# Privacy Policy

> This policy explains what data WakeTrades keeps about you, why, where, for how long, and how to remove it. It covers the website, the app, the Telegram bot, the API and the MCP server. It works together with our Terms of Use.

<div class="docs-updated">Version 2026-10-21 · In force since October 23, 2026</div>

## The Short Version

- We don't ask for your name, email address, phone number or identity documents. You sign in with your wallet.
- We keep your wallet address, your settings, your Telegram chat ID and username (or your webhook address), your trading key (encrypted), and a record of your copies, orders and payments.
- Hyperliquid is public. Anyone can see your address's balances, positions, trades and payments there, with or without WakeTrades.
- We don't sell your data and don't use it for advertising. No analytics, no ad trackers.
- Cloudflare hosts our service. Telegram carries our alerts to you.
- You can delete your account from your Profile at any time.

## 1. Who Is Responsible

WakeTrades is operated by its founder, an individual acting in their own name and not through a company ([Terms, section 1](https://waketrades.com/docs/legal/terms.md#who-we-are)). The founder is responsible for the personal data described in this policy.

For any question about your data: [support@waketrades.com](mailto:support@waketrades.com).

## 2. What We Collect, and Why

| Data | When we get it | Why |
|---|---|---|
| **Wallet address** | When you sign in by signing a message with your wallet. Signing in creates your account record, even if you don't finish setup. It places no order and gives no permission. | To identify you and run your account. |
| **Settings:** your leaders' addresses and the names you give them, your exposure level and its options, order mode, language, wallet name, alerts on or off | When you choose or change them, on the site, in the bot or through the API | To copy trades the way you chose. |
| **Trading key:** its public address, its private key (encrypted), the approval and expiry dates; while you renew it, the new key (encrypted) until Hyperliquid records it | When you approve the trading key | To place orders on your account, and to remind you before it expires. |
| **Telegram:** your chat ID and your public username (@…), if you have one | When you link Telegram | To send you alerts, to check that bot commands come from you, to show in your Profile which account is linked, to group the wallets you link to the same Telegram, and to allow one free trial per Telegram account (for that, we keep only a fingerprint of the chat ID, section 8). |
| **Webhook:** the HTTPS address you give us, and its signing secret (encrypted) | When you link a webhook | To send you signed alerts. |
| **Account and plan:** status, trial start, plan length and end date, founder price, pause date and reason, reference balance, suspension date and reason | While you use the service | To run your trial and plan, and to apply the Terms. |
| **Copies and orders:** for each copy, the coin, direction, size, entry price, leader, level, stops and take profits, opening and closing time, reason for closing, and realized profit or loss | Each time we open, change or close a copy | To run and show your copies, your orders and your history. |
| **Event journal:** orders, skipped copies, pauses, payments, alerts and errors, and whether we sent them to you | As events happen | To show your journal, to help you, and to investigate problems. |
| **Monthly results:** your balance at the start and end of each month, deposits and withdrawals, unrealized gain, number of open copies | Once a month | To show your results. |
| **Consents:** the date and time you accepted the Terms, their version, and the country detected from your internet (IP) address at that moment; the date, time and balance when you confirmed the Risky warning | When you sign the trading key, or confirm the warning | To keep proof of your choices ([Terms, section 2](https://waketrades.com/docs/legal/terms.md#accepting)). |
| **Payments:** transaction ID, sending address, amount, date, plan and matching status | When you pay | To apply your plan, to handle payment errors, and for our accounting. |
| **Messages you send us:** the text, and your email address if you choose to leave one | When you write to us from your dashboard or by email | To answer you. |
| **API requests sent with an Idempotency-Key:** the key, a fingerprint of the request and our answer | When your agent sends one | So that a repeated request isn't applied twice. |
| **Your account as read from Hyperliquid:** balance, positions, open and filled orders, account mode, deposits and withdrawals | Regularly, while you use the service | To size copies, place and check stops, notice changes you make yourself, and compute your results. |
| **Internet (IP) address and country** | With each request | Cloudflare processes them to deliver and protect the service, and to apply rate limits. When an account is created, we keep a keyed fingerprint of the IP address (not the address itself) to limit mass sign-ups. We store the country only with your acceptance of the Terms (above). |

**What we don't collect.** Your name. Your email address, unless you leave it with a message. Your phone number. Identity documents. Your wallet's private key or secret recovery phrase: we never ask for them. The messages you send to the bot are read to answer you, not stored. We don't keep your Telegram first name, last name or photo.

