01Who we are
SigSig ("SigSig", "we", "us"). Contact for privacy questions: [email protected]. Details of the legal entity that operates SigSig will be added here once it is established.
02Your wallet address
SigSig works with blockchain wallets. A wallet address does not show your name, but it can be linked to you, so we treat it, your Orderly account ID, your username and your trading activity as personal data.
03Website, docs and invite access
| What | Data | Kept for |
|---|---|---|
| Delivering the pages and protecting them against attacks (our hosting provider Cloudflare) | IP address, time, page requested, browser and device type, referrer | Server logs for a few days |
| Invite access, while SigSig is invite-only | Your invite code (as a digest); cookies sig_access, sig_dev, sig_shared; per invite code a list of devices with a random device ID, first and last use and your browser's user agent (first 120 characters) | Cookies up to 90 or 400 days; device list until the invite phase ends, at most 12 months |
| Protection against guessing invite codes | IP address with a counter of failed attempts | 15 minutes |
| Blocking restricted countries | The country Cloudflare derives from your IP address, checked on every request; not stored | Not stored |
Fonts, scripts and images of the website and docs are served from our own servers. The website and docs use no analytics.
04The app
| What | Data | Who processes it |
|---|---|---|
| Your confirmations | That you accepted the Terms, the risk note and the eligibility confirmation, with the version and time | Your browser and, once you are signed in, our server |
| Wallet connection | Wallet address, network, wallet type | Your browser; WalletConnect / Reown for mobile wallets |
| Email, Google or X sign-in | Email address or social account ID, the wallet created for you | Privy, which also secures the embedded wallet key |
| Trading account | Orderly account ID, the public part of your trading key, orders, positions, balances, deposits, withdrawals, your IP address for Orderly's region check | Orderly Network; deposits, withdrawals and settlement are public on the blockchain |
| Blockchain reads | Wallet address, the networks and tokens you look at, IP address | Public blockchain access points (RPC providers such as PublicNode, dRPC, Blast API, BNB Chain, and Alchemy through our server) and CoinGecko's public token list |
| Account settings | Order options, hotkeys, layout, favourites, chart settings, sounds, Risk Mode settings, your Risk Controls rules, your cookie choice and its date, linked to your Orderly account ID | Us, stored at Cloudflare |
| Sign-in to our server | Orderly account ID, wallet address, a session cookie; your public trading key is checked with Orderly but not stored | Us, stored at Cloudflare |
| Spot swaps | Wallet address, networks, tokens, amounts, US dollar values, fee, network fee, status, transaction hashes | Relay (through our server) and us; the swap itself is a public blockchain transaction |
| Fees and VIP levels | 30-day futures and spot volume, your balance on SigSig (checked at random times), VIP level, fee rate, history of level changes, notes on individual arrangements | Us; the fee rate is set at Orderly |
| Sig² Points | Per wallet and day: futures and options volume (taker and maker), realized profit or loss, fees; weekly scores, points, rank, adjustments with reasons | Us |
| Invites and referrals | Which code you joined with, who invited you and when; your referral network (referrer, volume, commission) | Us and Orderly's affiliate system |
| Partner statistics | Deposits and withdrawals per account, read from Orderly's public blockchain records and linked to the referral network | Us. Partners see deposits and withdrawals of their network only as totals |
| Rankings | Shortened wallet address, volume, realized PnL (leaderboard); shortened wallet address and points (points ranking, top 50) | Visible to other users of the app |
| Usage statistics | Pages and actions in the app, device and browser data, a device ID | Only after you click "Accept": Orderly's analytics (Amplitude), Privy, WalletConnect / Reown |
| Support and requests | Your email address or Telegram account, UID, what you write and send us (for example screenshots for a VIP upgrade request) | Us, via Google Workspace (email) or Telegram |
| Administration | Access by authorised administrators to the account data above (trading volume, fees, referrals, invite codes, points); every administrative action is logged | Us |
What partners see. If you joined through a referral code, the partner who owns the code can see in Orderly's affiliate dashboard that you joined, together with your wallet address and statistics such as your trading volume and the commission earned from you. Partners may use this only for the programme.
