Privacy notice

Updated 8 October 2026

Scope and purpose

This is Ruben's private, single-owner trading dashboard. It has no public registration, customer accounts or public investment service. This notice covers this dashboard, not the exchange's services.

Information and recipients

The application processes login submissions, request metadata (including IP addresses for security), security events, and the owner's exchange balance, positions, orders, trades and operating records. These support access control, trading, accounting, troubleshooting and research.

Cloudflare hosts the application and database and processes requests. Polymarket US receives authenticated exchange requests and processes trading activity under its own policies. Authorized maintenance systems process operational records. The daily analysis workflow sends account and trading summaries to configured AI providers and stores reports in a private GitHub repository. Provider selection and provider-side retention depend on the operator's configuration and agreements; this notice does not promise zero retention or a particular storage country.

Cookies and browser storage

The essential first-party pb_auth cookie keeps the owner signed in. It is Secure, HttpOnly and SameSite=Strict, with a browser lifetime of 30 days. Logout clears it in that browser; changing the dashboard password invalidates existing tokens. The application does not include advertising pixels or analytics scripts. Its service worker clears legacy application caches rather than storing private pages for offline use.

Retention

Application cleanup targets 7 days for operational logs, 90 days for balance snapshots (older snapshots are reduced in detail), 60 days for research observations and resolved market records, and 24 hours for duplicate-attempt records. Cleanup depends on successful execution and is not an exact deletion deadline. Trading records and configuration have no automatic expiry. Private repository history, backups and provider-held records can outlast application cleanup; their deletion periods are not verified here.

Control and requests

The owner controls access and can request review, correction, export or deletion through the existing private operator communication channel. There is no self-service deletion or export interface. Applicable access, correction, deletion, objection and complaint rights are not waived by this notice; their availability depends on applicable law. Records may need to be retained for accounting, security or legal obligations. Do not send passwords or exchange keys in a request.

A public legal contact and full provider retention inventory have not yet been confirmed. This tool is not offered for public signup; those details require review before access is expanded.