Privacy Policy

1. Introduction

BitByte24 ("we", "us", "our") operates the bitbyte24.com website and the BitByte24 mobile application. This Privacy Policy explains how we collect, use, and safeguard your information when you use our services.

2. Information We Collect

Account Information: When you register, we collect your email address and authentication tokens provided by our third-party identity provider.

Device Information: We collect a device fingerprint (a hash of screen size, timezone, and platform) to detect same-device reconnections and prevent unauthorized session sharing. This fingerprint cannot identify you personally.

Usage Data: We log connection timestamps, IP addresses (for rate limiting and abuse prevention), and aggregated usage metrics. We do not track individual browsing behavior.

3. How We Use Your Information

• Authenticate your identity and manage your session
• Deliver real-time market data via Server-Sent Events (SSE)
• Enforce single-device session limits
• Protect against abuse, fraud, and unauthorized access
• Send service-related notifications (e.g., session expiry)

4. Data Storage & Security

Your data is processed on servers located in the European Union. We use TLS encryption for all data in transit, helmet security headers, and rate limiting to protect our services. Authentication tokens are stored securely — in httpOnly cookies (web) and device Secure Store (mobile app).

5. Third-Party Services

We use the following third-party services:

• Logto — authentication and identity management
• Cloudflare — CDN, DDoS protection, and DNS

We do not sell your data to third parties. We do not use any advertising or analytics trackers.

6. Cookies

We use only essential cookies required for authentication. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Export your data in a portable format
• Withdraw consent and delete your account

To exercise these rights, contact us at r/bitbyte24 or email [email protected].

8. Data Retention

We retain your account data for as long as your account is active. Session logs and IP addresses are automatically purged after 30 days. If you delete your account, all associated data is removed within 14 days.

9. Children's Privacy

Our services are not intended for users under the age of 16. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via the app or email. Continued use of our services after changes constitutes acceptance.

11. Contact

If you have questions about this Privacy Policy, reach out to us at r/bitbyte24