Privacy Policy
This policy explains what bryptoflows does with data when you visit bryptoflows.xyz or call its public API. It is written to describe how the service actually behaves rather than to cover every eventuality, and it is kept short deliberately.
The short version
bryptoflows is a public, read-only analytics site. There are no user accounts, no sign-up, no newsletter and no contact forms. We set no cookies, use no analytics or tracking scripts, and store nothing in your browser's local or session storage. Nothing you do on this site is linked to an identity, profiled, or used for advertising, and no data is ever sold.
What is actually processed
Your IP address, briefly, to keep the API up. Requests to the /api/v1/ endpoints are rate limited. To do that the server keeps a short-lived, in-memory count of recent requests per IP address, which is discarded as soon as the rate-limit window passes. It is never written to disk by the application and is never combined with anything else.
Standard server request logs. Our hosting provider records ordinary web-server logs for each request — IP address, timestamp, the URL requested, response status, and the browser user-agent string. These are used to operate the service, investigate faults and identify abuse. They are typically retained for about 30 days and then deleted automatically.
That is the complete list. Because pages are served without cookies or scripts that identify you, we cannot tell one visitor from another beyond what those logs contain.
Third parties
Google Cloud hosts the site and its API, in Google's us-east1 region in the United States, and provides the request logging described above.
Google Fonts serves the typeface used across the site. Your browser fetches that font file directly from Google, which means Google receives your IP address and user-agent as part of that request. We do not receive anything back from it.
Outbound links. The site links to third-party sources such as Farside Investors, Hyperliquid and SEC EDGAR. Once you follow a link you are on their site and their privacy policy applies, not ours.
Legal basis and your rights
Where the UK GDPR and GDPR apply, the processing above rests on our legitimate interests in delivering the service, keeping it available, and preventing abuse. We do not process special-category data and we do not carry out automated decision-making about individuals.
You have the right to ask what personal data we hold about you, to have it corrected or erased, to object to or restrict its processing, and to complain to a supervisory authority — in the UK, the Information Commissioner's Office. Please note the practical limit: because we hold nothing that identifies you beyond a raw IP address in short-lived logs, we will usually be unable to locate records relating to a specific person, and we will tell you so rather than guess.
Changes
If this policy changes materially the revision date at the top of this page will change with it. There is no mailing list to notify, so the date is the record.
Contact
Questions about this policy, or a data request, can go to hello@bryptoflows.xyz.