05The Trollbox
The Trollbox is a public chat for signed-in users. Your username and a shortened wallet address are shown with every message.
| What | Data | Kept for |
|---|---|---|
| Profile | Username, when you first signed in and set or changed it, badges, mute status, recent GIFs and chat preferences | Until you ask us to delete it, or 24 months after your last sign-in |
| Messages | Text, time, room, replies, mentions, GIF address, your badges at the time | 7 days, then deleted automatically |
| Position cards | Market, side, leverage, size, entry price, mark price, PnL, fetched from Orderly only when you choose to share | 7 days, like messages |
| Moderation log | Which administrator deleted or muted whom, and when | 90 days |
| Abuse protection | IP address for sign-in rate limits, counters per account | Minutes |
GIFs are loaded directly from KLIPY when they are shown, so KLIPY sees the viewer's IP address and browser. GIF searches go through our server, so KLIPY does not see who searched.
07Service providers and other recipients
We share data only where needed to run SigSig:
- Orderly Network: order book, accounts, settlement, fees, affiliate system; analytics via Amplitude only with your consent.
- Cloudflare: hosting, servers, databases, backups, security and rate limiting.
- Privy: email and social sign-in, embedded wallets.
- WalletConnect / Reown: connecting mobile wallets.
- Relay: spot swap quotes, routing and swap history.
- Blockchain access providers: PublicNode, dRPC, Blast API, BNB Chain, Alchemy; CoinGecko for token lists.
- KLIPY: GIF search and display.
- Google Workspace: email. Telegram: if you contact us there.
- Partners in the referral programme, as described in section 4.
- Other users: what you post in the Trollbox and what appears in rankings.
- Authorities, where the law requires it.
Several of these providers are based in the United States or other countries, so your data may be processed outside your country. We do not sell personal data and do not use it for advertising.
08Blockchain data
Deposits, withdrawals, settlement and spot swaps are recorded on public blockchains. Anyone can see them, and nobody, including us, can change or delete them. When we read such records (for example for partner statistics), we only use them for the purposes in this policy.
09Backups
Our account database is backed up automatically. Weekly copies are kept for 12 weeks, and the database can be restored to any point in the last 30 days. Data deleted from the live database disappears from backups when they expire.
10How long we keep data
| Data | Kept for |
|---|---|
| Trollbox messages and position cards | 7 days |
| Moderation log | 90 days |
| Sign-in sessions | 30 days |
| VIP level history | 180 days |
| Profile, settings, cookie choice, confirmations | Until you ask us to delete them, or 24 months after your last sign-in |
| Points, VIP and referral records | While the programme runs, then 24 months; commission records as long as accounting law requires |
| Spot swap history and partner deposit/withdrawal statistics | 24 months |
| Invite device lists | Until the invite phase ends, at most 12 months |
| Support emails | 24 months after the request is closed |
Data held by Orderly, Privy and other providers follows their own retention rules.
11Your choices and requests
You can ask us for a copy of your data, to correct it or to delete it, and you can withdraw your consent to usage statistics at any time under Settings › Privacy. Write to [email protected] and tell us your wallet address. To protect your data, we may ask you to prove that you control the wallet, for example by signing a message. We cannot delete data that is recorded on a blockchain or held by Orderly or other providers; we will tell you whom to contact. Depending on where you live, you may have further rights under your local law.
12Automatic decisions
Your VIP level, and therefore your trading fee, is calculated automatically from your trading volume and balance. Points are calculated automatically; reductions for abuse are reviewed by a person. You can ask us to review any of these decisions.
13Security
We never receive your seed phrase or private key. Our servers only accept requests from signed-in accounts for their own data, administrator access needs an additional passkey, sign-in cookies are HttpOnly and secure, and connections are always encrypted. No system is perfectly secure; protect your wallet, email and devices.
14Children
SigSig is not meant for anyone under 18. We do not knowingly process data of minors.
15Changes
We update this policy when SigSig changes. The date at the top shows the current version; significant changes are pointed out in the app.