retracerSign in

Privacy Policy

Last updated 28 October 2026

This policy explains what personal data Retracer ("we", "us") processes when you use retracer.fun, why, and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Who is responsible

The controller is the operator named in the Impressum. For anything about your data, email fred.ilik.fred05@gmail.com.

2. What we collect

Your account

  • Email address and name. With Google sign-in, Google also shares your profile picture.
  • Your password, stored only as a salted hash. We can't see it.
  • Settings such as your time zone and P&L method.

Wallets and on-chain data

  • The public wallet addresses you add, and whether you verified them. Verifying means signing a message in your wallet. We check the signature and keep only the result. We never ask for, see or store private keys or seed phrases, and we never ask you to sign a transaction.
  • The public blockchain history of those wallets: swaps, balances and fees. This information is already public on the blockchain; we collect and organize it into trades for you.

Content you create

  • Journal entries: notes, grades, setups, call sources, emotions, mistakes, tags, daily plans, post-session notes and weekly reflections.
  • Images you upload: journal photos, profile picture and banner.
  • Conversations with the AI coach.
  • Your public profile (handle, display name, bio, links, pinned trades), and posts, comments, likes and follows in Community.

Technical data

  • When you sign in we store a session along with your IP address and browser user agent, to keep you signed in and to protect your account.
  • Our hosting provider keeps short-lived server logs, which can include IP addresses, for operating and securing the service.

3. Why we use it, and the legal basis

  • To provide Retracer: your account, importing your wallets, building your journal, analytics, charts and the AI coach (Art. 6(1)(b) GDPR, performance of our agreement with you).
  • To keep the service secure and fair: sessions, rate limits, spam limits and abuse prevention (Art. 6(1)(f) GDPR, our legitimate interest in a safe service).
  • To publish what you choose to make public: your profile, posts and shared trades, only after you switch them on (Art. 6(1)(b) GDPR). You can switch your profile back to private at any time.

We don't sell your data, show ads, or use analytics or tracking tools.

4. What's public

Your account is private by default. Pasting a wallet address only creates private, read-only analysis. If you turn on a public profile, anyone can see your handle, display name, bio, links, profile picture, banner, stats and pinned trades from verified wallets, and your Community posts. You decide whether SOL amounts and wallet addresses are shown. Your email is never shown.

5. Service providers

We use these providers to run Retracer. They process data only on our behalf or as described below:

  • Railway (Railway Corporation, USA): hosting and our database. All the data listed above is stored here.
  • Helius (USA): reads Solana blockchain data. It receives the public wallet and token addresses we look up.
  • Anthropic (Anthropic PBC, USA): runs the AI coach and reads the photos you import. When you use these features it receives your messages, the trade and journal data needed to answer, and the photos you submit. Anthropic doesn't use this data to train its models.
  • Google (Google Ireland Ltd. / Google LLC): only if you choose "Continue with Google", to sign you in.
  • Price data (Coinbase, GeckoTerminal): we fetch public market prices. They receive token addresses and time ranges, not your personal data.

Some of these providers are in the USA. Transfers rely on an adequacy decision of the European Commission (such as the EU–U.S. Data Privacy Framework, where the provider is certified) or on the European Commission's standard contractual clauses.

6. Cookies and local storage

We use one cookie, which keeps you signed in, and your browser's local storage to remember day or night mode. Both are strictly necessary for features you ask for, so no consent banner is required (§ 25(2) TDDDG). We use no tracking or advertising cookies.

7. How long we keep it

We keep your data while your account exists. You can delete coach conversations, posts and comments yourself at any time. If you ask us to delete your account, we delete your personal data within 30 days, except where the law requires us to keep it. Backups and server logs are overwritten on a rolling basis. Public blockchain data can't be deleted by anyone, but we remove our copy of it together with your account.

8. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you (Art. 15) and receive a copy in a portable format (Art. 20);
  • have it corrected (Art. 16) or deleted (Art. 17), or its processing restricted (Art. 18);
  • object to processing based on our legitimate interests (Art. 21);
  • withdraw any consent you gave, with effect for the future (Art. 7(3)).

To use any of these rights, email fred.ilik.fred05@gmail.com. You can also complain to a data protection supervisory authority, for example the one in the German federal state or EU country where you live (Art. 77).

9. Security

Traffic is encrypted with HTTPS, passwords are hashed, and access to the database is restricted. No system is perfectly secure, so use a strong, unique password.

10. Age

Retracer is for adults (18+). We don't knowingly collect data from anyone younger.

11. Changes

If we change this policy, we'll update the date at the top, and tell you in the app if the change is significant.