Privacy Policy

Last updated: August 25, 2026

1. Summary

Exotic Tools is a client-side trading research terminal. Your data lives in your browser, not on our servers. We operate no accounts database and receive no copies of your watchlist, trades, portfolio, or preferences.

2. What we store (in your browser only)

Session token, display name, and the email you sign in with (stored locally)
Watchlist, trade history, portfolio holdings, and stats
Preferences: theme, accent color, notification toggles, feature switches
Wallet data: your wallet address and a private key encrypted with AES-256-GCM using a key derived from your password (PBKDF2, 150,000 iterations). The plaintext private key is never stored.

Clearing your browser storage deletes all of it. Use Customizations → Export data to keep a backup.

3. Cookies & localStorage

We use browser localStorage (not tracking cookies) to keep you signed in and remember preferences. There are no third-party advertising or tracking cookies. Our analytics (Plausible) is cookieless and does not store personal data.

4. Third-party services

TradingView — chart widgets load from TradingView servers when you view charts; their privacy policy applies to their widgets.
Public blockchain RPCs (Base, Solana) — balance and transaction queries send only your public wallet address.
AI providers (Groq, Google Gemini, OpenRouter, Pollinations) — used only if you supply your own API key and send a chat message; your prompt is processed by that provider under its policy.
Ramp / MoonPay — opened only if you click Cash Out; any KYC or payment data is handled by them, never by us.

5. Wallet security

The wallet is non-custodial: you alone control your keys. Keys are encrypted in your browser and never transmitted to us. We can never access, recover, or freeze your funds. If you lose your password and seed phrase, your funds are unrecoverable.

6. Payments

Pro is a one-time $10 payment via Cash App. We receive a payment notification and issue a single-use license code tied to your email. We do not store card or bank details.

7. Analytics

We use Plausible Analytics — cookieless, GDPR-friendly, no personal identifiers, no cross-site tracking.

8. Contact

Questions or deletion requests: iwilllcokeie@gmail.com. Since data lives in your browser, you can also delete everything instantly via Customizations → Delete This Account / Clear data.