Privacy Policy — Blotter — P&L Calendar

Last updated: 2026-11-04

Blotter is a browser extension that shows you a private dashboard of your own Trade Republic trading performance. It is an independent, unofficial tool and is not affiliated with, endorsed by, or connected to Trade Republic Bank GmbH.

The short version

Blotter does not collect, transmit, sell, or share any of your data. Nothing ever leaves your browser. There is no Blotter server, no analytics, no tracking, and no third-party recipients of any kind.

What data Blotter handles

While you are logged in to app.traderepublic.com, Blotter reads a limited set of data from Trade Republic, on your behalf, purely to compute and display your performance:

• Your executed orders (instrument, quantity, price, fees, timestamps), fetched from Trade Republic's own web API using your existing logged-in browser session.
• Instrument names for the instruments you traded.
• Your securities-account number, read from the address of the orders request the app makes, and used to build the read-only orders API request.

Blotter does not store or transmit any authentication token or credentials. Trade Republic's API authenticates on the session cookie your browser already holds and sends automatically; Blotter simply makes the same read-only request. It never reads or saves your password or request headers. During an instrument name lookup, the in-page script reuses the same session fields the Trade Republic web app itself attaches to its WebSocket subscriptions; these stay in the page's memory only, are never written to storage, and never leave the page.

Where the data is stored

All of the above is stored locally on your device, in the browser's extension storage (chrome.storage.local). It is never uploaded anywhere.

• The data stays in your browser profile until you delete it.
• You can export it to a file, re-import it, or erase everything at any time from Data & sync → Your data in the dashboard.
• Uninstalling the extension removes all stored data.

What Blotter does NOT do

• It does not send your data to any server, including the developer's.
• It does not use analytics, telemetry, advertising, or tracking.
• It does not place or modify any orders. All API access is read-only.
• It does not access any website other than app.traderepublic.com / api.traderepublic.com.

Permissions and why they are needed

• host access to *.traderepublic.com — to read your orders from Trade Republic's API and instrument details, using your logged-in session.
• webRequest — to detect the URL of the orders API request your browser makes, so Blotter can repeat that read-only request to fetch your full order history. Only the request URL is read — never headers, bodies, or tokens.
• storage / unlimitedStorage — to save your computed history locally so it persists between sessions without re-fetching.
• sidePanel — to optionally show the dashboard in Chrome's side panel.

Security

Blotter stores no passwords or authentication tokens. The data it does store is your own trading history, which is private financial information. It is protected the same way as everything else in your browser profile. For strong protection, enable full-disk encryption on your device, and do not export your data to unencrypted shared locations.

Contact

Questions about this policy: support@applifyfactory.com

Changes

If this policy changes, the "Last updated" date above will change and the new version will be published at the same location.