Privacy Policy

Last updated: 3 October 2026 · Version 2026-10-03

What we store

We are a non-custodial interface and we ask for no account. There is no email address, no password and no name unless you choose to add a display name to a profile.

Against your public wallet address, we store:

What	Why
Your allocations — which algos, what fraction, copy or counter	It is the instruction we act on
Your per-algo ledger — P&L and the fees attributed to each algo	It is how the per-fill platform fee is split among the algos you hold
Your profile, if you create one — handle, display name, bio, avatar	The social layer, and it is opt-in
Your acceptance of these documents, with version and timestamp	Evidence that you were shown the current terms
Which announcements you have dismissed	So a notice you have read does not reappear
Sign-in sessions	A cookie proving you control the address
Your venue trading keys, encrypted	So we can place orders on the accounts you link
Your drafts — algorithm source and name	So you can keep working on an algorithm
Your API keys, hashed — never the key itself, only a hash and a short prefix	So a key you issued can be checked and revoked
Your credits — purchases, charges and usage	So what you paid for is what you are charged against
Your agent chats — messages, workspace files, and which model served each turn	So a conversation can be resumed and metered
Your own model credentials (bring your own key), encrypted	So the agent can call your provider on your behalf
Your referral code and who referred you	So referrals are attributed

Your wallet address is already public and already on a public blockchain. What we add is the link between that address and the activity above.

What we cannot collect

• Your private keys. We never see them. Signing happens in your wallet.
• Your venue funds. The delegated key can place and cancel orders. It cannot withdraw.
• Your identity, unless you volunteer it in a profile.

Profiles are private by default

Creating a profile does not publish your portfolio or your P&L. Both are off until you turn them on, and when they are off they are absent from the public response rather than present and empty — a stranger cannot tell the difference between “holds nothing” and “does not share”.

Your identicon is derived from your address. It reveals nothing your address does not already reveal.

Cookies

One session cookie, set after you sign in with your wallet. It is httpOnly, so no script on the page can read it, and SameSite=Lax. It exists to prove you control your address. We do not use advertising or cross-site tracking cookies.

What we share

We do not sell your data. We share it only with:

• The venues you connect, because that is where your orders go;
• Infrastructure providers hosting the service;
• Anyone, where you have explicitly made it public through your profile.

The app’s browser reads public account data for your address directly from Hyperliquid and Lighter, so those venues receive your IP address together with your public address.

What is public on-chain regardless

Any token transfer you make is an on-chain transaction. It is public, permanent and outside our control.

Retention, and what cannot be deleted

Profile fields can be changed or cleared at any time.

Two things cannot be deleted, and the reasons are structural rather than convenient:

• Fee ledgers, because they record fees already charged and paid out. Exiting an algo sets your multiplier to zero and keeps the row.
• Published announcements and your acceptance records, because both exist to evidence that you were told something before it happened. A record that can be deleted afterwards evidences nothing.

A formal retention schedule and the erasure rights that apply to you belong here and have not been determined.

Contact

See Support.