Privacy Policy
This policy explains what personal data ArtemonTools (artemontools.com, "the Service", "we") collects, why, how long we keep it and what rights you have. The Service is operated by the ArtemonTools team ("the operator"), which is the data controller. Contact: [email protected].
1. Short version
- You can use the scanner, charts and guide without an account. We then store nothing about you on our servers except what is technically needed to deliver pages and protect the site (see section 3.3).
- If you create an account, we store your email, a hash of your password (never the password itself) and the settings you choose to save.
- We use no analytics, no advertising and no tracking. We do not sell or rent your data.
- You can delete your account and its data at any time in your profile.
2. Who processes your data
The controller is the operator named above. We use the following service providers (processors) only to run the Service:
- Hosting provider — runs our server, which is located in the EU.
- Content delivery and security provider — delivers the site and protects it against attacks. All traffic to the site passes through it, and it processes your IP address and request data for this purpose.
- Email provider — sends service emails (verification codes, password reset links).
- Google — only if you choose "Continue with Google" to sign in.
Market data (prices, funding rates, order books) comes from public APIs of crypto exchanges. We do not send your account data (email, name, settings) to exchanges.
Live order books. When you open a live order book, your browser connects directly to the public market-data servers of the selected exchange. The exchange receives your IP address and browser information (User-Agent, the address of our site) as for any website visit; it does not receive your account data. Exchanges are independent controllers under their own privacy policies and may be located outside the EEA. Legal basis: legitimate interests in showing the order book you opened (GDPR art. 6(1)(f)).
3. What we collect and why
3.1 Account data (only if you register)
- Email address — to identify your account, sign you in and send you service emails (codes, password reset). Legal basis: performance of a contract (GDPR art. 6(1)(b)).
- Password — stored only as a salted scrypt hash. We cannot see or recover your password.
- Display name (optional) — shown in your profile. If you sign in with Google, we receive your email and the name on your Google account.
- Interface language, account creation date and date of last visit — to show the site in your language and to see basic usage numbers (how many accounts are active).
- Saved settings — table filters, columns, selected exchanges, filter presets, your watchlist of pairs and chart layouts, so they follow you across devices.
- Consent record — the date and the version of these documents you accepted when registering.
3.2 Sign-in and security
- Session — after sign-in we set a session cookie; on the server we store only a hash of its token.
- Active sessions — for each signed-in session we store, encrypted, the IP address, browser and device (User-Agent), the approximate location derived from the IP by our content delivery provider (country, region, city) and the time of last activity. You see this list in Profile → Sessions and can end any session there. Legal basis: legitimate interests in account security — so you can spot sign-ins that are not yours (GDPR art. 6(1)(f)).
- Country of your last visit — stored in your account (derived from the IP by our content delivery provider) to understand where our users are. Legal basis: legitimate interests in basic service statistics (GDPR art. 6(1)(f)).
- Verification codes and password reset links — stored as hashes and valid for 15 minutes.
3.3 Technical data
- IP address — processed in server memory to limit request rates and block abuse; it is not written to our access logs (they are switched off). It is stored only with your active sessions (see 3.2). Requests to the administrator area are logged with the IP address for security. Legal basis: legitimate interests in keeping the Service secure (GDPR art. 6(1)(f)).
- Data stored in your browser — your preferences (theme, language, filters, columns, cached data) are kept in your browser's local storage, on your device. See the Cookie Policy.
We do not collect payment data, identity documents, exchange API keys or trading account credentials.
4. How long we keep data
- Account data and saved settings — until you delete your account.
- Session and its data (IP address, device, approximate location) — up to 30 days, or until you sign out or end the session.
- Country of your last visit — until you delete your account.
- Verification codes and reset links — 15 minutes.
- Database backups — the last 20 backups, overwritten in rotation; deleted account data disappears from backups as they rotate out.
- Administrator access log — capped in size and rotated.
5. Your rights
Your data is yours. At any time you can:
- see what data we have about you;
- correct it — your name and password can be changed in your profile;
- delete it — Profile → Delete account;
- get a copy of it;
- ask us to stop or limit using it.
Just write to [email protected] — we will gladly help and reply as soon as we can, within 30 days at the latest. If something is not right, please tell us first and we will sort it out together. You also always have the right to contact the data protection authority of your country.
6. International transfers
Our server is in the EU. Some of our service providers may process data outside the EU; they do so under the EU Standard Contractual Clauses or equivalent safeguards.
7. Security
The site works only over HTTPS. Passwords are hashed with scrypt, session tokens and codes are stored as hashes, access to the server is restricted. No system is perfectly secure; if a breach affecting your data occurs, we will notify you and the authorities as required by law.
8. Children
The Service is intended for adults (18+). We do not knowingly collect data of children. If you believe a child has created an account, contact us and we will delete it.
9. Third-party links
The site links to crypto exchanges (some of them are referral links), X (Twitter) and Telegram. These sites have their own privacy policies and may set their own cookies once you visit them; we are not responsible for them.
10. Changes
We will update this page if our data practices change and change the "last updated" date above. Significant changes will be announced on the site.