Privacy policy

Basisproof works on public data. The addresses you check, the trades we recompute, the ledger rows we classify — all of it is already public on-chain or published by the venue. We do not need, and do not collect, identity documents, keys or account credentials.

The personal data we hold is deliberately minimal: an email address per order, the payment transaction hash you submit, and product-usage events in our own database. No ad trackers, no analytics vendors, no cookies beyond a theme preference stored in your browser.

Orders: order code, the Hyperliquid addresses covered, window, basis method, tier and fill count, email, payment transaction hash and chain, timestamps, and the computed report summary.

Recomputed records: cached fill and ledger data used to produce checks and reports. This is public data; caching it is what makes repeat verification fast.

Usage events: a minimal funnel record (check ran, order created, report viewed, export downloaded) with the order code — used to operate the service, not to profile you.

Emails: delivery logs for order codes, payment confirmations and ready notices sent through our mail provider.

Exchange CSVs never leave your browser. Kraken and Coinbase exports are parsed locally; only the derived basis seeds — token, quantity, cost basis and the matched arrival — are uploaded for your report. The raw file contents, your other exchange activity and the trades themselves never reach our server.

No cookies for tracking. The only browser storage used is a light/dark theme preference (localStorage).

No keys, no signatures. Everything we compute comes from data that is already public — we never ask for wallet access.

Report pages are never indexed or listed. Access is a bearer URL: whoever holds the order-code link can view the report. Keep it private; we can rotate delivery to your order email if you lose control of a link.

We do not sell or share order data with third parties. Payment verification reads public chain state on Arbitrum, Base and Ethereum; email delivery goes through our SMTP provider; the infrastructure runs on a cloud VM in the US.

Cached public market data may be retained indefinitely — it is not personal data. Order records (including email) are kept while the report is available so the link keeps working and refreshes remain possible.

To delete an order's email or an entire order record, email [email protected] from the order's email address with your code. Note that deleting an order removes report access — the code stops resolving.

We may update this policy; the current version lives at /privacy. Questions: [email protected].