Privacy Policy
Last updated: 5 August 2026
Draft — not legal advice. This describes what the software actually does, accurately and in plain language. It has not been reviewed by a lawyer, and it does not account for the jurisdiction you operate from or the rules that may apply to a service adjacent to trading. Have it reviewed before accepting public sign-ups.
Who we are
PolyBot is operated by [LEGAL ENTITY NAME]. Contact: [CONTACT EMAIL].
What we collect
You can browse everything without an account. If you sign in:
- Identity from your provider. Your email address, display name and avatar URL from Google, Discord or Telegram, plus that provider’s own identifier for you. Telegram supplies no email, so a placeholder at a non-routable address is stored instead.
- Session records. A session token, its expiry, and the IP address and user-agent of the browser that created it.
- What you save. Watchlisted markets, alerts, saved strategy settings and followed wallet addresses.
We do not collect payment details, wallet private keys, or anything that would let us move funds. The dashboard cannot place an order.
What we do not do
- No advertising, analytics or tracking cookies. The only cookie is the one that keeps you signed in.
- No selling or sharing of personal data with third parties for their own purposes.
- No profiling or automated decisions about you.
Where it is stored
In a Cloudflare D1 database, on Cloudflare’s infrastructure. Cloudflare processes it on our behalf as our hosting provider. Data may be stored and processed outside your country.
Who else is involved
- Google, Discord, Telegram — only if you choose that sign-in method. They tell us who you are; we do not send them anything about what you do here.
- Cloudflare — hosting, database, and sign-in emails.
- Polymarket — market data is fetched from their public API by our servers. Your identity is never sent to them, and they are not told that you viewed anything.
How long we keep it
Until you delete your account. Sessions expire after 30 days. Sign-in links expire after 10 minutes.
Your rights
Email [CONTACT EMAIL] to get a copy of your data or to have it deleted. Deleting your account removes your watchlists, alerts, settings and follows; the deletion cascades, so nothing is left behind pointing at you. Depending on where you live you may also have rights to correct or restrict processing, and to complain to a data protection authority.
Changes
If this changes materially we will update the date above and, where the change matters to you, tell you at the address on your account.