Privacy Policy

This policy explains what Loxley (loxl.trade) collects and how we use it. We aim to collect as little as possible.

What we collect

Account: if you sign in by email, we store your email address to send login codes and identify your account. If you sign in by wallet, we store your wallet address. We generate and store an encrypted trading-wallet key on your behalf (see below).

On-chain activity: public blockchain data (trades, balances, holders) is read from the chain and public explorers - this is already public and not private to us.

Usage: basic technical data (IP address, request logs) needed to run the service, prevent abuse, and rate-limit requests.

Your trading wallet key

Your generated trading-wallet private key is stored encrypted (AES-256) and used server-side only to sign the trades you initiate. It is never exposed to the browser except when you explicitly choose to export it. You are responsible for backing it up.

How we use data

To operate the service (login, trading, analytics you request), to keep it secure (abuse prevention, rate limiting), and to improve it. We do not sell your personal data.

Third-party services

We use service providers to run Loxley, including a database host (Neon), an email provider for login codes (Resend), market-data and RPC providers, and hosting. They process data only to provide their service to us.

Cookies

We use a single httpOnly session cookie to keep you signed in. We do not use third-party advertising cookies.

Data retention & your rights

We keep account data while your account is active. You can sign out and request deletion of your account data by contacting us. Note that on-chain transactions are public and permanent and cannot be deleted.

Contact

For privacy questions, contact us via the links on loxl.trade.