**What we send you.** Alerts about your copies, your account, your trial, your plan and your trading key, and our answers to your messages. No advertising.

## 3. Where Your Data Is Stored

Everything listed in section 2 is stored and processed on Cloudflare: our database, and the storage of the copy engine that runs your account (your settings, your open copies, your last 200 events, and alerts waiting to be delivered to your webhook). Your trading key and your webhook secret are stored encrypted (section 10).

Two other places receive a small part of it:

- **Our team's alert channel.** When something goes wrong (repeated order errors, a payment to check), an alert goes to a private Telegram channel of our team. It contains the first characters of your address and the error message, or for a payment, the amount and the transaction ID.
- **Our mailbox.** A message you send with your email address, and any email you send to support@waketrades.com, reaches our mailbox at Proton Mail through Cloudflare Email Routing.

## 4. Data About Leaders

To build leader pages, previews, the calculator, the monthly report and our social posts, we collect public data from Hyperliquid about many trading addresses:

- balance, profit and loss over 1, 7 and 30 days, 30-day volume and return;
- statistics computed from their public trades: number of trades, win rate, holding time, trader type and coins traded;
- for the leaders our customers follow, their current positions, kept while they are followed.

**Our social posts.** On X, Bluesky, Telegram and Discord, we post about large public positions of the biggest Hyperliquid accounts: a position opened or closed, its size, leverage and result, and where large positions would be liquidated. A post shows only a short form of the address (for example 0x1234…abcd).

This data comes only from Hyperliquid's public sources. Part of it is collected by a separate server of ours that receives no data about our customers. We don't tell leaders who copies them.

If your address appears in this data and you have a question or an objection, write to [support@waketrades.com](mailto:support@waketrades.com).

**Our customers' results.** If we publish statistics about our customers' results, they are aggregated and anonymous (for example, by exposure level), never with an address.

## 5. Hyperliquid Is Public

Please understand what is public on Hyperliquid, whether or not you use WakeTrades:

- Anyone can see the balances, positions, orders and trades of any Hyperliquid address.
- Your approval of our trading key is recorded on Hyperliquid. Anyone can see that your address approved a key named WakeTrades, and its address.
- Orders we place for you appear as trades of your address.
- Your payment to our receiving address is public. Someone who knows that address can see that your address paid us.
- Your copies follow your leaders' trades closely in time. Someone who studies public data could guess whom you copy.

We can't change or delete anything recorded on Hyperliquid.

## 6. Who We Share Data With

**We don't sell your personal data. We don't share it for advertising.**

| Who | What they receive | Why |
|---|---|---|
| **Cloudflare** | All the data in section 2, on our behalf | Hosting, database, network, security and email routing. |
| **Telegram** | The alerts we send you: details of your copies (coin, direction, size, profit or loss, a short form of the leader's address), your balance and your account status. Our team's alerts (section 3). | To deliver our messages. Telegram's own privacy policy applies to your use of Telegram. |
| **Your webhook** | The same alerts, signed, at the address you gave us | You chose this address. What happens there is up to you. |
| **Hyperliquid** | Orders signed with your trading key; requests for public data about your address and your leaders | To copy trades. Hyperliquid is a public network you use directly; it isn't our service provider. |
| **Proton** | Your messages that include an email address, and your emails to us | To read and answer them. |
| **Your wallet** (for example MetaMask) | We receive from it only your address and the signatures you choose to give | Your wallet's own privacy policy applies. |
| **Authorities** | Only what the law requires | To comply with the law. |

**Who can see your data on our side.** The founder and the few people who help run WakeTrades. They read it through Cloudflare and through a private admin tool protected by Cloudflare Access, to answer you, investigate problems and apply the Terms. Actions such as a suspension or a message to you are logged.

## 7. Transfers Outside Your Country

Cloudflare, Telegram and Proton operate in many countries. Your data may be processed outside your country.

