Privacy

The short version

• No account, no email address, no password, no profile.
• No cookies, no analytics, no advertising and no tracking across sites.
• We do not sell or share anything, because there is nothing to sell or share.
• Your preferences stay in your own browser. We never see them and they never leave your device.
• If you arm a limit order, the signed order is stored so it can be carried out. That is the only thing we keep.

What stays in your browser

Three small settings are kept in your browser's local storage. They are not cookies, they are never sent to us, and clearing your browser data removes them.

• Whether you have dismissed the risk warning, so it does not reappear every visit.
• A Charter number you chose to pin to the homepage.
• Which browser wallet you last connected, so the right one is offered next time.

What we store on a server

Only one thing: a limit order you have armed. Arming an order writes down what you signed, because the order cannot be carried out later without it. That record holds your wallet address, the terms you chose — price ceiling, quantity, Charter, deadline — the cryptographic signatures your wallet produced, and, once something happens to the order, the transaction that filled it or the reason it ended.

We do not attach a name, an email address or any other identifier to it, because we are never given one. A wallet address is public information that already exists on a public blockchain; it is pseudonymous rather than anonymous, and anyone who can connect your address to you can connect that address to this record.

Cancelling an order marks it cancelled so that it can no longer be used. Filled, cancelled and expired orders are kept for a reasonable period as a record of what was done, and then removed.

What we do not do

• We do not set cookies, at all.
• We do not run analytics, heatmaps, session recording or fingerprinting.
• We do not run advertising or share anything with advertising networks.
• We do not build a profile of you or try to work out who you are.
• We do not ask for, hold or have any way of seeing your private keys.

Logs

The hosting and network providers that serve this site keep ordinary technical logs — IP address, time, page requested, browser — for a short period, to deliver the site and to deal with abuse and faults. That is a standard part of how any website reaches you. We do not use those logs to identify visitors or to analyse behaviour, and we do not combine them with anything else.

Other services this site touches

Using the site means your browser or our server talks to systems we do not run, and those systems see the request:

• Blockchain nodes. Reading chain data is a request to a node provider, which sees the request and the IP address it came from.
• A public price source. We fetch a dollar price from a public market endpoint, from our server rather than from your browser.
• Your wallet. Connecting a wallet hands the conversation to an extension or application you installed, which has its own privacy policy and its own network connections.
• Block explorers and other sites we link to. Following a link takes you somewhere with its own rules.

What those services do with the request is governed by their policies, not this one. If that matters to you, read theirs.

The blockchain part

Anything that reaches a blockchain is public and permanent. A transaction you send, an order that gets filled, a balance, an address — all of it is readable by anyone, forever, and neither we nor anyone else can delete it or correct it. This is how public blockchains work and it is worth being clear-eyed about before you use one.

Keeping it safe

Stored orders are held on an access-controlled database and transmitted over encrypted connections. No system is perfectly secure, and we do not claim otherwise. The design limits the damage instead: the worst thing an attacker could learn is what you already published to a public chain, and a stolen order record cannot be used to take your assets, because the permission is enforced by contracts rather than by our server.

Your choices

• Use the site without storing anything. Everything except limit orders is read-only and stores nothing at all.
• Clear what is in your browser. Clearing site data removes the three settings above.
• Cancel an order. Cancelling stops it being usable and marks the record accordingly.
• Ask about a record. Depending on where you live you may have a right to see, correct or delete personal data we hold. Get in touch and we will do what we can — but nothing anyone does can remove data from a public blockchain.

Children

This site is not for children and is not directed at them. We do not knowingly store anything from anyone who is not old enough to enter a contract where they live.

Changes to this policy

If what we store changes, this page changes with it, and the date at the top will say when.

Getting in touch

Questions about privacy go to @el1gma. It is a public channel, so do not send anything private to it, and never send anyone a private key or a recovery phrase.