Privacy Policy

We collect information you provide directly, including your name, email address, and hashed password. When you trade or transact on Tradilium, we also record the details of those trades (coins, amounts, timestamps).

We also collect limited technical information — such as your IP address, browser type, and usage patterns — to secure and improve the service.

• To operate, maintain, and secure the platform.
• To process trades and update your account balance.
• To respond to your support messages.
• To detect and prevent fraud or abuse.
• To comply with applicable legal, regulatory, and tax obligations.

Your password is stored using industry-standard bcrypt hashing — we never see your password in plain text. Session tokens are HTTP-only and signed, preventing common session-hijacking attacks.

All data is transmitted over TLS 1.3. Our database is encrypted at rest, and access to production infrastructure is restricted to a small number of authorized engineers.

We don't sell your data. We share it only in these limited cases:

• With service providers who process data on our behalf under contract.
• When required by law, subpoena, or court order.
• To protect the rights, property, or safety of Tradilium, our users, or the public.

You have the right to access, correct, or delete your personal information. To exercise these rights, contact us at privacy@tradilium.com.

We use a single, essential HTTP-only cookie to maintain your logged-in session. We don't use third-party tracking cookies.

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice before they take effect.

Questions? Email privacy@tradilium.com.