What we store, and what we refuse to
A complete list, because a short one that hides things is worse than none.
What we store
As little as the product allows, and all of it is listed here.
| Data | Why | How long |
|---|---|---|
| Paper positions, orders, fills, funding and the equity curve | They are the product | Until you reset or close the account, or the alpha is wiped |
| The event chain: every action on the account with a hash | So the history cannot be quietly rewritten, by us or anyone | Retained; it is the audit record |
| Email address and a password hash, if you chose email | Sign-in, verification codes, and alerts you asked for | Until you close the account |
| A wallet address or a hash of your account key, if you chose those | The credential is the account; we keep only what proves it | Until you close the account |
| X user id, handle and display name, if you linked X | To show it on the account and the leaderboard | Until you unlink or close |
| IP address on security-relevant events and in rate limiters | Abuse control; written to the chain on sign-in and terms acceptance | Rate-limit buckets expire within an hour; chain records are retained |
| Browser storage: your session token, theme, layout, whether you saw the intro | So the terminal opens the way you left it | In your browser, until you clear it |
What we do not do
- No analytics, no trackers, no advertising pixels, no fingerprinting. The pages load fonts from Google Fonts and nothing else from anyone else.
- No selling, renting or sharing of anything above.
- No identity checks, no documents, no phone numbers.
- No private keys, seed phrases or signing authority. A wallet sign-in is one signature of a message that says what it is for.
Who else touches it
Email is delivered by Resend, which sees the address and the message. The server is a single machine in Amsterdam at DigitalOcean. Prices come from the public endpoints of Binance, OKX, Coinbase and the reference providers listed on the status page; they see our server's requests, not you.
Your choices
Export everything the chain holds about the account from the account page, as a file with the hashes. Turn alerts off in the same place. Close the account and we delete the sign-in identity and wipe the book; the chain records remain, pseudonymous, because removing them would break the hashes of everyone after you.
Contact
privacy@openfield.markets.