Privacy Policy

Last updated: 2026-09-14

This is a starting template and has not been reviewed by a lawyer. Have it checked by qualified counsel before relying on it, especially if you serve users in the UK, EU, or another region with statutory privacy obligations.

What we store

We operate no database and hold no user accounts. When you log in with Deriv, the resulting access token is stored in a cookie on your own browser, marked httpOnly so page scripts cannot read it, and sent only to Deriv when your requests are relayed. We also set a short-lived cookie holding the token's expiry time so the page can renew your session before it lapses.

What we do not do

Deriv

Your account, funds, trading history and identity documents are held by Deriv and governed by Deriv's privacy policy, not this one. We pass an affiliate identifier to Deriv when you sign up so the referral can be attributed to us.

Hosting and logs

The site is hosted on Vercel, which records standard request logs (such as IP address, timestamp and user agent) for operating and securing the service. Our server-side error logs may record API failure details for debugging; we avoid writing tokens into them.

Cookies

We use only the cookies needed to keep you signed in and to protect the login flow against cross-site request forgery. We set no advertising or analytics cookies.

Your control

Logging out clears the session cookies. You can revoke this application's access entirely from your Deriv account settings, and clear cookies in your browser at any time.

Contact

For privacy questions about this site, contact the site operator. For anything concerning your Deriv account or its data, contact Deriv.