Privacy policy

Kryptonz · last updated 30 September 2026

In short

To have an account we keep your name, email address and a scrambled form of your password, and a record of when and from where you signed in.
We do not sell your data, show advertising, or run analytics or tracking scripts.
You can delete your account yourself, at any time, in Settings.
Kryptonz explains what markets are doing; it is not financial advice, and nothing you do here places a trade.

Who is responsible

Kryptonz is run by kryptonzlab. Questions, or a request to see, correct or delete your data: [email protected].

What we collect, and why

What	Why
Name and email address	To create your account, send you the confirmation and approval emails, and let an administrator recognise a request.
Password	To let you sign in. Only a one-way scrambled form (scrypt) is stored; nobody, including us, can read your password.
Address (IP) and browser at sign-up and at each sign-in	To keep the account secure: to show you where you are signed in, to spot abuse, and to let an administrator see a request is genuine.
A record of account events	Sign-ins and failures, approval, password changes and resets, who did what to an account. It is our security trail.
A profile picture and display name, if you add them	So the chats can show who is talking. The picture is a small square (at most 100 KB) kept with your account, and every signed-in member can see it with your name; take it off, or empty the name, in Settings. Both are removed when you delete your account.
Account notices: a sign-in from a new device (with its browser and address), a password change, a change to your access	To tell you when something happens to your account that you might not have done yourself. Shown on your Notifications page; a short version is sent to your phone if notifications are on.
Messages you send to support, and the replies	So the administrators can answer you and you can read the conversation again. Visible to you and to the administrators only. A reply also shows on your Notifications page; the push to your phone only says that a reply arrived, not what it says.
Messages you post in the community chat (with the name on your account), and any report you make about somebody else's	So members can talk to each other, and moderators can deal with abuse. Every signed-in member can read a message; a report is seen by moderators only. A moderator can delete a message and mute a person.
Direct messages you send and receive, who you block, and any message you report	So two members can talk privately. Only the two of you can read a conversation, and see the pictures and voice notes in it (kept with the message, in our database); if you report a message, a moderator sees that message, with its picture or voice note, and nothing else of the conversation. A first message is a request the other person can decline or block.
Price alerts you set (coin, direction, target price)	So an alert can fire when no page is open and reach your phone. Kept until you remove it; a fired one is removed after 30 days. The alert's words (coin and prices) go through Apple or Google if you have notifications on.
If you turn on two-step sign-in: the secret your authenticator app shares with us, and your recovery codes	So we can check the code you type when you sign in. The secret is stored encrypted with a key that is not in the database, and the recovery codes only as one-way fingerprints. Removed when you turn two-step sign-in off or delete your account.
Your chart layout, indicator settings, Pine scripts and strategies	So your charts look the same, and your scripts are there, on every browser and phone you sign in on. Kept until you change or remove them, and removed when you delete your account. A script is stored as you wrote it; it is not run on our servers.
Coins you star (your watchlist)	So the same stars show on every browser and phone you sign in on. Kept until you un-star them, and removed when you delete your account.
What you say, if you press the microphone in Tej's chat	To turn your question into text. Your browser does this, not us: Chrome and Edge send the audio to their maker's speech service, and nothing is recorded or kept by Kryptonz.	Your browser's speech service.
A notification token, if you turn notifications on in the phone app	To send a notification to your phone. It is tied to that sign-in and removed when you sign out, turn notifications off or delete your account.
What you type into AI Copilot or ask the AI to analyse, and any text file you drop on Tej to ask about	To get you an answer. It is sent to the AI service (see below) and is not kept on our servers afterwards.

We collect nothing else about you, and no payment details: Kryptonz has no payments.

Kept in your browser, not sent to us

Settings that only make sense on one device (the theme, the sidebar, where Tej sits, sound and voice) are saved in your own browser (local storage) so they are there next time. They stay on your device and we cannot read them. Clearing your browser data removes them.

