CTFY / PRIVACY
Privacy Policy
Effective date: 2026-08-04. This is a placeholder. Final policy pending legal review.
01
What we collect
- Wallet address from Sign-In With Ethereum. That is your identifier on CTFY.
- DEX account data — trades, positions, equity — pulled from Hyperliquid and Extended. Public on-chain for Hyperliquid; user-provided read-only API key for Extended.
- Optional profile fields you enter (handle, display name, bio, avatar, linked X/Instagram).
- Payment records (transaction hash, chain id, block number) from your on-chain USDC payments on Base. We never see card numbers or bank info.
02
What we don't collect
No document KYC. No email address unless you explicitly link one. No cross-site tracking cookies. No third-party ad networks.
03
How we use it
DEX data powers your public performance profile and rating. Wallet + payment metadata power authentication and billing. That's the full list of purposes.
04
Who we share it with
- Base (Coinbase L2) — public blockchain where USDC payments settle.
- Supabase (database hosting)
- Vercel (application hosting)
No advertisers. No data brokers. No sale of personal data.
05
Your rights
Disconnect any DEX account at any time; the record stays for reputation (see Terms) but no further data is pulled. To have your account and identifiable data deleted, contact support. Historical trade data anchored to your wallet may persist as part of publicly verifiable history — that's inherent to on-chain venues, not something CTFY controls.
06