Privacy Policy

Last updated: December 2024

1. Introduction

PerpLog (“we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect information when you use our Service.

2. Information We Collect

2.1 Blockchain Data

When you connect your wallet, we access publicly available blockchain data including:

  • Your wallet address (public key)
  • Your trading history on Hyperliquid (publicly available on-chain)
  • Your account balances and positions

This data is inherently public on the blockchain. We do not collect or have access to your private keys.

2.2 User-Generated Content

We store content you create within the Service:

  • Trade notes and journal entries
  • Playbooks and trading strategies
  • Tags and annotations on trades
  • Position sizing calculations

2.3 Technical Data

We automatically collect certain technical information:

  • IP address (for security and geographic restrictions)
  • Browser type and version
  • Device information
  • Usage patterns and interaction with the Service

2.4 Information We Do NOT Collect

  • Private keys or seed phrases
  • Personal identification documents
  • Email addresses (unless you contact support)
  • Real names or physical addresses

3. How We Use Your Information

We use collected information to:

  • Provide and maintain the Service
  • Display your trading history and analytics
  • Store your journal entries and notes
  • Enforce geographic restrictions
  • Detect and prevent fraud or abuse
  • Improve and optimize the Service
  • Comply with legal obligations

4. Geographic Data and Restrictions

We use IP-based geolocation to enforce geographic restrictions required by applicable regulations. This includes:

  • Blocking access from restricted jurisdictions (US, Ontario, sanctioned countries)
  • Logging blocked access attempts for security purposes

We do not use precise GPS location data.

5. Data Storage and Security

Your data is stored on Cloudflare infrastructure (Workers, D1 SQLite at the edge, R2 object storage, KV) with industry-standard security measures including:

  • Encryption in transit (TLS/HTTPS)
  • Encryption at rest
  • HMAC-signed session cookies for authentication (no password storage)
  • Access controls scoped per wallet address

6. Data Sharing

We do not sell your personal data. We may share data in the following circumstances:

  • Service Providers: Third-party services that help operate the Service (e.g., Cloudflare for hosting + storage, Anthropic for AI features)
  • Legal Requirements: When required by law or to respond to legal process
  • Safety: To protect the rights, property, or safety of our users or others
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

7. Third-Party Services

The Service integrates with third-party services that have their own privacy policies:

  • Hyperliquid: For trade data and execution
  • Wallet Providers: (MetaMask, Rainbow, WalletConnect, etc.) for authentication via wallet signatures
  • Cloudflare: For hosting, data storage (D1, R2, KV), and edge compute (Workers)
  • Anthropic: For Claude-powered weekly reviews and market briefings (Claude Code Routines)

We encourage you to review the privacy policies of these third-party services.

8. Cookies and Local Storage

We use cookies and local storage for:

  • Authentication and session management
  • Remembering your preferences
  • Analytics (if enabled)

9. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your data
  • Export your data
  • Object to certain processing
  • Withdraw consent

To exercise these rights, please contact us through our official channels.

10. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. You may request deletion of your data at any time. Some data may be retained for legal compliance or legitimate business purposes.

11. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated date.

14. Contact Us

For questions about this Privacy Policy or to exercise your rights, please contact us through our official channels.