Privacy Policy

Last updated: 11 November 2026

Nen Trade (nentrade.xyz) is a web app for crypto market charts, price alerts, Bybit trading, and a view of the exchange accounts you connect. This policy explains what data the app keeps and why. Questions: [email protected].

What we collect

Sign-in. When you sign in with Google, Google sends us your account ID, email address, name and profile picture. With Apple, we receive your account ID, email address and, on first sign-in, your name; we never see your Google or Apple password. With email and password, we store your email and a one-way hash (scrypt) of your password, never the password itself. Invitations are kept by email address.
Two-step verification. If you turn it on, the secret of your authenticator app, encrypted at rest, and when you last entered a code.
What you create in the app. Favorite pairs, price alerts and their history, testnet and live orders placed through Nen Trade, fills and positions, chart layouts, drawings and preferences.
Exchange connections. If you connect an exchange, its API key and secret, and the balances, positions and recent fills (up to 1,000) we sync from that account. The key and secret are encrypted at rest and never written to logs; the secret is never shown back, and the key is shown only masked. Keys that can withdraw or transfer funds are rejected; a key with Trade permission is used only to place and cancel the orders you confirm and to set their leverage.
Cookies. nt_session keeps you signed in; it is strictly necessary. Google Analytics cookies (_ga, _ga_…) are set only if you allow them (see Analytics below). There are no advertising cookies. Your browser's local storage keeps a few display preferences (for example chart settings, notification and analytics choices) on your device only.
Server logs. The server does not log the pages you visit. Error entries can include the IP address and path of the failed request; logs are deleted after 30 days.

How we use it

Only to run the features you use: signing you in, showing your markets, portfolio and orders, checking your alerts and remembering your settings. We do not sell your data, do not use it for advertising and do not share it except as described below.

Services involved

Google and Apple authenticate you when you choose them. Your browser loads their sign-in scripts from accounts.google.com and appleid.cdn-apple.com, and your Google profile picture from Google. Their own privacy policies apply.
Exchange (Bybit). Our server requests public market data. With an API key you connected, it requests your balances, positions and fills from that exchange, and places the testnet and live orders you confirm.
Coin icons are loaded by your browser from assets.coincap.io and cdn.jsdelivr.net. Like any website, these hosts see your IP address and browser type.
Hosting. The app and its database run on a virtual private server we rent.

Analytics

If you choose Allow in the cookie prompt, your browser loads Google Analytics 4 from googletagmanager.com and sends Google which app pages you open (for example /markets or a pair such as /pair/bybit:perp:BTC-USDT) and how you engage with them (time on page, scrolling, links to other sites), together with a random identifier stored in the _ga cookie, your browser, device, screen size and approximate location derived from your IP address. We never send your name, email, user id, orders, balances, API keys or the links you were invited with, and Google Analytics is set to redact email addresses. Google signals and ad personalization are off. Event-level data is kept for 2 months; Google keeps aggregated reports. If you choose Decline, nothing is loaded from Google Analytics. You can change your choice at any time in Settings → Analytics cookies; turning it off deletes the Analytics cookies in that browser. Google's own privacy policy applies to the data it receives.

Google user data

Nen Trade uses Google sign-in with the basic openid, email and profile scopes only, to create and recognise your account. Nen Trade's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never shared with exchanges or any other third party.

Keeping and deleting your data

Your data is kept while your account exists.
Delete an exchange connection at any time in Settings → Exchanges; the stored key is deleted with it. Revoke the key on the exchange as well.
To delete your account and all its data, email us from the address you sign in with. We delete it within 30 days. Deleted data can remain in server backups for up to 8 days, until they roll over.

Security

All traffic uses HTTPS, exchange secrets are encrypted, and each account can only reach its own data. No system is perfectly secure, so give a key only the permissions you need: read-only, unless you place testnet or live orders from Nen Trade.

Children

Nen Trade is not meant for anyone under 18.

Changes

If this policy changes, we update this page and the date at the top.