Privacy
What we store and why. Last updated 2 Oct 2026.
Trading records come from public sources (blockchains, public exchange boards) or from data a trader connects. Balances are shown as bands, not exact figures, unless a page's owner chooses to show dollars; owners decide what their page displays.
What we store about visitors. Almost nothing: requests and rate-limiting use a salted hash of your IP — we do not store raw IP addresses. No tracking cookies, no third-party analytics scripts.
Email addresses are kept only for the reason you gave them, and never sold or shared:
- Watching a record stores your address for that purpose until you stop. Every email has a one-click stop.
- Asking to hear back on a request page: we use your address for one email, sent only if that trader verifies.
- A trader's business email added to a request page is used to tell them about requests, and is never shown publicly.
- A status email left by a page owner is used for verification status and key warnings only, and is never shown.
Every email we send has an opt-out link, and opting out is permanent.
Newsletter. The site newsletter is a separate, double opt-in list: nothing is sent until you click the confirmation link, and every issue carries a one-click unsubscribe that we treat as permanent. Addresses you leave for anything above are never added to it. Delivery runs through Resend, our email processor.
Exchange API keys (read-only) are encrypted at rest with a key held outside the database. We never ask for trading or withdrawal permissions, and you can revoke a key at the exchange at any time.
Owner codes. An owner code lets a page's owner sign in to manage it. It is stored only as a hash: we can't read it back.
Payments. ProvePnL is free and takes no payments, so we hold no card or bank details. We never ask for wallet private keys or seed phrases.
Removal. You can remove your page at any time, yourself. Your name, channels and settings are erased and any exchange key is deleted. A record that only existed because of you is deleted too; a record an exchange or a public board publishes anyway stays as an unclaimed public record. While a page is up, nobody can edit or trim what it shows. To remove an email address, use the link in any email or write to [email protected].
Operator. AHG International Limited, Hong Kong · [email protected].