Privacy policy

What we store

• Your public wallet address, when you connect a wallet and use features that need it.
• Your copy settings: which wallet you copy, amount, safety stop, leverage and filters.
• The trade-only agent key for each copy, encrypted (AES-GCM) before it is saved and never shown again.
• A log of copied fills (coin, size, price, timing, fees) so you can see your results.
• Saved whales and alert settings you choose to sync to your wallet.

What stays on your device

Labels, display settings (Simple or Pro), chart settings and cached market data are kept in your browser's local storage. Clearing your browser data removes them.

Public blockchain data

Trader profiles, positions and fills shown on Orbafin come from Hyperliquid's public data. Wallet addresses on a public blockchain are visible to everyone; Orbafin does not try to link them to real identities.

Services we use

Hosting and edge delivery (Cloudflare via Lovable), our database (Supabase), Hyperliquid's public API, and WalletConnect when you connect a mobile wallet. Basic, privacy-friendly usage statistics are collected by our hosting provider to keep the site working. We do not sell your data.

How long we keep it

Copy settings and keys are kept while a copy exists, including when it is paused. Pressing Stop in My Copy Trades deletes its saved settings and encrypted key. Fill logs are kept for your history unless you ask us to delete them.

Your rights

If you are in the EU or UK you can ask to access, correct or delete data linked to your wallet address. Email support@orbafin.com and sign a message with your wallet so we can confirm it is yours.