Privacy Policy

PerpLedger (“we”, “us”) is a trading journal for perpetual-futures traders, operated from the United Kingdom. For anything in this policy, contact support@perpledger.com. We are the data controller for the personal data described here.

Wallet addresses. You sign in by signing a message with your wallet. We store the address (a public identifier) and use it as your account ID. We never receive or store private keys or seed phrases, and the connection is strictly read-only.

Trading data. When you sync, we fetch your fills, positions, fees and funding from the public APIs of the exchanges you use (Hyperliquid, Lighter, dYdX). This data is already publicly associated with your wallet address on those networks; we organise and store a copy so your journal works.

Content you create. Trade reviews, lessons, notes, theses, tags, checklists, weekly reviews and any screenshots you upload.

Settings and integrations. Your preferences, and — only if you enable them — a Telegram chat identifier for notifications, and API keys for AI providers you choose to bring. Provider API keys are encrypted at rest and never displayed back in full.

Billing data. Card payments are processed by Stripe; we store subscription identifiers, never card numbers. USDC payments are transactions on a public blockchain; we store the transaction reference used to activate your plan.

Technical data. Standard server logs, and — where enabled — aggregate usage analytics (Google Analytics) on the marketing site and app.

To run the product: syncing and storing your trades, computing analytics, sending the notifications you switch on, processing payments, and keeping the service secure. Our lawful bases under UK GDPR are performance of a contract (running your journal), legitimate interests (security, service improvement), and consent (analytics cookies, Telegram notifications, AI features you invoke).

AI features. When you use the coach or AI-assisted review features, relevant trade and journal data is sent to the AI provider that powers your session — Anthropic by default, or the provider whose key you configured — solely to generate your response. We don’t use your data to train models.

We never sell personal data and we don’t run ads. We share data only with the processors that operate the service: Vercel (web hosting), Railway (application and database hosting), Cloudflare (DNS and file storage), Stripe (card payments), Telegram (if you link it), your chosen AI provider (when you use AI features), and Google Analytics (aggregate usage, where enabled). Some processors operate in the United States; transfers rely on standard contractual safeguards.

We keep your data while your account exists. Deleting your account (Settings → Danger Zone) permanently removes your trades, reviews, settings, and uploaded files; residual copies in encrypted backups are purged within 30 days. You can export your full journal as JSON at any time from Settings.

The app uses strictly necessary cookies for authentication (short-lived access and refresh tokens) and interface preferences (theme, sidebar state). Where analytics is enabled, Google Analytics sets its own cookies; these are not required for the product to work.

Traffic is encrypted in transit (TLS). Provider API keys are encrypted at rest. Authentication uses signed, httpOnly cookies. No system is perfectly secure, and you should treat the wallet you connect as a public identifier.

Under UK GDPR you can request access to, correction of, or deletion of your personal data, ask for a portable copy, and object to or restrict certain processing. Most of these you can do yourself in the app (export, delete); for anything else, email support@perpledger.com. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk).

PerpLedger is not intended for anyone under 18.

If we materially change this policy we’ll update the date above and, for significant changes, notify you in the app. Continued use after a change means you accept the updated policy.