Privacy Policy

1. Controller

BitFortress. For any privacy matter: [email protected].

2. Data we process

Account data: name, email, password (we only store a secure hash, never the password itself), language and the date you accepted these documents.

Security data: IP address, approximate country, browser, open sessions, recognised devices, two-step verification and passkeys.

Activity data: your wallet address, deposits, withdrawals, saved withdrawal addresses and trades.

The messages you send us through the contact form.

3. Why we use it

To provide the service: create and maintain your account and carry out your trades, deposits and withdrawals.

To protect your account: detect sign-ins from new devices or countries and prevent fraud.

To send you service emails and answer your questions.

To meet legal obligations where applicable.

4. Emails we send you

Only service emails, needed to use your account: verifying your email, resetting or changing your password, security notices (two-step verification, passkeys, new sign-ins, frozen account), confirming withdrawal addresses and notices about your withdrawals.

We send no advertising or newsletters, and we do not use your email for anything else. Because they are part of the service, they are sent while your account is open; if you do not want to receive them, you can close it.

5. Who we share it with

We never sell your data. We only share it with the providers we need to run the service:

Hyperliquid: your trades and your wallet address are recorded on its network, which is public, as on any blockchain.

Unit and the deposit and withdrawal networks: the addresses and amounts of your transfers.

Mt Pelerin and MoonPay: only if you buy with a card or sell to a bank; they request and process your identity data under their own policies.

Cloudflare: network, attack protection and the CAPTCHA on our forms.

Our email delivery provider: your email address and the content of service emails.

6. Cookies

We only use two first-party, strictly necessary cookies: a session cookie, to keep you signed in, and a device cookie, to recognise your browser and warn you about new sign-ins. Your language and theme are stored in your browser.

We do not use advertising cookies or analytics tools.

7. How long we keep it

While your account is open. When you close it we delete your data, except what the law requires us to keep. What is recorded on public networks (blockchains) cannot be deleted.

8. Your rights

You can ask to access, correct or delete your data, object to its processing or receive it in a portable format by writing to [email protected]. You can also complain to the data protection authority in your country.

9. Security

We encrypt connections and wallet keys, store passwords as secure hashes and offer two-step verification and passkeys.

10. Changes

If we change this policy we will let you know by email or on the platform. The date of the current version is shown above.