Privacy Policy

1. Data controller

WhalesInsider is the controller of the personal data described here. You can reach us regarding data protection at [email protected].

2. Data we collect

Account data: your email address, a hashed password (if you set one), your locale, and — optionally — a Google account identifier (if you sign in with Google) or a public wallet address you choose to link.

Payment data: when you subscribe, payment is handled by NOWPayments. We receive transaction metadata (order id, plan, status) to activate your subscription. We do not receive or store your card numbers or crypto private keys.

Technical data: IP address, browser/device information and server logs, collected to operate and secure the Service.

Local storage: we store your language preference and a login session token in your browser. On-chain whale trades shown in the product are public blockchain data and are not personal data about you.

3. Purposes and legal bases

To provide your account and subscription (Art. 6(1)(b) GDPR — performance of a contract).

To secure the Service, prevent abuse and keep logs (Art. 6(1)(f) — our legitimate interests).

To send service and receipt emails (Art. 6(1)(b)); optional product updates only with your consent (Art. 6(1)(a)).

To meet accounting and legal obligations related to payments (Art. 6(1)(c)).

4. Cookies and local storage

We use strictly necessary local storage (language, session) to make the site work. We do not use advertising cookies. If we add optional analytics in the future, we will ask for your consent first where required.

5. Processors and recipients

We share data only with service providers acting on our behalf: NOWPayments (payment processing), Google (only if you use Google Sign-In), our email/SMTP provider (transactional emails), and our hosting/infrastructure provider. We do not sell your personal data.

6. International transfers

Where a provider processes data outside the EU/EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

7. Retention

We keep account data while your account exists and as needed to provide the Service. Payment/accounting records are kept for the period required by law. Logs are kept for a limited period for security. We delete or anonymise data when it is no longer needed.

8. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your data, and to object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any right, email [email protected]. You also have the right to lodge a complaint with your local data-protection supervisory authority.

9. Security

We use appropriate technical and organisational measures, including password hashing, encryption in transit (HTTPS) and access controls. No method of transmission or storage is completely secure.

10. Children

The Service is not directed to persons under 18 and we do not knowingly collect their data.

11. Changes

We may update this Policy; the “last updated” date reflects the latest version. Material changes will be highlighted on the site.

12. Contact

Privacy questions or requests: [email protected].