Privacy · GDPR
Privacy Policy
Last updated: June 15, 2026
CryptoTrader takes the protection of your personal data seriously. This page describes what data we process when you use the portal, why, who it is shared with, how long it is kept, and the rights you have.
01Data we process
- Wallet address: your public Ethereum/Hyperliquid address, used to identify you and show your dashboard.
- Email address (optional): only if you choose to provide it, so we can reach you about your account.
- IP address and country: used in anonymized form for security (rate limiting, abuse detection) and aggregate analytics.
- Session data: a secure technical cookie (httpOnly) proving you signed in with your wallet.
- Trading data: positions, fills and performance, read live from Hyperliquid's public API for your address — we do not store it durably.
02Purposes and legal basis
- Providing the service (contract performance): authentication, dashboard, managing your strategy.
- Security and abuse prevention (legitimate interest): rate limiting, anonymized audit logs.
- Communication (consent): account-related emails, only if you provided your email.
03Processors and recipients
- Vercel: portal hosting and technical logs.
- Supabase: database (wallet address, email, settings).
- Upstash (Redis): sign-in nonces, sessions, rate limiting, audit log.
- Resend: sending verification emails.
- Sentry: error monitoring (addresses and emails are masked before sending).
- Telegram: internal notifications to our team, limited to a truncated address prefix — never your email.
- Hyperliquid: the trading platform where your transactions execute (its own terms apply).
We never sell your data and never share it with any third party for advertising purposes.
04Retention periods
- Wallet address and email: kept while your account exists; deleted on request (see your rights).
- Sessions: 7 days maximum.
- Audit logs (with anonymized IP): 90 days.
- Email verification tokens: 15 minutes.
05Your rights
- Access, rectification and portability of your data.
- Erasure: you can delete your email at any time from the portal (clear the email field and save). For full account deletion, contact us.
- Objection and restriction of processing.
06Cookies
- We only use cookies strictly necessary for operation: sign-in session and wallet state. No advertising or tracking cookies.
07Contact
- For any question or to exercise your rights: