▍Plain English, written by the person who runs this site. There is no legal department here and nothing below is hidden in small print. If any part of it is unclear, ask and we will explain it or reword it: report@propfirmshield.com.

In short

We hold as little about you as we can get away with. You sign up with an email address and a handle. The email is used for verification and login and is never shown publicly — your posts carry the handle. We do not store your IP address next to anything you write; we store a salted hash of it, which we cannot turn back into an address. We set no cookies, run no analytics, and sell nothing to anyone.

The rest of this page is the long version.

1. Who is responsible for your data

PropFirm Shield is run from India by an individual, not a company. We are responsible for this site and for the personal data it holds. We do not publish the operator’s name and home address on this page, because this site publishes allegations about businesses and the people behind those businesses sometimes react badly to being named. We will give our full name and an address for service to anyone with a legitimate reason to need it — a regulator, a court, or a firm or trader with a complaint or a legal claim — on request to report@propfirmshield.com. Under India’s Digital Personal Data Protection Act 2023 that role is called the Data Fiduciary; under UK and EU GDPR, which applies to us because traders in those places use the site, the same role is called the data controller. This site is run by an individual, not a company.

Contact for any privacy question or request: report@propfirmshield.com.

We are established in India and the site is open to traders in the UK and the EU, so we have not appointed a representative in either place. For a site of this size, run by one person and holding an email address and a handle, we rely on the exemption for occasional processing that is unlikely to be a risk to anyone. If you are in the UK or the EU you do not have to write to India to reach us — report@propfirmshield.com is answered by the person responsible, and we will not ask you to go through anyone else.

2. What we collect

When you create an account

• Your email address. Used to verify the account and to sign you in. It is never displayed on the site and never attached to anything you post.
• Your handle — the @name you choose. This is public and appears on everything you post.
• Your password, stored only as a bcrypt hash. We never hold the password itself and cannot recover it for you.
• The dates your account was created, verified, and last signed in.

While a signup is waiting on its emailed code, we hold the email, handle and password hash in a separate pending table together with a SHA-256 hash of the code — not the code itself. If you never complete the signup, that row expires and is deleted, and no account is ever created.

When you post a complaint or review

• Your handle, the title and body of your post, any amount you state as disputed, and any star rating.
• A salted hash of your IP address — not the address itself. We use it to detect abuse and coordinated posting. It is a one-way hash and cannot be reversed into an IP address, by us or by anyone who obtained our database.
• The date it was submitted, and its moderation status.

When you upload evidence images

The image itself, its file type and size, and any caption you write. Read section 5 before you upload anything.

When you subscribe to alerts

Your email address and a confirmation token. Subscription is double opt-in: nothing is sent until you click the link in the confirmation email. Unsubscribing is one click, and we record the date so we can prove we stopped.

Moderation records

We keep an append-only log of moderation decisions — what was approved or rejected, when, and by which moderator account. This exists so that if a firm's lawyer asks who published what and when, there is a truthful answer. These records are not deleted, so that the account of what was published cannot be altered after the fact.

3. What we deliberately do not collect

This is as much a part of the design as what we do collect:

• No cookies. Your sign-in token is kept in your browser's local storage and is removed when you log out, which is why the site has no cookie banner.
• No analytics, no tracking pixels, no advertising identifiers, and no session recording.
• No raw IP addresses stored against anything you write.
• No real names, phone numbers, dates of birth or postal addresses. We never ask.
• No payment details. The site takes no money from traders.
• Never your trading account credentials. No one at PropFirm Shield will ever ask for a broker or prop firm login. Treat any message that does as fraudulent, and report it to us.

4. Other companies involved

Loading this page causes your browser to contact the following third parties. Each one necessarily receives your IP address and browser user-agent as a consequence of the request.

