Privacy Policy
Last updated
This policy explains what personal data Whalidate ("we", "us") collects through the website whalidate.com and the app at app.whalidate.com, what we use it for and what you can do about it. It is written to meet the standard of the EU General Data Protection Regulation (GDPR), which we apply to every user wherever they live.
We are responsible for your data as its controller. Write to support@whalidate.com with any question or request.
The website
The website (the landing page and the blog) has no forms or accounts and sets no cookies of its own. It has no analytics or advertising trackers; if that changes, this policy will say so first.
When you visit, our server records each request (your IP address, your browser and the page asked for) to deliver and protect the site. Your browser also fetches the site's typefaces from Google Fonts, which receives your IP address. Buttons that open the app add a tag naming the button you pressed (for example utm_medium=hero); the tag carries nothing about you.
What the app collects
Account. Your email address and password, whether your email is verified, two-factor authentication settings, your plan and the date you joined.
Security. Your sessions: when each started and was last used, the country derived from its IP address and the type of browser. Our server also keeps short-lived logs of requests, with IP addresses, to protect the Service.
Strategies and trading. The whales you follow, your strategies and their rules, paper and live positions, the trades placed for you and the events that explain them, alerts and exports you request.
Wallet. The address of the trading wallet we create for you, your deposits and withdrawals, the withdrawal addresses you add and the labels you give them.
Billing. Your invoices, the plan and amount paid, and the payment transaction on the blockchain, including the address it came from.
Messages. Emails you send us and the replies. If you link Telegram for notifications, your Telegram chat identifier and your notification settings.
We do not ask for identity documents today. If we ever need to verify identity, for example to meet sanctions or anti-money-laundering rules, we will say what we collect and why at that point.
Public data about Polymarket wallets
To score whales, we analyse trading data that Polymarket wallets publish on the blockchain, and the app shows wallet addresses and their results. These addresses are pseudonymous, but they can be personal data. We rely on our legitimate interest in analysing public market data. If a wallet is yours and you object, write to us and we will stop showing it.
Your own trading wallet trades on Polymarket and Polygon too, so its transactions are public on the blockchain, like every Polygon wallet. We do not publish the link between your wallet and your account.
Why we use your data, and on what basis
| Purpose | Legal basis |
|---|---|
| Running your account, strategies, wallet, deposits and withdrawals | Performing our contract with you |
| Billing and keeping payment records | Contract, and legal obligations on record keeping |
| Security, fraud prevention, sanctions checks | Legitimate interests, and legal obligations where they apply |
| Service emails and notifications you set up (security, deposits, withdrawals, trades, billing) | Performing our contract with you |
| Answering your messages | Legitimate interests |
| Improving the Service from aggregated, non-identifying statistics | Legitimate interests |
| News or marketing emails, if we send any | Your consent, which you can withdraw at any time |
We do not sell your personal data, and we do not use it for advertising profiles. We make no decisions with legal or similarly significant effects about you by automated means alone; your strategies trade automatically, but on rules you set.
Who processes data for us
| Provider | What they do | Where |
|---|---|---|
| Contabo GmbH | Hosts our servers, the database and the website | European Union |
| Brevo (Sendinblue SAS) | Sends our emails | France, EU |
| Cloudflare, Inc. | Runs our domain's DNS and routes email sent to our addresses | Global network |
| Google LLC | Keeps our support mailbox (Gmail); serves the site's fonts | United States and global |
| Telegram | Delivers notifications, only if you link it | Global |
Polymarket and the Polygon network are not our processors. Trades placed for you are executed on Polymarket and recorded on the public blockchain under their own terms.
Some of these providers may process data outside the European Economic Area. Where they do, the transfer relies on safeguards such as the European Commission's standard contractual clauses or an adequacy decision.
How long we keep it
- Account, strategy and wallet data: while your account is open.
- After you close your account: we delete or anonymise it within 90 days, except records we must keep for legal, accounting, security or dispute purposes, which we keep for up to 5 years.
- Server request logs: a short period, normally no more than 90 days.
- Blockchain transactions are permanent and public; no one can delete them, including us.
Your rights
You can ask us to:
- give you a copy of your personal data, or a copy in a portable format (the app also exports your trading history);
- correct data that is wrong;
- delete your data, within the limits above;
- restrict or object to how we use it, including use based on legitimate interests;
- withdraw any consent you gave.
Write to support@whalidate.com from the email address on your account. We answer within one month. You also have the right to complain to the data protection authority where you live or work.
If you live in a US state with a privacy law, you have similar rights, and we do not sell or share personal data for targeted advertising.
Cookies and local storage
The website sets no cookies. The app uses only cookies that are strictly needed to sign you in and keep your session secure, and stores a few settings in your browser, such as the theme you chose. We use no advertising or analytics cookies, so there is nothing to consent to.
Security
We protect data with access controls, encrypted connections and limits on who can reach production systems. Withdrawals need confirmation from your email, and two-factor authentication is available for your account. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
Children
The Service is for adults. We do not knowingly collect data from anyone under 18.
Changes to this policy
We update this page when what we collect or how we use it changes, and change the date at the top. For changes that matter, we will also tell users of the app by email or in the app.