Privacy Policy

1. Account (optional)

HyperSonnar works without an account. If you choose to open one, you log in through Privy, our login provider, with your wallet (one login signature, never a transaction nor any permission over your funds — only trading on the Trade page and copying, if you use them, have you sign a trading authorization, sections 4 and 5), your e-mail (Privy sends you a code) or your Google account.

What we then keep: your account's Privy identifier, the address of your login wallet if you log in with a wallet (public on the blockchain), the creation and last-visit dates, your preferences (language, theme) and the list of traders you follow. Purpose: running your personal space. Legal basis: performing the service you ask for.

If you log in with e-mail or Google, we do not store your login e-mail: we read it from your login token, when the page is displayed, to show it to you in Settings.

You can also add a Hyperliquid wallet address by hand to display its page. It is public data, read-only (no signature, no access to funds), but it links your account to that wallet: we store it in your account until you remove it or delete the account.

The Settings e-mail, optional and separate from your login e-mail, has a single purpose: telling you when copy trading opens. Legal basis: your consent, which you withdraw at any time by clearing the address in Settings.

Privy (Horkos, LLC), which runs your login on our behalf, is established in the United States: your login data is processed there — your account identifier and, depending on your method, your wallet address, your e-mail, or the e-mail and name Google passes to it. Its privacy policy: privy.io/privacy-policy

A login attempt may create a profile with Privy before we check your access to HyperSonnar. If accounts are still closed and access is denied, that profile is not automatically deleted from Privy, even if no HyperSonnar account is created. You can request its deletion through the contact below.

Retention: as long as the account exists. “Delete my account” (Settings) immediately erases this data here — copies may remain in the server backups until they are replaced — and asks Privy to delete your user; if that request does not go through, the page tells you, and writing to us with your wallet address or your login e-mail is enough for us to do it. For any request (access, correction, erasure): HyperSonnarContact@proton.me. You can also lodge a complaint with the CNIL (the French data protection authority).

2. On-chain data

The wallet addresses and history analyzed by the product are public Hyperliquid blockchain data, readable by anyone. Without an account, HyperSonnar attaches no identity to them. With an account, your wallet address — your login wallet, or the one you added by hand — is linked to your Privy identifier, to your e-mail if you entered one and to the list of traders you follow (section 1).

3. Analytics

The site uses self-hosted Plausible Analytics: cookie-less, aggregated, anonymous audience measurement. No individual profile is built, no data is shared or sold. Your email address is never sent to it.

4. Local storage, trading and direct calls to Hyperliquid

Your preferences (language, theme, chart display) are stored in your browser (localStorage). Without an account, they are never sent to our servers; with an account, the language and theme you choose are also saved in your account.

If you log in, Privy keeps its login session in your browser's local storage (and WalletConnect, if you use it, the link with your wallet). “Log out” erases Privy's session in your browser.

If you enable trading on the Trade page, the trading key your wallet authorized is stored in your browser's local storage (key `hs_agent:…`): it is never sent to our servers, and “Disable”, logging out and deleting the account erase it from this browser. Erasing the key does not revoke its authorization at Hyperliquid: that authorization remains valid until its expiry (90 days), a new activation under the same name or revocation at Hyperliquid.

When the Trade page offers you trading, your browser calls Hyperliquid directly (`api.hyperliquid.xyz`), without going through our servers: for its prices and, if your account is logged in with a wallet, for that account's state and for sending your orders. Hyperliquid then sees your IP address, and your wallet address in the second case.

Likewise, the Portfolio page reads your accounts straight from Hyperliquid in your browser, and the copy window sends it the sub-account creation, the transfers and the copy agent's authorization you sign: Hyperliquid then sees your IP address and your wallet address.

So as not to reread them in full on every visit, the Portfolio page keeps your accounts' latest fills in your browser's local storage (keys `hs_fills:…`): this is public Hyperliquid data, never sent to our servers, and logging out erases it from this browser.

5. Copying

If you copy a trader (optional, for now reserved to authorized accounts, account logged in with a wallet), we store each copy — the copied trader, the sub-account used, your settings and its status — and the log of the orders our engine sends or skips for it. Our engine trades with an agent key that Privy, our provider, creates for your main account: we keep that agent's address, the identifier of its wallet at Privy and your main account's address. While the copy runs, our server reads the state of your sub-accounts at Hyperliquid (public blockchain data). Purpose: running the copy you ask for and showing you its log. Legal basis: performing the service you ask for.

To coordinate a creation or transfer across your devices, we also store a reservation: public addresses of the main account, trader and sub-account, new sub-account name, amount and reference balance for a transfer, dates and status. No key, signature or nonce is stored in this reservation. It is erased when your account is deleted.

Retention: your account cannot be deleted while a copy is not stopped. Once the account is deleted, the copies, their log and the copy agent are not erased: they are detached from your account (no link left to your Privy identifier or your e-mail) and kept as the log of the orders placed; they only contain public blockchain addresses, the identifier of the agent's wallet at Privy, orders and settings. To ask for their erasure: HyperSonnarContact@proton.me.

6. Cookies

The site sets no tracking cookies. If you log in, HyperSonnar sets two session cookies (your login tokens, HttpOnly: unreadable by scripts) and a data-free marker (`hs_compte`): strictly necessary for logging in, they are never used for tracking and are erased when you log out. Privy sets no cookie on this site: its session lives in local storage (section 4).

7. Changes

If the product adds other features involving personal data (alerts, mainnet copying), this page will be updated before they launch.