Privacy Policy
1. Who is responsible
DeFi Tracker, operator of defitracker.online, decides how the data described below is processed. Contact for any privacy question or request: anton@defitracker.online.
2. Using the free tools requires no account
The backtester and the calculators are open to everyone with no registration and no login. For a visitor who is not signed in we record one row per campaign-tagged or first visit, containing:
- the page path visited;
- where the visit came from — campaign tags in the link (
utm_source,utm_campaign,utm_content) or the referring site; - the browser’s user-agent string;
- a random visitor token stored in a cookie, which lets us tell a returning browser from a new one.
That token is a random value, not derived from you. We do not store visitors’ IP addresses in this record. We keep it because it is the only way to tell which article or video actually brings people to the tools.
3. Cookies
locale— the language you chose.vt— the random visitor token described above (180 days).ft,lt— first and last visit source, so that a purchase weeks later can still be attributed to the link that brought you (180 days).- A session cookie, only for signed-in users, which keeps you logged in.
All of these are first-party cookies set by our own domain. We run no third-party analytics, advertising or tracking scripts — nothing on the site sets a cookie for anyone but us.
4. What we store for an account
- Registration: email address and a password (stored only as a cryptographic hash — we cannot read it), interface language, plan and subscription status.
- Telegram sign-in: your Telegram user id, username and first name, as Telegram passes them to the bot.
- Wallets: the public blockchain addresses you add, in read-only form, plus the names and notes you give them. From those addresses we read publicly available on-chain data — positions, transactions, balances — and store the results so history survives between visits.
- Payments: the fact, amount and period of payment. Card details never reach us — payment happens inside Telegram with the payment provider.
We never ask for and never store private keys or seed phrases. See the Terms of Use.
5. Why we process it
- To provide the service you asked for — account, tracker, notifications, subscription (performance of a contract).
- To keep it working — error diagnostics, abuse prevention, rate limiting (legitimate interest).
- To understand where users come from — the visit records above (legitimate interest in measuring our own marketing).
- To meet legal obligations — for example accounting records for payments received.
6. Who else sees the data
- Hosting: Hetzner Online GmbH, servers in Finland (EU). The database lives on those servers.
- Error monitoring: Sentry, which receives technical crash reports. It is configured not to send personal identifiers — no IP addresses, no cookies, no request bodies.
- Telegram: if you sign in or pay through Telegram, or receive our notifications, Telegram processes that interaction under its own privacy policy.
- Blockchain data providers: to read on-chain data we query public nodes and data APIs. Those requests necessarily contain the wallet address being looked up, so the provider sees that address — as it would see any address queried on a public blockchain.
We do not sell your data, and we do not share it with advertisers or data brokers. We disclose data to authorities only where the law obliges us to.
7. How long we keep it
Account data is kept while the account exists, and is deleted on request. Visit records are kept in aggregate form for as long as they are useful for measuring traffic sources; they are not linked to a name or an email unless the same browser later creates an account. Payment records are kept as long as accounting rules require.
8. Your rights
You can ask us to show you the data we hold about you, correct it, delete it, restrict or object to its processing, or export it. Write to anton@defitracker.online — we handle requests manually and reply within 30 days. Deleting your account removes your account record, your wallet addresses and the position history derived from them.
Clearing your browser cookies removes the visitor token and detaches future visits from earlier ones. If you are in the EU/EEA or the UK, you also have the right to complain to your national data protection authority.
9. Security
Traffic runs over HTTPS, passwords are stored hashed, wallet access is read-only by design, and administrative access to the servers is limited to the operator. No system is perfectly secure; if a breach affects you, we will tell you.
10. Children
The service is not intended for people under 18, and we do not knowingly collect their data.
11. Changes
The current version of this policy always lives at this address with its “Last updated” date. Material changes will be announced in our Telegram channel.