Cookies

One cookie, used only to keep you signed in (__Host-kz_session). It is set when you sign in, cannot be read by scripts on the page, and is removed when you sign out. We do not use advertising or analytics cookies.

Who else handles your data

We use these services to run Kryptonz. Each gets only what it needs.

Service	What it does	What it sees
Render	Hosts the app and its database (Singapore).	Everything above, stored on our behalf.
Cloudflare	Sits in front of the site (security, delivery) and runs the “are you human” check on sign-up.	Your address and the pages you request; on the sign-up page, signals about your browser.
Resend	Sends our emails (United States).	Your email address, name and the message.
Apple and Google (push notification services)	Deliver notifications to your phone, only if you turn them on.	Your phone's notification token and the notification text.
Telegram	Messages the administrator.	When you ask for an account: your name, email and username. When you ask for a password reset: your name and username.
AI service (Anthropic, OpenRouter or NVIDIA, depending on how the site is set up)	Answers AI Copilot and analysis questions.	The text of what you ask, and market data we add to it — not your name or email.
Binance, Bybit, Finnhub, TradingView	Live prices and embedded charts load straight from them into your browser.	Your address, as with any website you open — they see it because your browser talks to them.

Some of these are outside your country. We do not sell or rent your data to anyone.

How long we keep it

Your account details — as long as you have the account. When you delete it they are removed at once.
Sign-in sessions — until they end, then 30 days.
Notification tokens — until you sign out, turn notifications off or delete your account.
Confirmation and reset links — 30 days after they are used or expire.
Password-reset requests — 90 days after they are answered.
Fired price alerts — 30 days after they fire (alerts still waiting are kept until you remove them, and all go when you delete your account).
Account notices (a sign-in from a new device, a password change, a change to your access) — 90 days after they are written, and at once if you delete your account.
Support messages — kept while the conversation is open; 180 days after its last message once it is settled, and at once if you delete your account.
Community chat messages — 30 days after they are written (reports about them go with them), and at once if you delete your account.
Direct messages — 90 days after they are written, and at once, for both people, if either deletes their account.
Security trail — 400 days, then deleted.
Sign-ups never confirmed by email — removed after 7 days.
Server logs at our host — for the short period the host keeps them.

Your choices

Delete your account: Settings → Delete account (how it works). Your name, email, password and sign-up details are removed. What remains is a security record that an account existed, with your name, address and browser taken out of it.
Change your password and sign out other devices: Settings.
Ask to see or correct what we hold about you: contact us as above.

How it is protected

The site is served over HTTPS. Passwords are stored only as one-way hashes. Sign-in sessions can be ended on the server. Administrators can act on accounts only with the specific permission each action needs, and each action is recorded. No system is perfectly secure, and we cannot promise it is.

Children

Kryptonz is not for anyone under 18, and we do not knowingly hold their data.

Changes

If this policy changes in a way that matters, the date at the top changes and we will tell signed-in users.

Back to sign in

In short

To have an account we keep your name, email address and a scrambled form of your password, and a record of when and from where you signed in.

We do not sell your data, show advertising, or run analytics or tracking scripts.

You can delete your account yourself, at any time, in Settings.

Kryptonz explains what markets are doing; it is not financial advice, and nothing you do here places a trade.

