Privacy Policy

Last Updated: February 14, 2026

Effective Date: February 14, 2026

---

This Privacy Policy explains how ZeroTick collects, uses, stores, and protects your personal data. By using ZeroTick, you consent to the data practices described in this policy.

ZeroTick is an early-stage, unregistered project operated by the ZeroTick team. As the project matures and a legal entity is established, this Privacy Policy will be updated to reflect applicable data protection regulations.

ZeroTick operates as a non-custodial platform with a data-minimization approach. We collect only data necessary to provide services and ensure platform security.

• Website: www.zerotick.trade

• Privacy Contact: [e-mail]

---

1. What We Collect

1.1 Account Information

When you create an account, we collect:

• Authentication data: Email address, password (stored as a salted hash only, never plain-text), or OAuth provider identifiers (Google, Discord, X/Twitter)

• Profile data: Username (optional), profile picture (optional), preferences

• Account metadata: Creation timestamp, last login, referral code

1.2 Wallet and Blockchain Data

• Wallet identifiers: Wallet IDs, wallet labels

• Public addresses: Your blockchain addresses on currently supported chains, including Solana, Ethereum, BSC, Sui, and Monad

• Wallet metadata: Creation timestamps, active wallet selection

1.3 Transaction and Trading Data

• Trading activity: Buy/sell orders, amounts, prices, trading pairs

• Order history: Market orders, limit orders, stop-loss, take-profit settings

• Cross-chain data: Swap details, bridge transactions

• Portfolio data: Positions and balances (indexed from public blockchain data)

• Token launch data: Token configuration and launch parameters (if you create tokens)

All blockchain transactions are publicly visible on-chain. We index this public data to provide services.

1.4 Technical and Usage Data

• IP address: For security, fraud prevention, and geolocation

• Device information: Browser type, operating system, device type

• Session data: Login sessions, session tokens

• Usage analytics: Pages viewed, features used, time spent

• Error logs: Crash reports, debugging information

• Security events: Failed logins, suspicious activity flags

1.5 Payment and Subscription Data

• Subscription information: Tier, billing period, status

• Payment method type: Card or crypto (method type only)

• Payment history: Invoices, payment status

For card payments via Stripe: Stripe processes your payment card details directly. We receive only the last 4 digits, card brand, and expiry month/year. We do not store full card numbers.

1.6 Communication Data

• Support tickets: Messages, attachments, correspondence

• Email communications: Newsletter subscriptions, service notifications

---

2. What We Do NOT Collect

ZeroTick does NOT collect:

• Government-issued identification documents

• Biometric or facial recognition data

• Tax identification numbers, Social Security numbers, or national ID numbers

• Bank statements or financial records

• Source of funds or wealth information

• Employment or income information

Private keys and seed phrases are stored client-side only, encrypted by your wallet password. ZeroTick never has access to your private keys.

ZeroTick operates as a permissionless, non-custodial platform and does not perform identity verification (KYC) processes.

---

3. How We Use Data

3.1 Service Provision

• Create and manage your account

• Provide wallet functionality and blockchain interaction

• Execute trades and process orders

• Process cross-chain swaps

• Enable token launches

• Manage subscriptions and payments

3.2 Security and Fraud Prevention

• Detect and prevent fraud and abuse

• Monitor for suspicious activity

• Enforce Terms of Service

• Protect against security threats

• Screen against sanctions lists

3.3 Communication

• Send transactional emails (order confirmations, security alerts)

• Provide customer support

• Send service updates

3.4 Analytics and Improvement

• Analyze usage patterns to improve the platform

• Debug errors and improve performance

• Develop new features

Where possible, we anonymize or pseudonymize data for analytics purposes.

---

4. Third-Party Services

We share data with third parties only as necessary to provide services.

