Privacy Policy

(a) Account Information: Email address, display name, and authentication credentials. Passwords are hashed server-side and never stored in plaintext;

(b) Payment Information: When subscribing to paid tiers, payment processing is handled entirely by third-party processors (e.g., Stripe). CoinBob does not directly collect, store, or process payment card numbers, bank account details, or cryptocurrency wallet private keys;

(c) Communications: If you contact us for support, we retain your correspondence, including your email address and the content of your messages.

(a) Analytics Data (Vercel Analytics): We use Vercel Analytics, a privacy-friendly analytics service, to understand general usage patterns. This may include: page views, referral sources, general geographic region (country-level), device type, browser type, and session duration. Vercel Analytics does not use cookies for tracking by default;

(b) Server Logs: Our hosting infrastructure (Vercel) may automatically log standard request data including IP addresses, request timestamps, and user agent strings as part of routine server operations. We do not actively process or analyze these logs for user profiling purposes.

(•) sessionStorage: Authentication tokens (JWT access and refresh tokens) are stored here under the key coinbob-auth. This data is automatically cleared when you close the browser tab;

(•) localStorage: User preferences and settings are stored here under coinbob_user_settings_v1. This includes:

(a) Favorite cryptocurrency assets;

(b) Market screening filter settings (RSI thresholds, technical indicator preferences);

(c) Selected timeframe preferences;

(d) Enabled/disabled trading strategies and their parameter configurations;

(e) Backtesting settings (initial balance, stop-loss, risk/reward parameters).

(a) Trading history or portfolio data;

(b) Exchange account balances or positions;

(c) Exchange API keys or credentials in plaintext;

(d) Real-time market data (all market data is fetched fresh on every page load and is never persisted);

(e) Financial account numbers, credit card details, or banking information;

(f) Social security numbers, government-issued identification, or biometric data;

(g) Precise geolocation data;

(h) Contacts, calendar data, or other personal device data.

(a) Service Operation: To provide, maintain, and improve the Platform's functionality;

(b) Analytics: To understand aggregated usage patterns and improve the user experience (via Vercel Analytics);

(c) Security: To detect, prevent, and address technical issues, abuse, or security threats;

(d) Communication (Future): If account registration is implemented, we may use your email address to send transactional communications (e.g., password resets, subscription confirmations, material changes to Terms or Privacy Policy);

(e) Legal Compliance: To comply with applicable laws, regulations, or legal processes.

(a) Targeted advertising or ad personalization;

(b) Selling or renting personal data to third parties;

(c) Profiling or automated decision-making that produces legal effects;

(d) Building behavioral profiles for marketing purposes.

(a) Comply with a legal obligation, court order, or legal process;

(b) Protect and defend the rights or property of CoinBob;

(c) Prevent or investigate possible wrongdoing in connection with the Platform;

(d) Protect the personal safety of Users or the public;

(e) Protect against legal liability.

(a) Locally Stored Data: Browser localStorage data persists until you clear your browser data. CoinBob has no ability to remotely access or delete this data;

(b) Analytics Data: Usage analytics are retained in accordance with Vercel's data retention policies;

(c) Server Logs: Standard server logs are retained by our hosting provider per their retention schedule and are not actively processed by CoinBob;

(d) Future Account Data: If and when user accounts are implemented, account data will be retained for as long as your account is active or as needed to provide you services. Upon account deletion, your data will be removed within thirty (30) days, except where retention is required by law;

(e) Market Data: In accordance with our Fresh-Only Policy, market data (prices, OHLCV, volume) is never persisted or cached beyond temporary in-memory caching during active sessions (maximum 5 minutes). This data is discarded when you leave the page.

(a) Right of Access: Request confirmation of whether we process your personal data, and if so, request a copy;

(b) Right to Rectification: Request correction of inaccurate personal data;

(c) Right to Erasure: Request deletion of your personal data, subject to legal retention requirements;

(d) Right to Restriction: Request that we restrict processing of your personal data under certain circumstances;

(e) Right to Data Portability: Request your personal data in a structured, commonly used, machine-readable format;

(f) Right to Object: Object to processing of your personal data for certain purposes;

(g) Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time;

(h) Right to Lodge a Complaint: Lodge a complaint with your local Data Protection Authority.

(a) Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected;

(b) Right to Delete: Request deletion of personal information we have collected;

(c) Right to Opt-Out: Opt out of the sale or sharing of personal information. Note: CoinBob does not sell or share personal information for cross-context behavioral advertising;

(d) Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

(a) Minimal-Surface Backend: Our backend handles authentication, user accounts, subscriptions, alert rules, and the pre-computation of public market signals. We do not store your trading activity, exchange credentials, or any behavioral profile of your interactions with the Platform;

(b) Client-Side Storage: User preferences are stored in your browser's localStorage, and authentication tokens in sessionStorage, both of which are isolated per origin and inaccessible to other websites;

(c) No Credential Storage: The Platform does not store exchange API keys, passwords, or financial credentials in plaintext;

(d) Server-Side Key Protection: Where API keys are required for third-party services, they are stored as server-side environment variables and never exposed to client-side code;

(e) Encrypted Connections: All connections to our backend use HTTPS/TLS encryption. Passwords are hashed server-side and never stored in plaintext. Authentication tokens use short expiry windows and are refreshed automatically.

(a) A prominent notice on the Platform;

(b) Email notification to registered users (when account system is implemented);

(c) Updating the "Last Updated" date at the top of this policy.