Privacy policy
Draft, pending legal review. Last updated: 2026-10-14.
This page says what OTC OS stores about you, why, how long we keep it, and how to have it deleted. It is written in plain English and will be tightened after legal review.
What we collect
| What | When | Why |
|---|---|---|
| X profile fields: user id, handle, display name, avatar, account creation date, follower count | Only if you sign in with X | To show your profile, tell one person from another, and spot fake accounts (account age and follower count help) |
| Wallet address | Only if you choose to add one | To show your public holdings. We never ask for approvals, delegations or your keys |
| Usage analytics: pages viewed, features used, rough timing, a coarse device type | When you use the site | To see what works and what is slow. Stored as counts, not as a record of you |
| Ask questions and answers | Only if you use Ask | To answer you and to improve the answers |
| Feedback you send | Only if you use "Send feedback" | To read and act on it |
We do not collect your X password, your direct messages, or your private keys. Sign in with X gives us only the profile fields listed above.
What we do not do
- We do not sell your data.
- We do not run third-party ad or tracking scripts.
- We do not use your data to trade against you.
Who handles it
Processors handle data for us. They do not use it for their own purposes.
- Our hosting provider (Cloudflare) hosts the site and stores its data (servers, database, cache).
If we add another processor we will list it here before it goes live.
How long we keep it
- Profile (X fields, optional wallet address): until you ask us to delete it.
- Ask history: 90 days, then deleted.
- Analytics: kept as aggregated counts. Anything tied to a single visit is not kept after it is aggregated.
- Feedback: until we have acted on it, then deleted or kept without your name.
Delete your data
Use "Send feedback" in the app and say "delete my data", or email privacy@otcos.app. We delete your profile and linked records and confirm when it is done. Public on-chain data (wallet transactions) is not ours and cannot be deleted.
Cookies
We use only the cookies the site needs to work. None are for advertising.
| Cookie | What it does |
|---|---|
__Host-otcos_beta | Keeps you signed in for the beta session (30 days) |
otcos_holder | Remembers your holder access tier on the console |
otcos_view_as | Remembers which tier you are previewing in "view as" |
otc-day | Remembers the day window you chose |
otcos_analytics_self | Marks the site operator's own visits so they are left out of analytics |
otcos_console | Operator sign-in. Only set for the operator |
When Sign in with X goes live, it will add a session cookie. This page will list it first.
Changes
If we change this page in a way that matters, we will show the new date at the top.