Privacy Policy

Draft, effective [effective date]

Draft. This policy describes how ftw.trade works today. Bracketed items are still to be filled in, and the policy may change before it takes effect.

This policy explains what information ftw.trade (“ftw.trade”, “we”, “us”), operated by [Operator legal name], collects when you use the site, its API and its AI-assistant access; what we use it for; who else receives it; how long we keep it; and what you can do about it. Browsing markets does not need an account, and most of what follows applies only once you sign in.

What we collect

When you sign in. Depending on how you sign in, we store:

  • Google: your email address, your name and your Google account ID. We do not store your Google profile photo or Google's access tokens.
  • Telegram: your Telegram user ID. Your Telegram username or name is used to make your handle; your Telegram profile photo is not stored.
  • Browser wallet: the address you signed with, as your sign-in identity and as a wallet linked to your account, with when it was first and last seen.
  • Email link (where offered): your email address. We store only a hash of each link's token, until it is used or expires.

Every account also has a handle, an emoji avatar, the date you joined and when you last signed in, and, if you joined with an invite, the code used and the account that invited you.

Passkeys and approvals. If you add a passkey, we store its public key, its credential ID and the name you give it, never your fingerprint, face or PIN, which stay on your device. We record which passkeys and wallets have approved actions for your account, and since when, and keep a list of security notices (a wallet linked or imported, a withdrawal address added, a new approver).

Your trading wallets. For each trading wallet, including your Main and Gas wallets, we store its address, the name, emoji, purpose and note you give it, which of your linked wallets controls it, and whether it uses the gas station. Private keys are held by a separate signing service, not in our application database; a key you import is passed to that service once and is never stored in our database or sent back to your browser.

Money you move. Withdrawal addresses you add, with the signature that proved you control each; each withdrawal and move between your wallets (wallet, destination, asset, amount, status and transaction hash); and your gas usage (each transaction's gas cost and whether free gas or your gas balance paid it).

Things you create. Watchlists and followed wallets; alerts; strategies, including their settings, caps and source code; the runs, orders, decisions and alerts they produce; backtest reports; webhook URLs you give us; and your Telegram alert settings.

API and AI-assistant access. If you create an access token, we store a salted hash of it (never the token itself), its name and scopes, when it was last used, and a log of the tools it called with a short summary of each call.

Usage records. To apply usage limits we record which limited actions your account performed, and keep those records for 48 hours.

Your IP address. We use it to rate-limit requests. For most requests that happens in memory only. Sign-in attempts with an API token are counted per IP address in our database, and those counters are deleted within an hour. Our hosting provider, and any network provider in front of the site, may record your IP address in their own request logs.

Logs and error reports. Our servers keep operational logs, which can include your account ID and the pages and API routes you used. If error reporting is turned on, errors from your browser and our servers are sent to Sentry, scrubbed first: no cookies, request headers, request bodies, query strings or user details, and with page addresses cut down to their first part.

Public blockchain data. The markets, trades, balances, holders, profit-and-loss and wallet pages on ftw.trade come from our index of public Robinhood Chain data. Any wallet that trades on chain, including a trading wallet you use through ftw.trade, can appear on leaderboards and wallet pages, and anyone can follow it. Blockchain data is public and permanent, and we cannot remove it from the chain.

Cookies and browser storage

  • ftw_session keeps you signed in. It holds your account ID with our signature, cannot be read by page scripts, and lasts up to 30 days or until you sign out.
  • During sign-in, our sign-in library sets short-lived cookies for security (a CSRF token, the page to return to, and the state of a Google sign-in) and a session token that is exchanged for ftw_session.
  • ftw_invite remembers an invite code for one hour while you sign in.
  • Your browser's local storage keeps preferences on your device: theme, screener and chart layouts, indicators, your watchlist and followed wallets (copied to your account once you sign in), wallets you track on charts, and which notices you have dismissed.

We do not use advertising or analytics cookies, and the site loads no advertising or analytics scripts.

How we use it

  • to sign you in and keep your account, wallets, lists, alerts and strategies;
  • to carry out what you ask for: swaps, strategies, deposits, withdrawals, moves and alerts;
  • to show you your wallets' balances, activity and history;
  • to tell you about security-relevant changes to your account, in the app and by Telegram or email;
  • to apply limits, keep accurate records of money moved, and protect users and the service from abuse;
  • to find and fix problems;
  • to comply with the law.

We use it because we need it to provide the service you signed up for, because we have a legitimate interest in keeping ftw.trade secure and working, or because the law requires it. We do not sell your information, and we do not use it for advertising or share it for cross-site advertising.

