Privacy

What we store

Account: name or nickname, email (if you sign in by email), password hash, Face ID/fingerprint sign-in keys (public part only), language and time zone.

Exchange: API key and secret encrypted, account state (balance, open positions, closed trades, P&L) and the guard's action log.

NoTilt AI chat, your rules, payments and referral rewards. If you connect Telegram — the chat id for alerts; a trusted contact — their chat id and name.

Why

So the guard can enforce your rules, show stats and the journal, send alerts, and so NoTilt AI has context. We don't sell data or use it for ads.

Who we share with

Your exchange — API requests on your behalf. OpenAI — NoTilt AI chat text and brief stats for the answer. NOWPayments — amount and order id when you pay. Telegram — alert text. Hosting: Vercel and Supabase.

Public data

The “Who NoTilt saved” block on the site shows saved amounts with masked names (e.g. “sp*****t”). A trade card is published only if you press “Share” yourself.

Deletion

Disconnecting an exchange deletes the key after 24 hours. To delete your account and data, write to Support in the dashboard — done within 7 days (except payment records we must keep by law).

Security

Key secrets are encrypted; sign-in is protected by password, Face ID or 2FA. Nobody, including us, can withdraw your money through NoTilt.