# Privacy Last updated: [PRIVACY: date of publication] The short version: this site sets no tracking cookies, runs no analytics and loads nothing from third parties. The addresses and rules you enter stay in your browser. Nothing you type into the backtest, the watch step or the rules is ever sent to us. ## Who is responsible orcastrate UG (haftungsbeschränkt), Plinganserstr. 55, 81369 München, Germany. Email: legal@zunderlabs.com. See the [Impressum](https://zunderlabs.com/impressum) for the full legal details. ## Hosting The site is a set of static files served by Cloudflare Pages. To deliver them and to protect the service, Cloudflare processes technical connection data such as your IP address, the time of the request, the page requested and your browser's user agent. The legal basis is our legitimate interest in delivering a secure website (Art. 6 (1) (f) GDPR). [PRIVACY: confirm Cloudflare's data processing agreement and log retention, and name the transfer mechanism for data processed outside the EU.] ## Cookies and tracking This site sets no tracking cookies and uses no analytics, advertising or tracking services. The fonts are served from this site, not from a third party. ## What stays in your browser - **Rules and your chosen platform.** When you change a rule or pick an install platform, the site saves it in your browser's local storage (key `zunder.v1`) so it is still there next time. It is never sent to us. The "stored only in this browser · clear" control next to these settings deletes everything stored; clearing your browser's site data does too. - **Addresses.** A Hyperliquid address you enter on the backtest or watch step is kept in the page's memory only and is gone when you leave. It is saved in local storage only if you tick "remember this address on this device"; untick it to remove it again. - **Share links.** "Copy share link" puts your rules into the part of the link after `#`. Browsers do not send that part to the server. - **Notifications.** If you turn on "notify me when a rule breaks" in the watch step, your browser asks for permission and shows the notifications itself. Nothing passes through us. ## Hyperliquid The market view, the backtest and the watch step connect your browser directly to Hyperliquid's public API (api.hyperliquid.xyz): to read public trades and the public accounts of the traders behind them, and, if you enter one, the public history of an address. Hyperliquid then receives your IP address and the requests your browser makes, under its own terms. We do not see them. Traders shown in the market view are anonymised in your browser (a short code from a hash with a random value that changes every visit); their addresses are never shown. ## Waitlist If you join the waitlist, the form sends your email address to our waitlist service (a Cloudflare Worker run by us). We email you a confirmation link; only a confirmed address is on the list. We store the address, the page the form was on, the version of the consent wording and the times you signed up and confirmed, and nothing else: no IP address, no name, no tracking pixel. Unconfirmed requests are deleted after 7 days. Every email has a link that deletes your entry. The legal basis is your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time. [PRIVACY: email provider for the confirmation emails, once chosen.] ## Contact form The [contact form](https://zunderlabs.com/contact) sends your message, your email address and, if you give it, your name to the same service, which forwards it to us by email. We use it only to answer you and delete it when the conversation is over, unless the law requires us to keep it. The legal basis is our legitimate interest in answering your enquiry (Art. 6 (1) (f) GDPR), or steps before a contract you ask for (Art. 6 (1) (b) GDPR). ## Your rights You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and the right to withdraw consent at any time. You can also lodge a complaint with a data protection supervisory authority, for example the one in your state of residence or [PRIVACY: the authority responsible for orcastrate UG].