Privacy Policy

Decalyze ("we", "us") operates the trading terminal at decalyze.com. For any privacy question, contact support@decalyze.com.

• Account data — email, display name, hashed password. Provided by you at registration.
• Payment data — plan, subscription status, PayPal transaction ID. Your card details never touch our servers; PayPal handles them under its own privacy policy.
• Usage data — anonymised pageviews, browser type, country, referrer. Only collected if you accept the cookie banner.
• Support data — messages you send us via the support form or email, kept for as long as needed to help you.

• Provide the trading terminal and keep you signed in.
• Process payments and manage subscriptions.
• Send transactional email (verification codes, receipts, alerts you request).
• Understand how the site is used so we can improve it.
• Detect abuse, fraud, and keep the service secure.

We rely on legitimate interest for security and product analytics, contract for account and payment handling, and consent for the analytics cookies loaded via the banner.

We only share data with vendors we need to run the service:

• PayPal — payment processing (privacy policy).
• Resend — transactional email delivery (privacy policy).
• Google Analytics 4 — anonymised usage analytics, loaded only after you accept the cookie banner (privacy policy).
• Yahoo Finance & Coinbase — market data providers. We fetch public market data; no personal data is sent to them.

We never sell your personal data to advertisers or brokers.

We use two categories of cookies:

• Essential — signed-in session token, CSRF, and your cookie preference itself. Cannot be disabled.
• Analytics — Google Analytics (anonymised IP). Loaded only after you press Accept all on the cookie banner. You can revoke consent at any time by clearing cookies for decalyze.com.

Regardless of where you live, you can:

• Access a copy of the data we hold on you.
• Correct or update your account details from the Account page.
• Delete your account and associated data.
• Object to processing or ask us to restrict it.
• Export your data in a portable format.
• Complain to your local data-protection authority.

To exercise any of these, email support@decalyze.com from the address on your account. We reply within 30 days.

Account data is kept while your account is active. If you delete your account, we remove personal data within 30 days, except records we must legally keep (e.g. tax/payment records — up to 7 years).

Passwords are stored hashed with bcrypt. All traffic uses HTTPS. Data is hosted on servers in Indonesia. If you access Decalyze from outside Indonesia (for example, from the European Economic Area or the United Kingdom), your data will be transferred to and processed in Indonesia, which may have data-protection laws different from your own. We rely on appropriate contractual and technical safeguards for these transfers. Internal access is restricted to authorised staff on a need-to-know basis.

Decalyze is not intended for anyone under 18. If we learn we have collected data on a minor we delete it immediately.

If we make a material change we'll update the "Last updated" date at the top and, for logged-in users, send you an email. Continued use of Decalyze after a change means you accept the updated policy.