Privacy Policy

1. Information We Collect

Information you provide.

• Account and identity. You create an account by signing a message with a Web3 wallet (Ethereum), in which case we collect your public wallet address, with your email address and a one-time code, in which case we collect your email address and the public address of the wallet created for your account (see Section 10), or with your Google account, in which case Google confirms who you are to Privy and we receive your Google email address and Google account ID, never your Google password, along with the public address of the wallet created for your account. We never receive or store any wallet's private keys or seed phrase. If you set them, we also collect a display name and profile details (avatar, bio, website, location, username). If you link Discord to your account, we receive your Discord user id and basic profile information (such as username and avatar) from Discord.
• Authentication and security. There are no passwords. Signing in with a wallet, linking a wallet, and confirming sensitive actions require a fresh signature from your wallet; we store the one-time challenge briefly and your session record. An email sign-in requires a one-time code that our wallet provider, Privy, sends to your email and checks; we never see the code. A Google sign-in goes through Google, which confirms who you are to Privy; we never see your Google password. Nothing about a wallet beyond its public address is retained.
• Entitlement records and your AI provider key. We keep a record of any developer API tier or TracerCharts SDK license granted to your account. If you use TracerAI, we store the OpenRouter API key you supply, encrypted at rest; it is used only to make your own TracerAI requests and is deleted when you remove it or delete your account. We do not collect or store payment-card numbers or any other payment details: the Service has no payment processor.
• Live trading. If you connect a Hyperliquid account for live trading, we store the agent key (an API wallet key) that signs your orders, encrypted at rest, together with the public addresses of that key and of your Hyperliquid account. The agent key can place and cancel orders but cannot move funds. It is used only to sign orders you submit, and is deleted when you disconnect or delete your account. Orders you place are sent to Hyperliquid, and your account's positions and orders are read from Hyperliquid by your browser.
• Your content. We store the content you create in the Service, including workspace and chart layouts, watchlists, drawings, saved indicators (including any code and compiled modules), published community content, and your TracerAI prompts and chat history.

Information we collect automatically.

• Usage and device data. We collect information about how you use the Service, including pages and features used, and technical information such as your IP address, browser/user-agent, and request metadata, which we use for operation, security, and analytics.
• Cookies and local storage. See Section 3.

Information from third parties. We receive profile information from Discord if you link it, and your verified email address and your wallet's public address from Privy if you sign up with email or Google, plus your Google account ID if you sign in with Google.

Sensitive information.

The only sensitive personal information we collect is account-authentication information (your wallet signatures, the proof of an email or Google sign-in that Privy issues, and session records). We use it solely to authenticate you and secure your account, and not for any purpose that would require an opt-out or a right to limit its use.

Categories of personal information (for California residents).

We collect these statutory categories: identifiers (email address, wallet address, Discord user id, Google account ID, IP address); commercial information (API and SDK-license records); internet or network activity (usage and request logs, page views); account-authentication information (as above); and your own content (prompts, layouts, indicators). We collect these from you, your device, and your sign-in provider, for the purposes in Section 2, and disclose them only to the subprocessors in Section 4. We do not sell or share any of these categories.

2. How We Use Information

We use personal information to:

• provide, operate, maintain, and improve the Service;
• create and authenticate your account and secure it;
• record and enforce any API or SDK entitlement on your account;
• provide TracerAI features, including generating indicator code and analysis from your prompts (see Section 5);
• personalize and persist your layouts, watchlists, and preferences;
• monitor, prevent, and investigate fraud, abuse, security incidents, and violations of our Terms, and to enforce rate limits;
• send you service, security, transactional, and administrative communications; and
• comply with legal obligations and exercise or defend legal claims.

Where the GDPR applies, our legal bases are: performance of our contract with you (to create your account and provide the Service and TracerAI features); our legitimate interests in operating, improving, and securing the Service and preventing fraud and abuse (including logging, rate limiting, and bot protection); compliance with legal obligations (such as tax and accounting retention); and, where we specifically ask for it, your consent.

3. Cookies and Local Storage

We use a small number of cookies and browser local storage, and we do not use third-party advertising or analytics trackers.

• Essential cookies (cannot be disabled). An authentication/session cookie that keeps you signed in, and a security token used to protect certain requests against cross-site request forgery. These are required for the Service to function.
• Preference storage. Browser local storage keeps non-sensitive preferences such as your theme, chart intervals, layout, and interface state. The Service works without it, and apart from the email and Google sign-in tokens below it holds no passwords, keys, or tokens.
• Email and Google sign-in. If you sign in with email or Google, our wallet provider Privy keeps your sign-in tokens in this browser's local storage, so your wallet can be used without signing in again each time. Signing out on this device removes them.
• First-party analytics. We keep first-party usage records (such as page views and request logs) to operate, secure, and improve the Service. These are our own records; we do not share them with third-party ad networks, and they are deleted on the schedule in Section 6.