• Typefaces are served from this site, not from Google. Manrope and Inter are downloaded from our own server, so Google is not told that you visited a page here. This used to be a Google Fonts embed and is no longer.
• Firm logos are served from this site, not from Google. Every logo in the directory is a file on our own server, so Google is no longer told which firm pages get looked at. This used to be Google's favicon service (google.com/s2/favicons), which ran on every visit to the directory, and is no longer.
• Brevo (Sendinblue SAS, France) — delivers signup verification codes and alert emails. They process your email address on our instructions and under a data processing agreement. Your address is passed to them only when an email is actually being sent to you.
• Cloudflare (Cloudflare, Inc.) — is the registrar and DNS operator for propfirmshield.com, serves the public pages, and sits in front of the site as a CDN, so it sees the IP address of every request. It also runs the mail routing for our published addresses, which means an email you send to report@ passes through Cloudflare on its way to us. Railway (Railway Corp.) — runs the application server and hosts the PostgreSQL database, which is where your account, your posts and any evidence you upload are actually stored.

The X and Discord icons in the footer are ordinary links. Nothing is sent to either company unless you click them.

We do not sell your data, and we do not share it for anyone else's marketing.

5. Evidence images — please read this

A payout rejection screenshot routinely contains your account number, your legal name, your email address, and sometimes your address or ID. Redact those before you upload. Cover them in any image editor — do not rely on us.

What we do at our end:

• An upload stays private while your post is pending. It cannot be reached by guessing a URL.
• It becomes publicly visible at the moment a moderator approves your post. Assume that anything you upload will be seen by anyone.
• You may only attach images while your post is still pending. Once approved, the evidence is locked — otherwise approval would mean nothing.
• We may reject an upload, or ask you to redact and resubmit. We are not obliged to catch everything you failed to redact, and we cannot un-publish something the internet has already copied.
• Never upload an image containing someone else's personal data without their agreement. See the Terms.

6. Why we are allowed to hold it

Under UK and EU data protection law we rely on:

• Performance of a contract — your account details, so you can sign in and post.
• Legitimate interests — the salted IP hash and moderation log, for abuse prevention and to defend what we publish; and publishing consumer-protection information about firms.
• Consent — email alerts, which you opt into and can withdraw at any time.

7. How long we keep things

• Pending signups — expire automatically and are deleted.
• Your account — until you ask us to delete it.
• Alert subscription — until you unsubscribe.
• Published posts and approved evidence — kept while they remain relevant. See the next section for what happens when you delete your account.
• Moderation log — retained, for the reason given in section 2.

Concretely: an unverified signup is deleted after 24 hours if the code is never used. A rejected report and its evidence are deleted 90 days after the decision. A published report and its evidence stay while the case file it supports is open, and are reviewed three years after the case is closed. A deleted report is removed from the site immediately and purged 90 days later. The moderation log — who approved, rejected or deleted what, and when — is kept for six years, because it is the record that shows a decision was made properly and it is the first thing anyone disputing a case will ask for. Account data is deleted when you close your account, except where a post of yours is still published, in which case the pseudonymous author handle remains on it. The moderation log is kept longest on purpose. If a case is ever disputed years later, the record of how the decision was made is the thing that answers it, so it has to outlive the dispute rather than the case.

8. Your rights

You can ask us to give you a copy of what we hold about you, correct it, delete it, restrict what we do with it, or object to it. Write to report@propfirmshield.com and we will respond within one month.

One thing to understand about deletion. Deleting your account removes your email and login. It does not automatically retract a complaint you have already published, because at that point it is also a record other people have relied on and a firm may have replied to. If you want a published post taken down as well, ask us and say so — we will consider it, and we will tell you plainly if we decline and why. We will always de-link a post from your account on request.

If you think we have handled your data badly, you can complain to a regulator as well as to us. In India that is the Data Protection Board of India, under the Digital Personal Data Protection Act 2023 — note that the Act expects you to raise the matter with us first and give us a chance to resolve it. In the UK it is the Information Commissioner’s Office. In the EU it is the supervisory authority of the country you live in. You do not lose the right to complain to your own regulator because we are based elsewhere.

9. Where your data is held

The application server and the database both run in the European Union (Netherlands). Email delivery is handled from the EU by Brevo. Cloudflare serves the public pages from whichever of its locations is nearest to you, so a page request may be handled outside your own country.

This page used to say the server ran in Mumbai and that we were moving it into the European Union. That move is done, and this is the page saying so. One thing it does not remove: the site is run from India, so administering it — reviewing a report, answering a deletion request, restoring a backup — means the operator reads your data from there. Your data is stored in the EU; the person maintaining it is not, and we would rather write that down than let "hosted in the EU" imply something tidier than the truth. We rely on your consent to use a service that is openly run from India: that is what this page is for, it is stated before you sign up, and you can delete your account at any time.

