Privacy Policy
Last updated 2026-10-16 · Operator: the EtherSignals operator (personal research project) · Contact: via the Telegram channel linked in the site footer
1. Who we are
EtherSignals is a personal, non-commercial research and educational project that publishes the output of an automated AI trend model for Ethereum markets. Signals are computed in real time from market data and published here for study and reference. This policy explains what data the site processes, why, for how long, and the rights you have. The data controller is the EtherSignals operator (personal research project). You can reach the operator via the Telegram channel linked in the site footer.
2. Data we process
- Signal data: AI model outputs about market conditions (symbol, timeframe, trend regime, model score, key price levels). This is published data about markets, not about you.
- IP addresses: processed transiently to enforce the request rate limit (4 requests per minute per IP) and recorded in a bounded security audit log when the webhook ingest endpoint is called.
- Push subscriptions: if you opt in to desktop notifications, we store the browser-generated push endpoint and cryptographic keys (p256dh/auth). No name, email or account is involved, because the site has no registration.
- Local storage: your cookie-consent choice, theme preference and the dismissal state of the Telegram invite dialog are stored on your device only. They are never transmitted to us.
- Usage analytics (optional): if you accept analytics in the consent banner, the site records privacy-friendly usage metrics (pages viewed, button and link clicks, feed interactions) through a self-hosted Umami instance. Umami is cookieless: it sets no cookies or advertising identifiers and does not build cross-site profiles. Declining keeps analytics off entirely.
- Technical logs: the hosting layer may keep standard server logs (IP, user agent, timestamp) for security and abuse prevention.
3. What we do NOT do
- No accounts, no sign-up, no passwords.
- No advertising, no ad-tech, no cross-site tracking. The only analytics are optional, consent-gated, self-hosted and cookieless (Umami), and the data is never shared or sold.
- No selling or sharing of personal data with data brokers.
- No profiling or automated decision-making about individuals.
4. Purposes and legal bases (GDPR)
| Processing | Purpose | Legal basis |
|---|---|---|
| IP-based rate limiting | Protect service availability and prevent abuse | Legitimate interests (Art. 6(1)(f) GDPR) |
| Webhook security audit log | Detect and investigate unauthorized ingest attempts | Legitimate interests (Art. 6(1)(f) GDPR) |
| Push subscription storage | Deliver signal notifications you requested | Consent (Art. 6(1)(a) GDPR), withdrawable anytime |
| Optional usage analytics (self-hosted Umami, cookieless) | Understand which pages and features visitors use | Consent (Art. 6(1)(a) GDPR), withdrawable via the consent banner |
| Local storage (preferences) | Remember consent, theme and UI state | Consent via the consent banner; strictly necessary where used for security |
5. Retention
- Rate-limit counters: in-memory, expire within 60 seconds to 1 hour.
- Ingest audit log: rolling 30-day window, then deleted.
- Push subscriptions: kept until you unsubscribe, your browser removes the subscription, or delivery failures mark the endpoint dead (HTTP 404/410), whichever comes first.
- Server logs: retained per the hosting provider's default rotation.
6. Your rights
Depending on your jurisdiction (e.g. EU/EEA under GDPR, California under CCPA/CPRA, other regions with similar statutes), you may have rights of access, deletion, correction, portability, and the right to object to or restrict processing, as well as the right not to be discriminated against for exercising these rights.
Because the site stores no identity data about you, most requests reduce to one action: clear the site's local storage in your browser, which erases consent state and preferences. Push subscriptions can be removed by disabling notifications in your browser or contacting the operator with the subscription endpoint you want deleted. Requests can be made via the Telegram channel linked in the site footer.
California residents: we do not 'sell' or 'share' personal information as defined by the CCPA/CPRA.
7. Cookies
No consent is required for strictly necessary storage. Optional push notifications are only activated after you press the alerts button and grant browser permission. The self-hosted Umami analytics set no cookies at all and run only while analytics consent is active.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| ethersignals.consent | Cookie + localStorage | Stores your cookie-consent decision (all / essential) | 180 days |
| ethersignals.tg-drawer | localStorage | Remembers when you dismissed the Telegram invite | 3 days |
| theme | localStorage | Remembers light/dark theme preference | Until cleared |
8. International transfers
The site and its database may be hosted in any jurisdiction the operator chooses. Where personal data (limited to IPs and push endpoints as described above) is processed, standard hosting-layer safeguards apply. Given the minimal, non-identifying nature of the data, no additional transfer mechanisms are relied upon.
9. Children
The site is not directed at children under 16 and no age data is collected.
10. Changes
This policy may be updated to reflect material changes. The 'last updated' date above changes only when the substance changes.