4. How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising or rent or license it to third parties for their own marketing.

We share personal information only as follows:

• Service providers (subprocessors) who process data on our behalf, under contract and confidentiality obligations. The subprocessors we currently use are:
  • Neon — primary database (account, identities, and the data described in Section 1);
  • Cloudflare (R2) — storage for profile avatars;
  • OpenRouter — the AI gateway that relays your TracerAI prompts and related content to the underlying model providers (see Section 5);
  • Anthropic (Claude), DeepSeek, and Google (Gemini) — the AI model providers that, via OpenRouter, generate TracerAI code, chat, and research responses from your prompts; the research feature also uses a web-search service to retrieve current information;
  • Upstash (Redis) — rate limiting and caching (transient identifiers such as IP- and user-derived keys, held briefly and expired automatically);
  • Discord — profile information, if you link Discord;
  • Privy — email and Google sign-in, and the wallet held for an email or Google account (your email address, your Google account ID if you sign in with Google, and that wallet's public address), if you sign up with email or Google;
  • Google — confirms who you are when you sign in with Google (your Google email address and account ID), if you sign in with Google;
  • Application hosting — self-operated. The application servers that process and store the data described in this Policy are operated by Tracer rather than by a third-party hosting platform;
  • Sentry — error and performance monitoring (diagnostic data with personal data scrubbed).
• Legal and safety. We may disclose information if required by law, subpoena, or legal process, or where we believe in good faith it is necessary to comply with law, enforce our Terms, or protect the rights, safety, or property of Tracer, our users, or the public.
• Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

Market-data providers and archives (such as the exchanges whose data we display, and our market-data storage systems) receive market data, not your personal information.

5. TracerAI and Your Inputs

TracerAI generates indicator code, chat responses, and research from the prompts and content you submit. To provide these features, your prompts and related content are sent to OpenRouter using the OpenRouter API key you supplied, and OpenRouter routes them to third-party model providers including Anthropic (Claude), DeepSeek, and Google (Gemini) for processing; OpenRouter bills those requests to your own OpenRouter account. The research feature performs live web search and may transmit your query and any URLs you ask it to read to a search service to retrieve current information. Your prompts, messages, and generated outputs are stored in your account so your chat history and saved indicators persist. You can delete chats and saved indicators, which removes them and their versions from your account.

Your use of TracerAI is also governed by the AI provisions of our Terms of Service. We do not use the content of paying customers' TracerAI inputs or outputs to train foundation models except as disclosed here or with your consent, and we direct our providers to handle your content in accordance with their applicable enterprise/API terms.

6. Data Retention and Deletion

Retention. We keep personal information for as long as your account is active or as needed to provide the Service, and then for as long as necessary for the purposes described here or as required by law. Specific practices include:

• operational logs are deleted automatically on a rolling basis (for example, request and error logs after about 30 days, page-view records after about 90 days, and certain aggregate metrics after about 365 days);
• your content (workspaces, saved indicators, and TracerAI prompts and chats) is retained indefinitely while your account exists, so your history and saved work persist, until you delete it or delete your account;
• entitlement records (any API or SDK entitlement history) are retained after account deletion for the period required by applicable accounting, tax, and audit law; and
• to keep the points program fair, we record a keyed hash of the IP address (for IPv6, its /64 network) and of the browser (user agent) each account signs in from. The hash can't be turned back into the address without a key only we hold. Each record is deleted 180 days after we last see it, including after the account is deleted, and is used only to find people running more than one account.
• for the same reason, we read Hyperliquid's public record of who first sent money to each wallet linked to an account, and keep that sender's address, the amount and the date. This is public blockchain data.

Account deletion. You can delete your account from your account settings, which requires a fresh wallet signature. An account created with email or Google signs with its own wallet. Deleting your account removes your profile, settings, workspaces, saved indicators, API keys, and TracerAI chats and their versions. For an account created with email or Google, we also ask Privy to delete your Privy account, including your email address and any Google account ID. Privy then archives the wallet it held for you, and neither we nor Privy can give you access to it again, so export its private key first if you want to keep it. Please note:

• if your account holds an active or prior developer API entitlement, that record prevents self-service deletion. If you cannot complete self-service deletion for this reason, email privacy@tracerterminal.com and we will erase your non-financial personal information while retaining the financial records below; and
• we retain the entitlement records described above after deletion; and
• if your account earned points, we retain a record of the points it earned and when, with a hash of every wallet address it has linked, so points cannot be reset by deleting and re-creating an account; and
• if your account was penalized for breaking the points rules, we retain the penalty record, and for a disqualification or ban the same hash of every wallet address it has linked, so those wallets stay blocked from rewards; and
• we keep the same hash of each wallet address you link or unlink, and when, so a wallet cannot be freed from a penalty by unlinking it, and the sign-in hashes described above until they expire.