10. Security

Passwords are bcrypt-hashed. Sign-in uses a signed token that expires. Verification codes are stored hashed. Admin actions require a separate role and are logged. Unapproved evidence is not publicly reachable.

None of that is a promise that nothing will ever go wrong. If a breach affects you, we will tell you.

11. Children

This site is not for anyone under 18, and we do not knowingly hold data about children.

12. Changes

If we change this policy we will update the date at the top. If the change is significant and you have an account, we will email you.

▍Plain English, written by the person who runs this site. These terms are deliberately short and claim as little as possible. Where the law where you live gives you a right, that right wins over anything written here. Questions: report@propfirmshield.com.

1. These terms

PropFirm Shield is operated from India by an individual ("we", "us", "our"). We do not publish the operator’s name and home address here — see the Privacy Policy for why, and for how to obtain them if you have a legitimate reason to. We know this is a compromise. Data protection and consumer rules generally expect a trader to be identifiable, and "on request" is not the same as printed on the page. We are arranging an address for service that is not a home address, so both things can be true at once, and this page will carry it once it exists. By using the site you accept these terms. If you do not, please stop using it.

2. Two different things live on this site

Confusing them is the single most common misreading, so:

• The Firm Directory is neutral factual information — published trading rules, profit splits, drawdown limits, payout schedules — for named firms. Rows are marked verified or unverified. A listing is not an accusation, an endorsement, or a rating.
• Risk Files are investigations into firms accused of misconduct. Firm names are redacted there until our verification threshold is met and the firm has had a right of reply.

Being in the directory does not mean a firm is under investigation. Being in Risk Files does not mean wrongdoing has been proven.

3. This is not financial advice

Nothing here is financial, investment, legal or tax advice, or a recommendation to buy or avoid any firm's product. Prop firm trading carries a real risk of losing your fee and your capital. Decisions you make are yours.

4. Your account

• You must be 18 or over.
• One account per person. Do not run several to make a view look more widely held than it is.
• Your handle is public. Do not choose one that impersonates a real person, a firm, or a member of our team.
• You are responsible for what happens under your account. Tell us if you lose control of it.

5. What you may publish

This is the part that matters most. When you post a complaint or a review, you are stating the following, and we rely on it:

• It happened to you. Report your own experience, rather than an account relayed from someone else.
• It is true as far as you know, and you have described it accurately, including anything that does not help your case.
• You can support it. Do not make an allegation you have nothing to back up.
• Your evidence is genuine and unaltered. Editing a screenshot to change what it shows will get you permanently banned, and we will say publicly that the case was withdrawn for falsified evidence.
• You have the right to share it. You took the screenshot, or you are a party to the conversation it shows.
• You have redacted other people's personal data — names, account numbers, emails, anything identifying a support agent or another trader.

You must not post anything unlawful, threatening or harassing; anything that identifies an individual employee of a firm; the same complaint repeatedly; or anything posted on behalf of a firm's competitor without saying so.

6. What we do with what you post

You keep ownership of your words and images. You grant us a non-exclusive, worldwide, royalty-free licence to store, publish, display, translate and moderate them on this site and in our own promotion of it. You can withdraw this by asking us to remove the post, subject to section 8 of the Privacy Policy.

7. Moderation

• Everything you submit is pending and invisible to the public until a moderator reviews it.
• Approval is not endorsement. It means your post met our submission rules — not that we have proved your account of events.
• We may reject, edit for length or legibility, redact, or remove anything, at our discretion.
• Evidence can only be attached while a post is pending. Once approved it is fixed.
• We are not obliged to publish what you submit, and we do not have to explain a rejection — though we usually will.

8. If you are a firm named on this site

We would rather be accurate than fast. Write to report@propfirmshield.com with the page, what specifically is wrong, and what the correct position is. Documentation helps.

• We aim to acknowledge within 2 working days and to decide within 14 days. If a complaint is about something published about you, that first response tells you whether the material has been taken down while we look at it.
• If something is factually wrong, we correct it and note that we did.
• Before a firm is named in Risk Files, we offer it a right of reply, and we publish the reply alongside the file.
• Directory entries are read from the firm's own published terms. If your terms have changed, tell us and we will re-read them.
• We will not remove an accurate, properly evidenced trader complaint because it is unflattering.

