Privacy policy

Last updated 11 October 2026

Blippytrade provides market making and liquidity services to token projects. This page explains what information we hold, why, and how it is protected. We keep it short because we hold very little.

What we collect

• Client account details: the project name, contact email and Telegram chat you give us, and the login email for each person who uses the client dashboard.
• Exchange API keys: trade-only keys a client creates for the market-making account. We ask for keys without withdrawal permission, restricted to our server's IP address.
• Trading records: the orders, fills, balances and market data the service needs to run the book and produce the client's reports.
• Basic security logs: sign-in attempts, used to protect accounts.

We do not use advertising trackers, and we do not sell or rent any information.

How keys and data are protected

• API keys are encrypted at rest and are never shown again after they are added, not even to our staff.
• Keys cannot move funds off the exchange: without withdrawal permission the account can only place and cancel orders. The client keeps custody of their funds at all times.
• Staff access to the console requires two-factor authentication.

Backups

The service database is backed up every night. Copies are encrypted in transit and stored on our server and in a Google Drive account owned by Blippytrade, kept for 30 days and then deleted. Our backup tool can only see the backup files it created in that Drive; it has no access to anything else there.

Who can see it

Each client sees only its own markets, reports and settings. Our desk staff see client data only to run the service. We share information with a third party only when the law requires it.

How long we keep it

Detailed market telemetry is kept for 14 days. Trade records are kept for as long as a client uses the service, so their reports stay complete. When a client leaves, their keys and account data are deleted on request.

Your choices

A client can ask us at any time for a copy of its data, to correct it, or to delete it. Revoking the API key on the exchange immediately stops all access to the trading account.