The wallet hashes above are SHA-256 hashes of the address. Wallet addresses are public on their blockchain, so anyone who already knows an address can check it against its hash. We keep the points, penalty and wallet records indefinitely, because they are how points, and any reward based on them, are checked.

Access and portability requests. We do not currently offer a self-service data export. You may request a copy of the personal information we hold about you by emailing privacy@tracerterminal.com, and we will provide it in a portable, machine-readable format (such as JSON) for the information you provided to us, subject only to the exemptions allowed by law.

7. Data Security

We use reasonable technical and organizational measures to protect personal information, including encryption in transit (TLS), wallet-signature authentication with no stored credentials, hashed API keys, access controls, and rate limiting on authentication flows. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Privacy Rights

Depending on where you live, you have rights over your personal information. We honor these rights and will not discriminate against you for exercising them.

How to exercise. Email privacy@tracerterminal.com, or contact us at support@tracerterminal.com, and tell us which right you wish to exercise. We will acknowledge your request within 10 business days and respond within 45 days (extendable by a further 45 days with notice) for U.S. state-law requests, and within one month (extendable to three months) for GDPR/UK GDPR requests. Verification: to protect your account, we verify your identity before acting, generally by confirming control of your account email or wallet and, for sensitive actions such as account deletion, by requiring you to re-authenticate. Authorized agents may submit a request on your behalf with your signed written permission (or a valid power of attorney); we may still require you to verify your own identity and confirm the authorization.

If you are in the EEA or UK (GDPR/UK GDPR), you have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent where processing is based on consent. Our legal bases are described in Section 2. You may lodge a complaint with your supervisory authority (in the UK, the Information Commissioner's Office).

If you are a California resident (CCPA/CPRA), you have the right to know and access, correct, and delete your personal information, and to opt out of the "sale" or "sharing" of personal information and to limit the use of sensitive personal information. We do not sell or share personal information as those terms are defined under California law, and we use the limited sensitive personal information we collect (see Section 1) only for the permitted purposes of providing and securing the Service, so the right to limit its use is not triggered.

If you are in another U.S. state with a comprehensive privacy law (such as Virginia, Colorado, Connecticut, or Texas), you have similar rights, including the right to appeal a denied request. To appeal, reply to our decision or email privacy@tracerterminal.com with "Appeal" in the subject line; if we deny your appeal, you may contact your state attorney general.

Some information may be retained after a deletion request where an exception applies (for example, to complete a transaction, for security, or to comply with a legal obligation), including the entitlement records described in Section 6.

9. International Data Transfers

We are based in the United States and process personal information there and in other countries where our subprocessors operate. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States. Where we transfer the personal data of individuals in the EEA or UK, we will put in place the appropriate safeguards required by law (such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Agreement).

10. Wallet Authentication

If you sign in with a Web3 wallet, we use your public wallet address to authenticate you and associate your account. Wallet addresses and on-chain activity are public by nature. We never receive, request, or store your wallet's private keys or seed phrase, and we cannot move your assets. The agent key described under Live trading is a separate key that can trade but not move funds. For wallet-only accounts, we may ask you to sign a message with your wallet to confirm sensitive actions such as account deletion.

If you sign up with email or Google, our wallet provider Privy creates an Ethereum wallet for your account. Its key is held by Privy in secure hardware and can only be used after you sign in with a code sent to your email or with your Google account. We never receive that key and cannot move the wallet's assets. We may ask you to sign a message with this wallet to confirm sensitive actions. You can export its private key from your account settings: Privy shows it in its own window, which we cannot read, and we keep a security record of when the export was opened.

11. Children's Privacy

The Service is intended only for adults 18 years or older, and by using it you represent that you meet that requirement. We do not knowingly collect personal information from anyone under 18, and we do not knowingly collect personal information from children under 13 (as defined by the U.S. Children's Online Privacy Protection Act). If we learn that we have collected such information, we will delete it.

12. Do Not Track and Global Privacy Control

Because we do not use third-party advertising or cross-site tracking, we do not track you across other websites over time. We also do not sell or share your personal information, so there is no sale or sharing for an opt-out preference signal to affect. If that ever changes, we will honor recognized browser opt-out signals, such as Global Privacy Control (GPC), as required by law.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated Policy here, update the "Last updated" date, and, where appropriate, provide additional notice. Your continued use of the Service after the effective date means you accept the updated Policy.

14. Contact

For privacy questions or to exercise your rights, contact:

TracerTerminal LLC
Privacy: privacy@tracerterminal.com
General: support@tracerterminal.com