Privacy Policy.
Vwapster operates this website. For privacy, support, purchase or legal inquiries, contact vwapster@gmail.com. You may also contact @vwapster on X. Do not send private keys, account passwords or full payment-card information with a request.
1. Scope
This notice explains how Vwapster handles personal information in connection with vwapster.com, its public trading observatory, signup/download-access list, website accounts, password-protected downloads, purchases and support communications. It also addresses records retained from earlier hosted-bot features. It does not describe every practice of an exchange, payment service, chart provider, hosting company or AI assistant you use independently.
The current downloadable bot is self-hosted software. Browsing the public website or joining the access list does not require exchange credentials. The current signup and download forms do not collect Kalshi API keys. The standalone download does not automatically send your local keys, account balance, orders or trading results to Vwapster. See Section 5 for important distinctions about earlier hosted services and information you choose to send us.
2. Information, sources and purposes
| Category | Examples and source | Main purposes |
|---|---|---|
| Signup/access-list details | First and last name, email address, X handle and submission time supplied through the form | Respond to your request for download availability, purchase and product information; maintain the list and process opt-outs |
| Website account details | Email, display name, a password hash, account identifiers, creation/update times and account status | Create and secure accounts, authenticate users, manage account information and provide support |
| Purchase and billing records | Payment status, amount, date, transaction/reference identifiers, payer contact information, receipts you provide and correspondence; Stripe checkout and payment identifiers and legacy Stripe customer/subscription identifiers where present | Confirm purchases, fulfill downloads, address payment disputes, administer applicable refunds and meet accounting/legal obligations |
| Download and security information | Requested item, request time, IP address, access attempts, session/CSRF identifiers and application or server events | Enforce the password gate, limit abuse, troubleshoot delivery and protect the service |
| Technical request information | IP address, requested resource, time and response status; device/browser or other request metadata processed by our infrastructure or providers | Deliver pages and assets, detect attacks, diagnose failures and maintain service reliability |
| Communications | Messages, support requests and attachments you choose to send by email, X or another agreed channel | Answer questions, investigate incidents and resolve requests or disputes |
| Legacy hosted-service records | Where previously created: configuration, container identifiers, account/entitlement status, operational/trading records and exchange credential files or related backups | Wind down or support earlier arrangements, reconcile incidents and records, and meet applicable legal obligations; not automatically collected by the current downloadable product |
| Public observatory information | Operator-selected market, position and performance snapshots, including simulated/paper results | Display the public observatory and explain strategy activity |
Do not send information about another person unless you are authorized to do so. Support attachments can contain sensitive financial or account information; redact irrelevant details before sending them. We do not need your exchange login password to troubleshoot a software installation.
3. How information is used
We use relevant information to provide the function you requested, communicate about purchases and software, verify access, protect against fraud and abuse, maintain records, comply with applicable obligations and establish or defend legal claims. Signing up is not permission for unrelated third-party marketing, public disclosure of your email address or automatic trading on your account.
Where a data-protection law requires a legal basis, relevant bases may include steps you request before a contract and performance of that contract; legal obligations; legitimate interests in security, administration and support, subject to applicable balancing requirements; and consent where required, including for certain marketing or nonessential technologies. These are purpose-specific bases, not a claim that every basis applies to every activity. Reading this policy does not itself constitute consent to optional processing.
We do not use signup information to decide whether you qualify for credit, insurance or employment. Automated password checks and request-rate limits protect access; they are not investment suitability assessments. Decisions made by a locally installed trading bot are separate from how this website processes signup information.
4. Marketing preferences
The access-list form requests permission to contact you about Vwapster availability and purchase opportunities. You may ask us to stop marketing by replying to the message, using an unsubscribe mechanism where provided, or contacting the privacy address above. We will honor applicable opt-out deadlines and will not charge a fee or require you to make a purchase to opt out.
An opt-out does not prevent necessary non-promotional communications about a transaction you requested, a security incident, or a legal obligation. We may retain the minimum contact/suppression record needed to avoid sending further marketing. You can request removal from the access list without closing an unrelated website account.
5. Exchange keys, self-hosted software and public results
For the current standalone package, you enter your own exchange keys on your own machine. The software connects to its documented exchange and market-data endpoints; installation also contacts software registries or package providers. Those providers process requests under their own practices. Vwapster does not become the host of your installation simply because you purchased the download.
We do not automatically receive your locally generated trading ledger, logs or credentials. If you send logs or grant support access voluntarily, that can disclose additional information; agree on the scope first and redact secrets. An AI assistant you use for setup is a separate provider. Do not paste private keys, authentication tokens or financial records into an AI conversation merely because a setup guide mentions an LLM.
Earlier hosted-service records or credentials may remain in restricted operational storage or backups until they are appropriately removed or retained for a valid purpose. The retirement of a feature does not itself establish that all earlier copies were deleted. Contact us about any credentials you previously supplied and revoke them directly through the exchange when appropriate. We do not claim universal encryption at rest or guaranteed erasure of every historical copy.
The public observatory is not a public account directory. Purchasing a download or joining the list does not automatically publish your name, email, exchange keys or local bot results. Public performance displays may include operator-controlled paper accounts and selected operational snapshots, not results for every purchaser.
6. Cookies, browser storage and embedded content
| Technology | Purpose | Current browser lifetime/control |
|---|---|---|
| Account session and CSRF cookies | Login and protection against forged account actions | Generally up to 14 days; logout or browser clearing can remove them |
| Per-download unlock and CSRF cookies | Password-gated downloads and request security | Generally up to one hour; locking the download or expiry removes access, and password rotation invalidates existing unlock sessions |
| Administrator session/security cookies | Restricted administrative access | Generally up to one hour; intended for administrators, not ordinary visitors |
vwapster-motion local storage | Remember a visitor's animation preference | Persists in that browser until changed or cleared |
Security cookies do not contain your plaintext login or download password. Cookie expiry is not a promise that corresponding server logs or transaction records are deleted at the same moment.