We publish material written by other people, which in India makes this site an intermediary under section 79 of the Information Technology Act 2000. That section protects us from liability for what a user posts — but only if we follow the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, and those Rules impose real, dated obligations on us:

• publishing the name and contact details of a Grievance Officer;
• acknowledging a complaint within 24 hours and disposing of it within 15 days;
• acting on a valid court order or government direction within 36 hours;
• keeping records of a removed item for 180 days.

So this is our takedown process, and it is the whole of it. Write to report@propfirmshield.com with the page or case number and what is wrong with it. We will acknowledge within 2 working days and decide within 14 days. If your complaint is that something published identifies you personally — your name, your account number, your face in a screenshot — say so in the subject line and we will take it down first and look at it afterwards, rather than the other way round. We act on a court order or a lawful government direction as soon as we receive it. We keep a record of anything we remove, and why, for 180 days.

We are one person and we do not have a legal department. What we do have is a rule that we do not publish anything we cannot evidence, a moderator reading every submission before it becomes public, a right of reply for any firm we name, and the ability to take a case down within a day of being shown that it is wrong. That is what protects a trader who files here, and it is what protects a firm we get wrong.

9. Paid placement

We may accept payment from firms for placement, sponsored content, or promotional campaigns. When we do:

• It is labelled as paid, on the page where it appears.
• It buys visibility and nothing else. It does not buy a rating, a verified mark, a risk status, or the removal or suppression of a trader's complaint.
• A paying firm gets no advance notice of a complaint about it, and no say in moderation.

If you believe we have breached any of the above, write to us and say so — publicly, if you prefer.

10. Using the site

Do not scrape it, copy the directory wholesale, hammer it with automated requests, attempt to reach unapproved content, try to identify anonymous posters, or interfere with its operation.

11. What we do and do not promise

Directory data is read from firms' own published terms at a point in time, and firms change their terms without telling anyone. Always verify against the firm's live terms before you pay for a challenge. Rows marked unverified have not been manually checked.

Complaints and reviews are the accounts of individual traders. We moderate them; we cannot independently prove each one.

The site is provided as-is. We do not guarantee it will be available or error-free.

12. Liability

We run this site carefully but we are one person, not an institution, and it is free to use. So this section is deliberately modest rather than sweeping.

What we are responsible for. If we get something wrong — publish a case file we should not have, mishandle your data, break a promise made in these terms — we are responsible for it, and we will put it right as far as we reasonably can. Nothing here removes that.

What we do not accept responsibility for. Trading losses. A decision you made about a firm after reading this site. Money a firm did not pay you. Directory data that was accurate when we read it and has since changed — which is why every page tells you to check the firm's live terms before you pay. The site being down. Anything a firm does to you.

What we do not try to exclude. We are not attempting to limit liability for death or personal injury, for fraud or dishonesty, or for anything that the law where you live does not permit us to limit. If a clause here conflicts with a right you have as a consumer, your right wins and the rest of this section still applies.

13. Responsibility for what you post

What you post is yours. If it is untrue, if it is not yours to publish, or if it breaks section 5, that is your responsibility and not ours — and if someone complains about it, we will tell you and give you the chance to respond before we decide anything.

We used to ask users to cover our costs if a claim arrived because of something they posted. That is gone. An ordinary person filing an honest complaint about a firm that kept their money should not also be signing up to fund a legal defence, and a promise like that is unenforceable against a consumer in much of the world anyway. Our protection is moderation and the ability to take a post down, and we have both.

14. Ending it

You can close your account whenever you like. We can suspend or close an account that breaches these terms, and we will say why unless there is a good reason not to.

15. Governing law

These terms are governed by the law of India, and the courts of India have jurisdiction. This does not take away a right you have where you live: a consumer in the UK or the EU generally keeps the right to bring a claim in their own country and under their own consumer law, whatever this clause says, and nothing here is intended to remove that. We have not written an exclusive-jurisdiction clause, on purpose: one that overreaches can take the rest of the section down with it, and it would not stop a consumer suing at home in any case.

16. Changes

We may update these terms. The date at the top changes when we do, and we will tell account holders about significant changes.

17. Contact

report@propfirmshield.com