Privacy policy Your data, in plain view.

• · Your wallet address, from Sign-In With Ethereum. That address is your identity on CTFY.
• · DEX account data — trades, positions and equity — pulled from Hyperliquid and Extended. Public on-chain in Hyperliquid's case; a read-only API key you provide in Extended's.
• · Optional profile fields you enter yourself: handle, display name, bio, avatar, and any linked social account.
• · Payment records — transaction hash, chain id, block number — from your on-chain USDC payments on Arc. We never see a card number or a bank detail, because there is never one to see.

No document KYC. No email address unless you choose to link one. No cross-site tracking cookies, and no third-party ad networks.

DEX data powers your public performance profile. Your wallet address and payment metadata power authentication and billing.

That is the complete list of purposes.

• · Arc — Circle's stablecoin L1, the public blockchain where USDC payments settle.
• · Supabase — database hosting.
• · Vercel — application hosting.

No advertisers. No data brokers. No sale of personal data.

You can disconnect any DEX account at any time. It leaves the leaderboard and nothing further is pulled from it, but disconnecting does not free the slot it spent — see the terms.

To have your CTFY account and identifiable data deleted, contact support. Historical trade data anchored to your wallet may persist as part of publicly verifiable on-chain history; that is inherent to the venues, not something CTFY controls.

Privacy questions go to privacy@ctfy.app.