We do not currently install our own advertising pixels or advertising-profile system. This is not a representation that third-party embeds cannot perform independent tracking. The Bitcoin chart on the home page is drawn by our own script from data our server collects from public exchange feeds, so your browser does not contact those exchanges or a charting provider to display it. X and payment-provider links contact those services when you follow them; their independent practices and settings apply. See the notices of services you choose to use.
You can clear cookies/local storage or use browser controls; blocking necessary cookies can prevent login or downloads. The current site does not offer a general-purpose cookie preference manager. Browser controls do not replace any consent or opt-out mechanism we are required to provide by applicable law. We do not represent that every third-party service responds to browser Do Not Track or Global Privacy Control signals in the same way.
7. Disclosure to other parties
We disclose information only for relevant operational or lawful purposes, including:
- Hosting, infrastructure, security, communications and support providers that help operate the service, including our Hostinger-hosted infrastructure.
- Payment services you choose or that are involved in a purchase. Stripe (which processes checkout payments on the Downloads page), PayPal, Cash App, X/payment services and legacy Stripe arrangements may involve names, account identifiers, payment status and transaction records. We do not collect full payment-card numbers through the signup or download form. These services may act independently under their own notices, rather than solely as our processors.
- Professional advisers, authorities or other appropriate parties when reasonably needed for accounting, legal compliance, fraud prevention, safety, disputes or a valid legal process, subject to applicable restrictions.
- A prospective or actual business successor in a legitimate transaction, with appropriate confidentiality safeguards and continuing respect for applicable privacy commitments and notice requirements.
- A recipient you direct us to contact or a disclosure you separately authorize.
We do not sell our signup, account or customer lists as a marketing product, and do not disclose them to other advertisers for their own marketing. Do not interpret this statement as a determination that an external widget's processing is outside a particular privacy law's definition of sale, sharing or targeted advertising. Where applicable, you may exercise the relevant rights described below.
8. Retention
Retention depends on the record's purpose, the ongoing relationship, security needs, accounting/legal obligations and actual or reasonably anticipated disputes. The current service does not impose one universal automatic deletion period on all signup, account or purchase records.
- Access-list details are retained to respond to the requested product interest and manage preferences; request removal if you no longer want to be listed.
- Account records are retained to maintain the account and resolve related matters. Closure or deletion requests are reviewed for information that must lawfully be retained.
- Purchase, tax, dispute and delivery records may outlast an account or download-access cookie where needed to fulfill legal obligations or establish transaction history.
- Download-attempt rate limiting uses a rolling ten-minute window. Old attempt rows are pruned during later limiter activity; this is not an exact ten-minute erasure guarantee. Separate infrastructure logs and backups have their own lifecycles.
- Backups and legally held records may not be immediately editable. They remain restricted, are not a reason to reuse information for unrelated marketing, and must be handled consistently with applicable deletion requirements.
On a request, we will explain relevant retention grounds and applicable exceptions rather than promise that deleting a browser cookie removes all records everywhere. Do not include your private key in a deletion request.
9. Security
Current controls include HTTPS on the public website, password hashing, restricted server-file access, secure session controls, request limits and restricted download delivery. We use safeguards appropriate to the information and service; no website, transfer, device or security measure is invulnerable. We do not promise that every stored record is encrypted at rest or that an incident is impossible.
Protect your own email, exchange account, server, device, password and API permissions. Notify us of a suspected website issue through the contact above, without publicly posting exploit details or secrets. We will assess incidents and provide notices when required by applicable law.
10. International processing and regional rights
Vwapster and its service providers may process information outside the state or country where you live. Applicable transfer safeguards depend on the locations, parties and laws involved. A statement in this policy does not replace legally required transfer safeguards, a representative, registrations or contractual arrangements. Contact us for information relevant to your circumstances.
Depending on your location and whether the relevant law applies to our activities, rights may include access or confirmation, correction, deletion, a portable copy, restriction, objection, withdrawal of consent, opting out of sale/sharing or targeted advertising, limiting certain sensitive-information uses, and appealing a denied request. Withdrawing consent does not invalidate lawful earlier processing. Some records or requests are subject to statutory exceptions.
For California residents, rights under the CCPA/CPRA depend on that law's applicability; this notice does not assume every small business is covered or remove rights where it is covered. For EEA/UK residents, relevant rights and lawful-basis/transfer duties apply when those laws govern the processing. You may complain to an appropriate supervisory or consumer-protection authority. We will not unlawfully discriminate against you for exercising a protected right.
Submit a request to vwapster@gmail.com, identifying the relevant account/list address, requested action and sufficient context. We may verify identity or an authorized agent's authority in a proportionate way, but do not ask you to send exchange keys or account passwords as verification. Marketing opt-outs do not require account-login verification. We respond within applicable legal deadlines and explain material limitations or denial/appeal options where required.
11. Children
The website's account, purchase and trading-software services are intended for adults aged 18 or older, or the higher age required by applicable law or a relevant trading venue. They are not directed to children. Do not submit a child's information. If you believe we hold personal information from a child contrary to applicable law, contact us so we can investigate and take appropriate action.
12. Changes and contact
We will date material revisions and provide additional notice or obtain consent when required. A new policy does not retroactively authorize an unrelated use of information already collected. Keep a copy of the version relevant to your interaction.
Privacy, support and legal contact: vwapster@gmail.com. Website operator: Vwapster. Secondary contact: @vwapster.
Related documents: Terms of Service and the setup/security documentation accompanying your download.