## 8. How Long We Keep Your Data

| Data | How long |
|---|---|
| Sign-in message | 10 minutes. We don't store it. |
| Session | 7 days, in your browser (section 11). We don't store it on our servers. |
| Telegram link code | Up to 15 minutes. Erased once used. |
| Chat ID of a Telegram account that writes to the bot without being linked | 1 hour, so the bot doesn't answer it twice |
| Fingerprint of your IP address at sign-up | 48 hours |
| Idempotency keys | 24 hours |
| Temporary copy of a Hyperliquid account's state | Up to 10 minutes |
| Event journal | 30 days. Your orders are kept with your account. |
| Events shown in the bot's Journal | The last 200 |
| Account, settings, consents, Telegram link, webhook, copies, orders, monthly results and messages | Until you delete your account, or 6 months after your last activity (no plan running, no copy open, no change, order or payment); this includes an account that never finished setup |
| Encrypted trading key | Erased when it expires or is revoked, when you sign a new one, or when your account is deleted |
| Record that you used the free trial: your address, a fingerprint of your Telegram chat ID or of your webhook's host name, and the date | 24 months, even after your account is deleted, to allow one trial per address, per Telegram account and per webhook host |
| Payment records | As long as accounting and tax law requires, even after your account is deleted: no longer linked to it, but the sending address stays |
| Technical logs (the first characters of an address, error messages; never a key or a secret) | Up to 7 days |
| Leader statistics | Replaced at each refresh |

## 9. Your Rights and Choices

- **See your data.** Use your dashboard (orders, journal, results, Profile) and the bot. With a paid plan, you can download your history as a CSV file. For a full copy, write to [support@waketrades.com](mailto:support@waketrades.com).
- **Change your data.** Change your leaders, level, options and language on the site, in the bot or through the API.
- **Fewer messages.** Turn off position alerts. Alerts that need action from you are still sent.
- **Stop.** Use Pause or Close everything, or revoke the trading key on Hyperliquid.
- **Disconnect Telegram.** In your Profile, choose Disconnect. We erase your chat ID and username. Copying continues, with alerts on the site. Removing a webhook erases its address and secret the same way; if no Telegram is linked, copying then pauses until you link an alert channel again, and open copies stay managed.
- **Delete your account.** In your Profile, choose Delete my account and sign a message with your wallet. Each copied position must first have your own stop on Hyperliquid, or be closed, because nobody manages it afterwards. We then stop copying and erase your account: settings, trading key, Telegram link, webhook, copies, orders, journal, monthly results and messages, and the copy engine's storage. We keep only your payment records and your trial record (section 8). Nothing changes on Hyperliquid: your positions and stops stay, and the trading key stays approved there until it expires or you revoke it. Alerts already sent stay in your Telegram chat.
- **Other rights.** Depending on where you live, you may have other rights, such as objecting to a use of your data, or complaining to your data protection authority. Write to us and we'll answer within 7 days.

Before we act on a request sent by email, we may ask you to sign a message with your wallet, to prove that the address is yours.

## 10. Security

- **Trading keys and webhook secrets** are encrypted (AES-256-GCM) with a master key kept as a secret on Cloudflare. Each encrypted key is tied to your address, so it can't be used for another account. A trading key is decrypted only to sign an order. It is never sent to your browser, never written to our logs and never shown to anyone, you included.
- **Sign-in** uses a signature from your wallet. There is no password. A session lasts 7 days on the website; an AI agent's session lasts until your plan or free trial ends, 6 months at most. **Sign out of all sessions** (Profile) ends them all.
- **Telegram** is linked with a one-time code. Each bot command is checked against the chat linked to your account. Messages from Telegram to our service are checked with a secret.
- **Internet addresses and Telegram chat IDs** in our anti-abuse records are kept only as a fingerprint made with a secret key.
- **Our admin tools** are protected by Cloudflare Access and a separate secret.

No system is perfectly secure. If a security incident affects you, we'll tell you through your alert channel. If your trading key may be exposed, we'll ask you to revoke it on Hyperliquid.

## 11. Cookies and Browser Storage

The site keeps a few items in your browser's local storage:

| Item | What it holds |
|---|---|
| `wt_session` | Your session: a signed token, your address and its expiry. Erased when you sign out or when it expires (7 days). |
| `wt_theme` | Light or dark mode |
| `wt_lang` | Your language |
| `wt_renew_seen` | That you've already seen the current renewal reminder |
| `wt_report_v3` | The level and balance you chose in the monthly report's calculator |

We set one technical cookie, `wt_d1`, for 1 hour. It holds no personal data: it lets our database show you your latest changes. We use no analytics and no advertising trackers.

## 12. Children

WakeTrades is only for people who are at least 18, or the age of majority where they live if it is higher ([Terms, section 3](https://waketrades.com/docs/legal/terms.md#eligibility)). We don't knowingly collect data about anyone younger.

## 13. Changes to This Policy

We may update this policy. Before an important change, we'll tell you through your alert channel and on the site. The version and date are shown at the top of this page.

## 14. Contact

[support@waketrades.com](mailto:support@waketrades.com)