Privacy Policy

This Privacy Policy explains what personal data Cointrapper collects, why we collect it, how long we keep it and what rights you have. It applies to cointrapper.com and to the emails we send.

Who we are

Cointrapper (cointrapper.com) is a private, invite-only algorithmic trading pool. Participation is approved manually.

The service is operated by Muvon Un Limited, Suite C, Level 7, World Trust Tower, 50 Stanley Street, Central, Hong Kong. Muvon Un Limited is the controller of your personal data.

For any privacy question or request, write to [email protected].

What we collect

We collect only what we need to run the service:

• Email address. We use it to create your account, send one-time sign-in codes and links, and send account emails.
• IP address of sign-in code requests. It is stored together with the code so we can rate-limit abuse. Codes are stored only as a hash and are deleted after use or when they expire after 10 minutes.
• Account data. When you signed up, when you last signed in, and your participation status: applied, approved or suspended.
• Pool participation records, for approved participants: deposits and withdrawals, units, the history of your position value, and withdrawal requests with any notes you add to them.
• Emails you send us. The content of your replies and requests, including deposit requests sent to [email protected]. These may include payment or wallet details if you choose to share them.

How we use your data

We use your personal data to:

• create and maintain your account and let you sign in;
• review your application and manage your participation in the pool;
• keep records of deposits, withdrawals, units and position value, and handle withdrawal requests;
• send service emails and, unless you have opted out, updates;
• answer your messages, including deposit-related correspondence;
• protect the service against abuse.

We process this data to provide the service you asked for, to meet our accounting and legal obligations and to keep the service secure. We send updates based on your consent, which you can withdraw at any time.

We do not sell personal data and do not use it for advertising.

Emails we send

We send two kinds of email:

• Service emails: sign-in codes, application and approval notices, and deposit and withdrawal confirmations. They are part of the service and are always sent while you have an account.
• Updates: onboarding reminders and monthly pool updates and statements. Every update has a one-click unsubscribe link, and you can opt out at any time.

Unsubscribing from updates does not stop service emails. If an email to you bounces or you mark one as spam, updates are turned off automatically.

Cookies and local storage

When you sign in, we set one strictly necessary session cookie, ct_token. It is httpOnly, so scripts on the page cannot read it, and it lasts 7 days.

Your theme preference (light or dark) is saved in your browser's localStorage.

We do not use analytics, advertising or tracking cookies.

Service providers

We rely on two providers to run the website:

• Cloudflare: website hosting, content delivery and security.
• Resend: email delivery.

Pool funds are held on Binance exchange accounts operated by the pool. We do not give Binance your personal data from the website. Transfers you make are subject to the policies of the platform you send them from.

International transfers

Our providers may process your data outside your country. When they do, the transfer is covered by appropriate safeguards.

How long we keep data

• Account data: for as long as your account exists.
• Participation and financial records: for as long as we are required to keep them for accounting and legal obligations.
• Email correspondence: for as long as needed to handle your request.
• Sign-in codes: deleted after use or once they expire after 10 minutes.

You can ask us to close your account and delete the data we are not required to keep.

Your rights

Under applicable data-protection law, including the GDPR where it applies to you, you have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• have your data deleted;
• restrict or object to its processing;
• receive your data in a portable format;
• withdraw your consent to updates at any time.

To exercise any of these rights, email [email protected]. We respond within 30 days. You also have the right to lodge a complaint with a data-protection supervisory authority.

Security

Access to personal data is limited to the team members who need it. You sign in without a password, using one-time codes, and your session is kept in an httpOnly cookie.

Children

Cointrapper is for adults only (18+). We do not knowingly collect personal data from children.

Changes to this policy

When we change this policy, we update this page and its last updated date. We announce material changes by email.

Contact

• Privacy questions and requests: [email protected]
• Deposit-related correspondence: [email protected]
• Postal address: Muvon Un Limited, Suite C, Level 7, World Trust Tower, 50 Stanley Street, Central, Hong Kong