Privacy

What we store

• Your email address and a hash of your password — never the password.
• Your authenticator secret, so two-factor sign-in works.
• Your exchange API key and secret, encrypted under a key derived from your password.
• Sign-in times, and the addresses and browsers of devices you have chosen to trust.

What that encryption means in practice

The key that decrypts your exchange credentials is derived from your password when you sign in and is held only for that session. A stolen copy of our database, or of a backup, contains ciphertext. Nobody here can read your exchange key, and no scheduled job can touch your account while you are signed out.

What we do not collect

No analytics, no advertising trackers, no third-party scripts beyond the web fonts the pages load. We do not sell or share anything with anyone.

Who else sees anything

• Your exchange receives the API calls made on your behalf.
• NowPayments handles checkout and sees what payment processors see.
• Cloudflare sits in front of the site and sees request metadata.

Cookies

One session cookie, and one for a device you have asked us to remember. Both are strictly functional; there are no advertising or analytics cookies.

Deleting your data

Remove your exchange key from settings at any time and it is gone immediately. Email to close the account entirely and we will delete it.

Contact

Privacy questions: [email protected].