Privacy Policy
Last updated: 05.07.2026 — Crypto Predictor is currently in beta.
1. Who we are
Crypto Predictor ("we", "us", "the Service") is operated by Boris Stiner, Thun, Switzerland (contact: info@crypto-predictor.borisstiner.com). We are the data controller for the personal data described in this policy under the Swiss Federal Act on Data Protection (FADP/nDSG), the EU General Data Protection Regulation (GDPR), and applicable US state privacy laws (e.g. CCPA/CPRA).
2. What the Service is — and what it is not
Crypto Predictor is a software tool that runs rule-based cryptocurrency trading strategies, primarily as paper trading (simulation with virtual money — no real funds are involved).
The Service is not:
- an exchange, broker, bank, or custodian — we never hold your money or crypto assets;
- investment, financial, tax, or legal advice — all information is provided for informational and educational purposes only;
- a guarantee of any trading result — past performance (simulated or real) does not predict future results.
If you choose to connect the optional real-money feature, orders are executed exclusively by third-party exchanges (e.g. Kraken Futures) through API keys you create in your own exchange account. Your contract for order execution, custody, and settlement is with that exchange, not with us. We have no influence over the exchange's execution, availability, fees, or decisions, and we accept no responsibility or liability for them.
3. Personal data we process
Account data: name, email address, password (stored only as a cryptographic hash).
Optional data you may add: a separate notification email address, a Discord webhook URL (stored encrypted), exchange API keys and secrets (stored encrypted; used solely to act on your instructions).
Usage data: your trading settings, simulated (and, if enabled, real) trade records, plan/subscription status.
Technical data: server logs (IP address, timestamp, requested URL, user agent) kept by our hosting provider for security and error diagnosis.
We do not process special categories of personal data and we do not sell or share personal data for advertising. We do no profiling and no automated decision-making with legal effect on you.
4. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing your account and the Service | Art. 6(1)(b) — contract |
| Email verification, security notices | Art. 6(1)(b), (f) |
| Trade/summary notifications you enabled | Art. 6(1)(a) — consent, revocable anytime in your profile |
| Plan/expiry reminders and service emails | Art. 6(1)(b), (f) |
| Payment processing (once launched, via Stripe) | Art. 6(1)(b), (c) |
| Log files, abuse prevention | Art. 6(1)(f) — legitimate interest |
5. Cookies
We use only strictly necessary cookies: a session cookie and a security (CSRF) token that make login and the app work. They are deleted or expire automatically. We use no analytics, tracking, advertising, or third-party cookies. Because only technically required cookies are used, no cookie consent banner is legally required.
6. Recipients and processors
- Hosting & email delivery: cyon GmbH, Basel, Switzerland (servers located in Switzerland).
- Payments (when launched): Stripe Payments Europe Ltd. / Stripe Inc. — we never see or store your full card details.
- Exchanges (only if you connect them): e.g. Payward Trading Ltd. (Kraken Futures) — governed by your own agreement with them.
- Discord (only if you configure a webhook): messages are sent to the Discord channel you chose.
We do not transfer your data to other third parties. Where a recipient is outside Switzerland/EEA, transfers rely on adequacy decisions or standard contractual clauses.
7. Retention
Account data is kept while your account exists. If you delete your account (or ask us to), personal data is deleted or anonymized without undue delay, unless a legal retention duty applies. Server logs are rotated automatically.
8. Your rights
Under the GDPR, the Swiss FADP, and US state laws (as applicable) you have the right to access, correct, delete, or receive a copy of your personal data, to restrict or object to processing, to withdraw consent at any time, and to non-discrimination for exercising these rights. California residents: we do not "sell" or "share" personal information as defined by the CCPA/CPRA.
To exercise any right, email info@crypto-predictor.borisstiner.com. You may also complain to a supervisory authority — in Switzerland the FDPIC, in the EU your local data protection authority.
9. Security
Passwords are hashed; API keys, secrets, and webhook URLs are encrypted at rest; all traffic is TLS-encrypted. No method of transmission or storage is 100% secure — we cannot guarantee absolute security.
10. Minors
The Service is intended for persons 18 years or older. Do not use it if you are underage; we do not knowingly process children's data.
11. Changes
We may update this policy (for example when payments launch). The current version is always available on this page; material changes will be announced by email or in the app.