Privacy Policy

Last updated: 19 September 2026

1. Introduction

HookTrader (“the Service”) is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data. By using the Service you consent to the practices described here.

2. Data We Collect

Account information: email address, display name, and hashed password created during registration.

Exchange credentials: Binance API keys and secrets that you provide to connect your exchange account. These are encrypted at rest using Fernet symmetric encryption and are only decrypted in an isolated worker process during trade execution.

Trading data: webhook configurations, strategy settings, trade history, order details, and position snapshots generated through your use of the Service.

Usage data: error logs, performance metrics, and session information. Error and reliability diagnostics are collected via Sentry; product analytics — which pages are viewed and which features are used — via PostHog.

3. How We Use Your Data

We use collected data to:

Execute trades on your behalf based on your configured strategies and webhook alerts
Display your trading history, positions, and performance metrics in the dashboard
Monitor and improve the reliability and performance of the Service
Communicate with you about your account, service updates, or security issues

4. Credential Security

Your exchange API keys are treated as highly sensitive data. They are encrypted immediately upon submission using Fernet symmetric encryption and stored only in encrypted form in our database. Decryption occurs exclusively within the ARQ worker process at the moment of trade execution — the API server never handles plaintext credentials.

We strongly recommend creating API keys with restricted permissions (futures trading only, no withdrawal access) and IP-whitelisting where supported by your exchange.

5. Data Sharing

We do not sell, rent, or share your personal data or trading information with third parties for marketing purposes. Data may be shared with: Sentry (error monitoring and diagnostics), PostHog (product analytics, hosted in the EU), and infrastructure providers necessary to operate the Service (hosting, database). We may also disclose data if required by law or to protect the rights and safety of our users.

6. Data Retention

Account data and trade history are retained for as long as your account is active. You may delete your trade history through the dashboard settings at any time. Active trade state in Redis is retained during the trade lifecycle and for 24 hours after a trade closes. Upon account deletion, all associated data — including encrypted credentials, trade history, and strategy configurations — is permanently removed.

7. Your Rights

You have the right to:

Download a portable copy of your data — your profile, strategies, exchange account details, trade history and the alert payloads you sent us — from your dashboard at any time
Request a complete copy of all personal data we hold about you, including data we generated ourselves such as notification and diagnostic logs, by contacting us. We will respond within one month
Correct inaccurate data by updating your account settings
Delete your trade history or your entire account at any time
Revoke exchange API access by deleting your stored credentials from the dashboard

8. Cookies, Analytics and Your Choice

8.1 Authentication. The dashboard at app.hooktrader.app sets a single authentication cookie (ht_token) containing a JSON Web Token for session management. It is strictly necessary to provide the Service to a signed-in user and does not require consent.

8.2 Analytics on our public sites. We use PostHog (hosted in the EU) to measure how hooktrader.app and help.hooktrader.app are used. Whether an analytics cookie is set depends on a choice we ask you to make on your first visit, and which you can change at any time (section 8.4):

If you accept, one first-party analytics cookie (ph_…_posthog) is set on the hooktrader.app domain, including its subdomains, for up to 12 months. It holds a random visitor identifier, a session identifier and the page that first brought you here, so that a return visit and a later sign-up can be recognised as yours. It is not shared with any other site.
If you decline, or have not yet chosen, no analytics cookie is set and nothing is written to your device. Page views are still recorded, but without any stored identifier: PostHog derives a temporary identifier on its own servers from your IP address, browser and the current date. It changes every day, so visits on different days cannot be linked to one another or to a later sign-up.

In both cases autocapture and session recording are switched off, so no page contents, keystrokes or form entries are recorded. We do not use third-party tracking cookies. No advertising or behavioural tracking is performed.

8.3 Your choice is itself stored. To remember whether you accepted or declined, one small preference cookie (ht_analytics_consent) is set on the hooktrader.app domain for 12 months. It contains only that choice. It is strictly necessary to honour your decision and is set whichever way you choose.

8.4 Changing your choice. You can change your choice at any time using the control below. Declining after having accepted deletes the analytics cookie from your browser immediately. You can also delete either cookie in your browser’s settings, in which case you will be asked again on your next visit.

Your current choice: Reading your stored choice…

8.5 The dashboard. Use of the dashboard at app.hooktrader.app is governed by the Terms of Service you accept at registration, and product analytics there — tied to your account, as described in section 2 — is provided on that basis rather than on the choice above. The analytics cookie is therefore set when you sign in, whichever choice you made here; your account identifier is removed from it when you sign out.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Material changes will be communicated via the platform dashboard or email. See our Terms of Service for the full agreement governing your use of HookTrader.

10. Contact

If you have questions about this Privacy Policy or how your data is handled, contact us through the support channels available in the platform dashboard.