Privacy Policy

CheckMyProfit (the "Service", "we") is a crypto trading journal and analytics tool at checkmyprofit.xyz. The operator is a private individual; personal data is processed in accordance with the GDPR (jurisdiction: Czech Republic / EU). This policy explains what data we collect and how we handle it.

1. Data we process

• Email and password. The password is stored only as a cryptographic hash (bcrypt) — we cannot see or recover it.
• Exchange API keys. Read-only. Stored encrypted (AES-256). Withdrawing or transferring funds with these keys is technically impossible.
• Trade history. Synced from the exchanges you connect: symbol, side, size, entry/exit prices, PnL, fees, time.
• Your content. Notes, tags, screenshots, settings (goals, avatar, language).
• Technical data. IP address and request timing — for abuse protection and rate limiting.

2. Why and on what basis

We process data to provide the Service itself (performance of our agreement with you) and to keep it secure (legitimate interest). We do not sell your data, do not show ads, and use no third-party trackers.

3. Who we share data with (processors)

• Railway — hosting and database (EU servers).
• Resend — transactional emails (email verification, password reset).
• Crypto exchanges — we call their APIs with your keys to fetch your trade history.

4. Cookies and browser storage

We use an authentication cookie (JWT) to keep you signed in, and browser localStorage for settings, language and UI cache. There are no advertising or analytics trackers.

5. Retention and deletion

Data is kept while your account exists. On the Account page you can delete your account — this permanently erases keys, trades, notes and settings.

6. Your rights (GDPR)

You have the right to access, rectify, erase and export your data, restrict processing, and lodge a complaint with a supervisory authority. You can delete your account yourself; for data export or any questions, contact us (below).

7. Security

Exchange keys are encrypted with AES-256, passwords are hashed with bcrypt, the connection is secured with HTTPS, and keys are requested read-only. No system is perfectly secure, but we apply reasonable safeguards.

8. Minors

The Service is not intended for anyone under 18.

9. Changes

We may update this policy. The current date is shown at the top of the page.

10. Contact

Privacy questions: support@checkmyprofit.xyz

Or message us on Telegram: @Mihak1