Privacy Policy

CheckMyProfit (the "Service", "we") is a crypto trading journal and analytics tool at checkmyprofit.xyz. The operator is a private individual; personal data is processed in accordance with the GDPR (jurisdiction: Czech Republic / EU). This policy explains what data we collect and how we handle it.

1. Data we process

• Email and password. The password is stored only as a cryptographic hash (bcrypt) — we cannot see or recover it.
• Exchange API keys. Read-only. Stored encrypted (AES-256). Withdrawing or transferring funds with these keys is technically impossible.
• Trade history. Synced from the exchanges you connect: symbol, side, size, entry/exit prices, PnL, fees, time.
• Your content. Notes, tags, screenshots, settings (goals, avatar, language).
• Technical data. IP address and request timing — for abuse protection and rate limiting.
• Ad label and referring site. If you arrived from our advertising, a short campaign label (e.g. tg_ad_pnl) is stored with your account. We also store which site you came from (e.g. X or a search engine) — your browser reports it. This tells us which ads bring people in. No ad networks and no third-party trackers are involved.

2. Why and on what basis

We process data to provide the Service itself (performance of our agreement with you) and to keep it secure (legitimate interest). We do not sell your data, do not show ads, and use no third-party trackers.

3. Who we share data with (processors)

• Railway — hosting and database (EU servers).
• Resend — transactional emails (email verification, password reset).
• Crypto exchanges — we call their APIs with your keys to fetch your trade history.
• Google Ireland Limited — the Google Ads tag on public pages: it shows which ads bring people here. Until you consent, it stores no cookies and receives no advertising data.

4. Cookies and browser storage

We use an authentication cookie (JWT) to keep you signed in, and browser localStorage for settings, language and UI cache. Our own visit counter is anonymous: it stores only “day, event name, how many times”, with no identifiers and no cookies.

Advertising. Public pages carry the Google Ads tag. Its cookies appear only if you press “Accept” in the bar at the bottom of the page. Without consent, or after you decline, Google’s consent mode keeps it from storing cookies or collecting advertising data.

5. Retention and deletion

Data is kept while your account exists. On the Account page you can delete your account — this permanently erases keys, trades, notes and settings.

6. Your rights (GDPR)

You have the right to access, rectify, erase and export your data, restrict processing, and lodge a complaint with a supervisory authority. You can delete your account yourself; for data export or any questions, contact us (below).

7. Security

Exchange keys are encrypted with AES-256, passwords are hashed with bcrypt, the connection is secured with HTTPS, and keys are requested read-only. No system is perfectly secure, but we apply reasonable safeguards.

8. Minors

The Service is not intended for anyone under 18.

9. Changes

We may update this policy. The current date is shown at the top of the page.

10. Contact

Privacy questions: support@checkmyprofit.xyz

Or message us on Telegram: @Mihak1