Only what the Service needs in order to run, itemized below:

• Email: account identifier, sign-in credential, activation and notifications. Required.
• Password: stored only as an argon2id hash. The plaintext never reaches the database or the logs, and we cannot recover it either.
• Phone number: optional, used only as a contact detail. Leaving it blank affects nothing.
• Session records: the IP address and browser user agent at sign-in, used to spot unusual logins and to power “sign out other devices”.
• Your in-app settings: preferences such as light or dark theme and which modules you have viewed.

We do not collect your exchange API keys, wallet private keys, identity documents or facial data. The Service does not need them.

• We do not sell or rent your personal information.
• We do not embed third-party advertising or behavioral tracking scripts.
• We do not hand your email address to third-party marketers.
• We do not read or analyze your browsing on other sites.

Just one: the sign-in session cookie. It is HttpOnly (JavaScript cannot read it) and SameSite=Lax (it is not sent with cross-site requests), and Secure is enforced in production. There are no third-party tracking cookies, which is why this site needs no consent banner.

We email you only in these cases: account activation, notices related to account security, and actions you trigger yourself (such as resending the activation email). We send no marketing email.

Account information is kept for as long as the account exists. Session records are cleared 7 days after they expire, captcha images after 1 day, and activation tokens after 7 days.

After you delete your account, we delete your account data, except for records we are required by law to retain.

• View and correct your account information.
• Change your password and sign out every other device at once.
• Request an export or a deletion of your personal information.

Most of this can be done from Account; for the rest, contact us.

Passwords are stored as argon2id hashes, session tokens are stored only as hashes, and sensitive configuration is encrypted with AES-256-GCM. But no system can guarantee absolute security — use a strong, unique password and do not reuse it across sites.

Material changes to this policy will be announced in the app or by email before they take effect. For questions about this policy, contact us through the channels listed under Account in the app.