How to Analyse Your Trades Without Uploading Them Anywhere
A tradebook is one of the most revealing documents a trader owns. Before you hand it to a website, it is worth knowing what happens to it, and how to check rather than take anyone's word for it.
A tradebook is not an ordinary spreadsheet. It is a complete, timestamped record of every position you took, how large each one was, and exactly how much you made or lost. Combined with a broker name it is close to a financial identity: net worth exposure, risk appetite, working hours, and the instruments you trade.
Most trading-journal and behaviour-analysis tools ask you to upload that file to their servers. That is not automatically wrong, and plenty of them handle it responsibly. But it is a decision you are making, often without being told you are making it, and it is worth making deliberately.
What an upload actually commits you to
- Retention. Once the file is on a server it exists in backups, and backups outlive accounts. Deleting your account rarely deletes yesterday's snapshot.
- Breach exposure. Your data is now only as safe as that company's weakest system. This is not a hypothetical risk category for early-stage fintech products.
- Change of terms. Privacy policies get amended, and companies get acquired. The terms you agreed to are not necessarily the terms that will apply in two years.
- Aggregate use. Many services reserve the right to use anonymised or aggregated data. Trading data is unusually re-identifiable, because a position sequence is close to a fingerprint.
None of that means you should never upload anything. It means the question "does this leave my machine" deserves an answer before you drag the file in, not after.
The alternative: analysis that runs in the browser
Everything a behavioural analysis needs to do can be done in JavaScript on your own device. Reading a CSV or Excel file, pairing fills into round trips, comparing timings and sizes: none of it requires a server. The computation is not heavy, and your laptop is perfectly capable of it.
When a tool works this way, the file is opened by your browser, held in memory for as long as the tab is open, and discarded when you close it. There is no upload step to secure, no retention policy to read, and no breach that can expose data that was never sent.
The phrase "your data never leaves your device" is common and frequently untrue, because the page still sends usage analytics, error reports or a summary of results. The precise question is not whether any request is made, but whether any request carries your trade data. Those are different claims and only one of them is checkable.
How to check for yourself, in about a minute
You do not need to be a developer. Every major browser ships the tool for this.
- Open the analysis tool but do not select your file yet.
- Press F12 (or Cmd+Option+I on a Mac) to open developer tools, and switch to the Network tab.
- Tick "Preserve log" if the option is there, so nothing gets cleared.
- Now choose your tradebook and run the analysis.
- Watch the request list. Requests for the site's own scripts, styles and fonts are normal. What you are looking for is a POST or PUT request that appears at the moment you select the file, particularly one with a large payload size.
- Click any suspicious request and read its payload. If your trades are being sent, they will be visible there in plain text.
If a tool reads the file locally, the moment you select it produces no new network request at all. The analysis simply appears. That is the whole test, and it is the reason a browser-based claim is worth more than a paragraph in a privacy policy: you can falsify it in under a minute.
The other questions worth asking
- Does it require an account? A signup wall before any value usually means the product is built around a stored user record.
- Do third-party scripts load while you read? Payment and chat widgets often carry their own telemetry. A tool that loads a checkout script on every page view is sending something about you to a payment company before you have chosen to buy anything.
- Is the method published? A tool that shows you a score without telling you how it was computed is asking for trust twice: once with your data and once with its arithmetic.
- What does it refuse to tell you? A tool that produces a confident finding for every input is not being careful. Sparse files genuinely cannot support some conclusions.
How Riskora Mirror handles it
Mirror reads your tradebook entirely in the browser. There is no account, no upload and no stored file, and the network-tab test above works on it. What does leave your browser is the ordinary business of loading a web page, plus anonymous cookieless counts of which pages were viewed and whether a report ran. Those carry no trade data. If you type your email into the optional monthly re-check box, that email is sent and nothing accompanies it.
Payment scripts are not loaded while you read. Anything third-party related to checkout is fetched only if you actively start one.
The scoring model is published in full at riskora.in/score, including every threshold and every case where the model refuses to produce a number. Our privacy policy and regulatory position are the long form. The one-minute network test is the short form, and it is the one we would rather you ran.
Common questions
Is it safe to upload my tradebook to a website?
It depends entirely on the site, and the honest answer is that you usually cannot tell from the outside. The safer option is a tool that does not require an upload at all, because then the question does not arise. If you do upload, check retention, deletion and whether the provider reserves rights over aggregated data.
How can I tell if a tool is really analysing my file locally?
Open your browser developer tools, go to the Network tab, tick Preserve log, then run the analysis. If no new request appears when you select your file, it was read locally. If a POST with a large payload appears, click it and read the payload.
Does browser-based analysis mean nothing is sent at all?
No, and any tool claiming that is being loose with language. The page itself still loads over the network, and most sites count page views. The meaningful claim is narrower: that no request carries your trade data. That is the one you can verify.
Can I analyse my tradebook offline?
Once the page has loaded, a browser-based tool is doing the work locally, so a dropped connection mid-analysis will not stop it. You do need a connection to load the page in the first place.
What about the email if I sign up for reminders?
With Mirror, an email typed into the optional re-check box is sent on its own. No score, no derived statistic and no trade data goes with it, so the promise about your tradebook stays literally true.
Try it and run the network test
Open developer tools before you choose your file, then watch what happens when you do. Mirror is free, needs no account, and the analysis appears without a single request carrying your trades.
Analyse my trades🔒 Read entirely in your browser. Your file is never uploaded.
Riskora is a behavioural training and simulation platform. It is not a broker, investment adviser or research analyst, and nothing here is investment advice or a recommendation to trade. Figures describe patterns in your own past trades and do not predict future results.