Privacy Policy

Last updated: February 29, 2026

What we collect

12-word phrase: stored only as a bcrypt hash. The phrase itself never leaves our memory in plaintext after authentication.
Binance API key + secret: encrypted at rest using Fernet (AES-128-CBC + HMAC-SHA256) with a server-side master key. Decrypted only in memory at trade time.
Trade history: every webhook your bot executes (symbol, side, score, entry, SL, TP, qty, status, PnL) — stored to populate your dashboard and the leaderboard.
Credit ledger: every top-up tx hash, fee deduction, referral commission, and milestone bonus.
Referral graph: which user invited whom, up to 3 levels.
Server logs: IP, timestamp, endpoint hit (kept ≤ 30 days for abuse detection).

What we DON'T collect

No email, phone, or government ID — we never ask for them.
No Google / Facebook / social trackers — there are none on the landing page or in the app.
No analytics SDKs in the mobile app.

Who we share with

Nobody, except: Binance (we relay your trade orders to their API using your own keys); the GGCHAIN RPC (we read public on-chain data to verify your top-up transactions). We never sell, rent, or trade user data.

Where data is stored

SQLite database on our server at 62.171.166.188 (Germany). Backups encrypted and retained for 30 days.

Your rights

You can: (1) unlink your Binance API keys at any time from the Settings screen, which deletes them from our database; (2) stop using the service; (3) request a full export of your records by contacting the operators. Because authentication is non-custodial (your phrase = your only credential), we cannot delete the cryptographic hash without your authenticated request, since we cannot otherwise verify who you are.

Security

All traffic is encrypted in transit via TLS 1.2+ (Let's Encrypt certificate).
Binance keys at rest are encrypted with a master key that is never written to the database.
Phrase hashes use bcrypt with per-user salt at cost factor 12.
Daily database backups are encrypted before storage.

Children

The service is not intended for users under 18. Cryptocurrency trading involves financial risk inappropriate for minors.

Changes

If we update this policy, the "Last updated" date above will change. Material changes will be announced on the landing page.