---|
| Email address, and your name if you give it, plus the date, source and confirmation of your sign-up | To send you the newsletter and the free Robustness Checklist by email | Your consent (art. 6(1)(a)). You can unsubscribe at any time with the link in every email. |
| Email engagement data: opens, clicks, device or email client, approximate location based on IP address | To see which content is useful, keep the list healthy and prevent abuse | Our legitimate interest in improving the newsletter and keeping it deliverable (art. 6(1)(f)) |
| Survey and poll answers, and replies you send us | To understand what readers need and to answer you | Consent or legitimate interest in answering your message |
| Purchase data for paid products: name, email, country, product and order details | To deliver your product, provide support, and handle refunds and invoices | Contract (art. 6(1)(b)) and legal obligation for accounting and tax records (art. 6(1)(c)) |
| Emails you send us at [email protected] | To answer your question | Legitimate interest in replying (art. 6(1)(f)) |
| Technical data such as IP address, browser and request logs when you visit breakthebacktest.com | To redirect you securely to our site and protect it from abuse | Legitimate interest in security (art. 6(1)(f)) |
We do not sell your data, use it for automated decisions with legal effect, or knowingly collect data from children under 16.
Our Monte Carlo drawdown calculator runs entirely in your browser. Trade files you load are read and processed on your own device. They are not uploaded to us or to any server, and we cannot see them. When you close or refresh the page, the data is gone. The page itself is delivered by our hosting provider (see section 4), which may log standard technical data such as your IP address.
We use a small number of service providers. They process data on our behalf under a data processing agreement, unless stated otherwise.
Some providers are based in, or use subprocessors in, the United States or other countries outside the European Economic Area. These transfers are protected by the European Commission's Standard Contractual Clauses (as beehiiv and Gumroad use) and/or the EU–US Data Privacy Framework, where the provider is certified under it (such as Cloudflare and Google). You can ask us for more information about these safeguards.
Our website is hosted by beehiiv. beehiiv uses strictly necessary cookies, for example for sign-up forms, security and remembering your preferences. It may also use analytics cookies to measure page visits and sign-ups. Non-essential cookies are only set with your consent where the law requires it, and you can refuse or delete them in your browser settings. Emails may contain small tracking pixels and tracked links to measure opens and clicks. You can block these by turning off image loading in your email app. We do not use advertising or retargeting cookies of our own.
Under the GDPR you have the right to:
To use these rights, email [email protected]. We answer within one month. We may ask you to confirm your identity.
If you think we are handling your data incorrectly, please contact us first. You also have the right to file a complaint with the Belgian supervisory authority:
Gegevensbeschermingsautoriteit / Autorité de protection des données (Belgian Data Protection Authority) Drukpersstraat 35 / Rue de la Presse 35, 1000 Brussels, Belgium +32 (0)2 274 48 00 · [email protected] · https://www.dataprotectionauthority.be
If you live in another EU country, you can also contact the authority there.
We use reputable providers, strong passwords and two-factor authentication, and we limit access to data to what is needed. If this policy changes in an important way, we will tell subscribers by email. The date at the top always shows the latest version.