Who else receives it

  • Hosting and storage. Fly.io hosts the site, the signing service, our Postgres database and our caches. Object storage providers hold public market data and operational files.
  • Sign-in and messaging. Google and Telegram take part in sign-in when you use them; our email provider (Resend) sends sign-in links and account notices. The Telegram sign-in button is a script loaded from Telegram, and it asks your permission for our bot to message you. If you link Telegram for alerts, Telegram delivers them and we store the linked chat's ID and username.
  • Blockchain RPC providers receive wallet addresses when we look up balances or send transactions, as any blockchain request does.
  • Error reporting. Sentry, if turned on, as described above.
  • AI drafting. Where the feature is offered, OpenRouter and the AI model provider it routes to receive the text you write when you ask the AI to draft a strategy, without your account ID.
  • Token logo hosts. Your browser loads some token images directly from their hosts (such as Dexscreener, Robinhood and Virtuals Protocol's image store on Amazon S3). Like any website, those hosts can see your IP address.
  • Webhooks you configure receive your strategy alerts at the address you give us.
  • Authorities and successors. Law enforcement, regulators or courts where the law requires it, and a successor if ftw.trade is transferred to another operator, under this policy.

These providers may process data outside your country. Where the law requires it, we rely on appropriate safeguards for those transfers.

How long we keep it

  • Account, wallet, list, strategy and alert data: as long as your account exists, or until you delete it.
  • Followed-wallet trade alerts: 14 days. Usage records: 48 hours. IP rate-limit counters: up to an hour.
  • Strategy decision history: the most recent 500 decisions for each strategy.
  • Sign-in links and codes: until they are used or expire.
  • Records of money moved (withdrawals, transfers, gas charges) and the trading platform's records of orders and trades: as long as we need them to keep accurate records and as the law requires, without your name once you delete your account (below).
  • Server logs and error reports: only as long as needed to run and secure the service, then deleted.

Deleting your account

You can delete your account yourself, at the bottom of Account. You must have signed in within the last ten minutes, and you confirm by typing your handle. Deletion cannot be undone.

Funds come first. We hold the keys of your trading wallets, so we do not delete an account while anything it owns could still hold or move money. Withdraw first. Until each of these is closed, deletion is refused and the page lists what remains:

  • a trading wallet still holds funds or tokens, or has an open position;
  • a strategy is trading live, or still holds an active live-trading permission;
  • an order, stop-loss or take-profit is still waiting to act;
  • a transfer to or from another venue is still in progress, or money deposited there has not been withdrawn.

If we cannot check one of these at that moment, deletion is refused too, and you can try again.

What we delete. In one step: your profile (handle, avatar, email, join date and who invited you), your sign-in identities and linked wallets, passkeys, approvers and security notices, and every session on every device; access tokens and their activity log; your Telegram link; your withdrawal addresses; your watchlist and followed wallets; your alerts; your strategies, including their source code, runs, decisions, orders and webhook URLs, and your backtest reports; usage records; and your invite code. Strategies still running on paper are stopped first.

What we keep, without your name. These are moved to a random identifier that nothing else links to you:

  • each trading wallet's address, the reference to its key in our signing service, and the address of the wallet that controlled it. We do not destroy the key, so anything sent to that address later can still be returned;
  • records of withdrawals and transfers (wallet, destination, asset, amount and transaction hash);
  • a record that an account was deleted, and when, with nothing about you in it.

Accounts that joined with your invite code keep the fact that they were invited, but not by whom. Public blockchain data, including your trading wallets' history, cannot be deleted by anyone. What your browser stores is cleared by clearing this site's data.

Your rights and choices

  • You can use the markets without an account.
  • You can sign out; remove passkeys on Account; revoke access tokens and unlink Telegram on Automate; and delete alerts where you set them.
  • You can delete your account on Account, as described above.
  • Depending on where you live, you may have the right to ask for a copy of your data, to correct it, to delete it, to receive it in a portable format, to object to or restrict how we use it, and not to be treated differently for using these rights. Email [contact email] from an address or account we can verify, and we will reply within 30 days. You may also complain to your local data protection authority.

Security

Sessions are signed so they cannot be forged; sign-in links and access tokens are stored only as hashes; wallet keys are kept in a signing service separate from the website and its database; and acting on a trading wallet needs your approval with a passkey or linked wallet. No system is perfectly secure, and we cannot guarantee the security of information you send us. If a breach affects your information, we will tell you as the law requires.

Children

ftw.trade is not meant for anyone under 18, and we do not knowingly collect information from children.

Changes

We will update this page when what we collect or how we use it changes, and change the date at the top. The Terms of Service cover your use of the site.

Contact

[Operator legal name], [Operator postal address]. Email: [contact email].