Privacy Policy

Last updated: June 21, 2026

This Privacy Policy explains what information CryptaDash ("we," "us") collects, how we use it, and your choices. We've tried to keep it plain and honest. By using CryptaDash you agree to this policy.

The short version: we collect what we need to run the app and keep your account secure. We do not sell your information or your trading data to anyone, and we do not show third-party ads. Any exchange you connect is read-only - CryptaDash can never place a trade, move, or withdraw your funds.

1. Information We Collect

Account information

When you create an account we collect your email address, an optional display name, and a password - which we store only as a securely hashed value (bcrypt). We never store or see your plain password.

Data you enter and sync

We store the information you add so we can show it back to you and sync it across your devices: your tracked coins and holdings, trades and exits, journal entries (including any setup/emotion tags, risk and notes you add), projection settings, discipline settings, watchlist and price alerts, and notification preferences.

Connected exchanges (optional)

If you connect an exchange (KuCoin, Coinbase, or Kraken), you provide an API key that we use only to read your balances, positions, and trade history so we can display and track them. We require read-only keys: CryptaDash cannot place orders, transfer, or withdraw funds. Your API secret and passphrase are encrypted at rest (AES-256-GCM) - they are never stored in plain text and never shown back to you. We also cache a snapshot of your synced positions and balances so the app loads quickly. You can disconnect an exchange at any time from your Account page, which removes the stored key.

Telegram (optional)

If you connect Telegram for alerts, we store the chat identifier needed to send you messages. You can disconnect at any time.

Payment information (Pro)

If you subscribe to Pro, payments are processed by Stripe. Stripe collects and processes your card details directly under its own privacy policy. We never see or store your full card number. We do store a Stripe customer identifier and your subscription status and billing dates so we can provide Pro, show your plan, and send renewal reminders. If you pay with crypto instead, the payment is processed by our crypto payment provider (NOWPayments).

Communications

We send essential service emails through our email provider (Resend), including account and billing messages, such as renewal reminders sent 48 hours and 24 hours before a Pro renewal, plus receipts and refund confirmations. These are transactional messages tied to your account, not marketing.

Security and usage data

To protect your account and understand how the app is used, we record login events (timestamp, IP address, and browser/user-agent) and basic in-app navigation (which pages you visit and tools you use). Login records power your account's login-history view and help us detect abuse; navigation data is aggregate product analytics and is automatically pruned after about 90 days. We also note the acquisition source (e.g., referrer or campaign tag) when you first arrive.

Technical information

Like most web apps, our hosting provider processes basic technical data (such as IP address and browser type) to operate and secure the Service. We use a single, essential cookie to keep you signed in.

2. How We Use Your Information

• to provide the Service and sync your data across devices;
• to read and display your connected exchange holdings (read-only);
• to authenticate you, keep your account secure, and detect abuse;
• to process your subscription payments and manage your plan;
• to send essential account and billing emails, including renewal reminders;
• to send the alerts you enable (e.g., Telegram);
• to understand usage in aggregate and improve the Service.

We do not sell your personal information or your trading data, and we do not use it for third-party advertising.

3. Market Data, AI & Third Parties

To show prices, charts, indicators, funding rates, and token-unlock schedules, the Service requests public market data from third parties such as Binance (via its public data endpoint), CoinGecko, alternative.me, and DefiLlama. These requests are for market data only and do not include your personal information.

When you connect an exchange, your read-only requests are sent to that exchange's API to fetch your data (for KuCoin, requests may be routed through a regional network proxy to satisfy the exchange's geographic restrictions). We also rely on infrastructure providers (e.g., Railway) to host the app and database, Stripe (and, for crypto payments, NOWPayments) to process payments, our email provider (Resend) to send account and billing emails, and Telegram to deliver alerts if you connect it.

Some optional features use AI. If you use an AI-assisted feature, only the specific data you submit to that feature is sent to our AI provider (Anthropic) to generate a response; under their API terms, that data is not used to train their models. We do not send your data to AI providers except when you actively use such a feature.

4. Cookies

We use a single, essential cookie to keep you logged in. We do not use advertising or third-party tracking cookies.

5. Data Storage & Security

Your data is stored in a hosted PostgreSQL database. Passwords are hashed (bcrypt), exchange API secrets are encrypted at rest (AES-256-GCM), connections are encrypted in transit (HTTPS), and access is restricted.

We designed the app so that the most sensitive thing - your money - is never exposed: connected exchange keys are read-only and encrypted, and we never hold your funds, private keys, or full payment details. That means even in the unlikely event of a data breach, a leaked connection cannot be used to trade or withdraw your assets. No system is perfectly secure, and other information (like your email) still warrants care, but we take reasonable measures to protect everything we store.

6. Data Retention & Your Choices

We keep your data for as long as your account is active (navigation analytics are pruned after ~90 days). You can view and edit most of your data directly in the app, and disconnect any exchange or Telegram at any time. To delete your account and the data associated with it, email us at cryptadash.hello@gmail.com and we will process the request.

7. Children

CryptaDash is not intended for anyone under 18, and we do not knowingly collect information from children.

8. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

9. Contact

Questions about your privacy? Email cryptadash.hello@gmail.com.

See also our Terms & Conditions, including the important "not financial advice" disclaimer.