Provider	Purpose	Data Shared
Openfort	Wallet infrastructure	Wallet IDs, addresses, signatures
Stripe	Payment processing	Payment details, email
OAuth Providers (Google, Discord, X/Twitter)	Authentication	Profile, email
DEX Aggregators	Trade routing	Wallet addresses, trade amounts
Bridge Providers (DeBridge, Wormhole)	Cross-chain transfers	Wallet addresses, amounts
Cloud Infrastructure	Hosting, storage	All data (encrypted)

Blockchain Networks

Blockchain transactions are publicly visible and permanent. When you create a wallet, execute a trade, launch a token, or perform a cross-chain swap, your public wallet address and transaction details are recorded on public blockchains. This data is not controlled by ZeroTick, cannot be deleted or modified, and is permanently visible to anyone.

We Do NOT Sell Your Data

ZeroTick does not sell, rent, or trade your personal data to third parties for marketing purposes.

---

5. Cookies and Local Storage

5.1 Strictly Necessary (No Consent Required)

• Authentication cookies: Session management, login state

• Security cookies: CSRF protection, fraud detection

These cannot be disabled while using the Platform.

5.2 Functional Storage

• Local storage: Encrypted wallet key shares (client-side only), UI preferences (theme, language, wallet selection), trading preferences (slippage, gas settings)

This data stays on your device and is not transmitted unless you perform an action.

5.3 Analytics (Optional)

Usage tracking and performance monitoring cookies are only placed after you provide consent. You can withdraw consent at any time through browser settings.

---

6. Data Security

We implement security measures to protect your data:

Technical measures:

• TLS 1.3+ encryption for all data in transit

• AES-256 encryption for stored data

• Bcrypt password hashing with salt (no plain-text storage)

• Private keys encrypted client-side (we never see them)

• Secure session tokens with automatic expiration

• Rate limiting and API authentication

Your responsibilities:

• Use a strong, unique password

• Download and securely store your Recovery Kit

• Never share your password, private keys, or Recovery Kit

• Verify the website URL before logging in (www.zerotick.trade)

• Report suspicious activity to [e-mail]

Data Breach Notification

In the event of a data breach that poses a risk to your rights:

• We will notify affected users without undue delay

• We will describe the nature of the breach, likely consequences, and measures taken

• We will report to relevant authorities as required by applicable law

---

7. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you

• Correction: Request correction of inaccurate data

• Deletion: Request deletion of your personal data (subject to limitations below)

• Portability: Request your data in a structured, machine-readable format

• Object: Object to processing of your data for certain purposes

• Withdraw consent: Withdraw consent for optional data processing at any time

Limitations

• Blockchain data cannot be deleted. Transactions recorded on public blockchains are permanent and outside ZeroTick's control.

• Data required for legal compliance may be retained as required by applicable law.

How to Exercise Your Rights

Email [e-mail] with:

• Your registered email address

• A description of your request

We will respond within 30 days.

---

8. Data Retention

Data Category	Retention Period
Account data	Until account deletion + 30 days
Transaction records	2 years
Security logs	12 months minimum
Error logs	6 months
Support tickets	3 years from resolution
Analytics data	Anonymized and retained indefinitely
Blockchain data	Permanent (public ledger, outside our control)

Inactive Accounts

Accounts inactive for 3 years will receive a warning notice. If not reactivated within 30 days, the account and non-essential data will be deleted.

---

9. Children's Privacy

ZeroTick is NOT intended for users under 18 years of age. We do not knowingly collect personal data from children under 18. If we discover such data, the account will be terminated and data deleted immediately.

If you believe a child has provided personal data to ZeroTick, contact [e-mail].

---

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our data practices, new services, or legal requirements.

Material changes:

• "Last Updated" date will be revised

• Prominent notice on the Platform

• Email notification for significant changes

Continued use of the Platform after changes constitutes acceptance of the updated Privacy Policy. If you disagree, stop using the Platform and request account deletion.

---

11. Contact

Purpose	Email
Privacy inquiries and data requests	[e-mail]
General support	[e-mail]
Security issues	[e-mail]

Website: www.zerotick.trade