Privacy Policy
What personal data ArbTide collects, why, and how you can control it.
Updated
ArbTide collects only the data needed to run your account and the service.
What we collect
| Data | Why |
|---|---|
| Email, name and password hash | To create and secure your account |
| Session data (IP address, browser) | To keep you signed in and prevent abuse |
| Watchlist and settings | To provide account features |
| Aggregated, anonymous usage statistics | To improve the site |
| Exchange API keys you connect (Ultra), encrypted | To place the orders you request |
| Orders placed through ArbTide and your acceptance of the trading risk disclosure | To show your trade history and keep a record of consent |
Exchange API keys are only collected if you choose to connect them for trading. They are encrypted at rest with a key held only by our order service, used only for the orders and balance checks you request, and deleted when you remove them. We never ask for seed phrases, and we refuse exchange keys that we can see are allowed to withdraw funds.
Cookies
We use a session cookie to keep you signed in. If you allow it in the cookie banner, we also use Google Analytics cookies to measure which pages are visited and which features are used, with IP addresses anonymised. We never use advertising cookies, and analytics stays off until you allow it. You can change your choice at any time with Cookie settings in the footer.
Sharing
We do not sell personal data. We share data only with service providers that help run ArbTide (hosting, email delivery, and payments through NOWPayments for crypto and Paddle for cards), with the sign-in providers you choose (Google, Apple, Facebook, GitHub, Discord or X), and when required by law. Payment providers process your payment details under their own privacy policies; ArbTide never sees full card numbers or wallet keys.
Your rights
You can view and change your account data on the account page and ask us to delete your account at any time.
Retention
Account data is kept while your account is active. Session records expire automatically.