Privacy

Account

Your email address, name and profile picture from Google or GitHub when you sign in, and which of them you used.

API keys

A hash of each key and its name. We cannot read a key after it is first shown.

API use

For each API request: the key, the time, the path and the result.

Payments

Stripe customer and subscription ids, your plan and its dates. Stripe holds your card. We never see it.

Alerts

Your Telegram chat id or your browser's push address, and the pairs you chose.

Webhooks

The address you give us and its signing secret.

Waitlist

Your email address, the plan you chose and the price you were shown.

Support

Whatever you send us by email.

The market data behind the states is public exchange data and has nothing to do with you.

We use it to sign you in, check what your plan allows, take payment, send the alerts you asked for, apply rate limits, answer support and keep the service secure. We email you about your key, your account and your billing.

Cloudflare

Carries traffic to the site and sees your IP address.

Vultr

Hosts our servers and database in Frankfurt, Germany.

Google and GitHub

Handle sign-in.

Stripe

Handles payments and invoices.

Resend

Delivers our emails.

Telegram and your browser's push service

Deliver alerts, if you turn them on.

These providers may process data outside your country, including outside the European Union. We share data with no one else unless the law requires it.

We do not store your IP address in our database. On public forms we use a hash of it as a rate limit key.

We set only the cookies that sign-in needs. Your browser also remembers the pair you last viewed and which version of the pricing page you saw. The pricing test counts views per version per day, and that count is not linked to you. Stripe sets its own cookies on its checkout pages.

The extension stores your API key and the API address in your browser. It reads the address of the exchange page you have open to work out the pair, and it sends only that pair and your key to our API. The page address itself stays in your browser. It does not read your orders, balances, positions or exchange login, and it collects nothing from other sites.

We keep account data, API use and subscription records until your account is deleted. Database backups last 14 days, so deleted data leaves them within that time. We may keep payment records for longer where tax or accounting law requires it. Stripe keeps its own records under its own policy.

You can revoke keys and remove alerts and webhooks yourself in your settings. To get a copy of your data, correct it, delete your account or leave the waitlist, email [email protected] from the address on your account. You may also have the right to object to how we use your data, and to complain to your data protection authority.

We will change the date above when this page changes, and we will email you about a change that matters. Questions go to support.