What we collect, and why

What	Why
Name and email address	To create your account, send you the confirmation and approval emails, and let an administrator recognise a request.
Password	To let you sign in. Only a one-way scrambled form (scrypt) is stored; nobody, including us, can read your password.
Address (IP) and browser at sign-up and at each sign-in	To keep the account secure: to show you where you are signed in, to spot abuse, and to let an administrator see a request is genuine.
A record of account events	Sign-ins and failures, approval, password changes and resets, who did what to an account. It is our security trail.
A profile picture and display name, if you add them	So the chats can show who is talking. The picture is a small square (at most 100 KB) kept with your account, and every signed-in member can see it with your name; take it off, or empty the name, in Settings. Both are removed when you delete your account.
Account notices: a sign-in from a new device (with its browser and address), a password change, a change to your access	To tell you when something happens to your account that you might not have done yourself. Shown on your Notifications page; a short version is sent to your phone if notifications are on.
Messages you send to support, and the replies	So the administrators can answer you and you can read the conversation again. Visible to you and to the administrators only. A reply also shows on your Notifications page; the push to your phone only says that a reply arrived, not what it says.
Messages you post in the community chat (with the name on your account), and any report you make about somebody else's	So members can talk to each other, and moderators can deal with abuse. Every signed-in member can read a message; a report is seen by moderators only. A moderator can delete a message and mute a person.
Direct messages you send and receive, who you block, and any message you report	So two members can talk privately. Only the two of you can read a conversation, and see the pictures and voice notes in it (kept with the message, in our database); if you report a message, a moderator sees that message, with its picture or voice note, and nothing else of the conversation. A first message is a request the other person can decline or block.
Price alerts you set (coin, direction, target price)	So an alert can fire when no page is open and reach your phone. Kept until you remove it; a fired one is removed after 30 days. The alert's words (coin and prices) go through Apple or Google if you have notifications on.
If you turn on two-step sign-in: the secret your authenticator app shares with us, and your recovery codes	So we can check the code you type when you sign in. The secret is stored encrypted with a key that is not in the database, and the recovery codes only as one-way fingerprints. Removed when you turn two-step sign-in off or delete your account.
Your chart layout, indicator settings, Pine scripts and strategies	So your charts look the same, and your scripts are there, on every browser and phone you sign in on. Kept until you change or remove them, and removed when you delete your account. A script is stored as you wrote it; it is not run on our servers.
Coins you star (your watchlist)	So the same stars show on every browser and phone you sign in on. Kept until you un-star them, and removed when you delete your account.
What you say, if you press the microphone in Tej's chat	To turn your question into text. Your browser does this, not us: Chrome and Edge send the audio to their maker's speech service, and nothing is recorded or kept by Kryptonz.	Your browser's speech service.
A notification token, if you turn notifications on in the phone app	To send a notification to your phone. It is tied to that sign-in and removed when you sign out, turn notifications off or delete your account.
What you type into AI Copilot or ask the AI to analyse, and any text file you drop on Tej to ask about	To get you an answer. It is sent to the AI service (see below) and is not kept on our servers afterwards.

We collect nothing else about you, and no payment details: Kryptonz has no payments.

Who else handles your data

We use these services to run Kryptonz. Each gets only what it needs.

Service	What it does	What it sees
Render	Hosts the app and its database (Singapore).	Everything above, stored on our behalf.
Cloudflare	Sits in front of the site (security, delivery) and runs the “are you human” check on sign-up.	Your address and the pages you request; on the sign-up page, signals about your browser.
Resend	Sends our emails (United States).	Your email address, name and the message.
Apple and Google (push notification services)	Deliver notifications to your phone, only if you turn them on.	Your phone's notification token and the notification text.
Telegram	Messages the administrator.	When you ask for an account: your name, email and username. When you ask for a password reset: your name and username.
AI service (Anthropic, OpenRouter or NVIDIA, depending on how the site is set up)	Answers AI Copilot and analysis questions.	The text of what you ask, and market data we add to it — not your name or email.
Binance, Bybit, Finnhub, TradingView	Live prices and embedded charts load straight from them into your browser.	Your address, as with any website you open — they see it because your browser talks to them.

Some of these are outside your country. We do not sell or rent your data to anyone.

How long we keep it

Your account details — as long as you have the account. When you delete it they are removed at once.

Sign-in sessions — until they end, then 30 days.

Notification tokens — until you sign out, turn notifications off or delete your account.

Confirmation and reset links — 30 days after they are used or expire.

Password-reset requests — 90 days after they are answered.

Fired price alerts — 30 days after they fire (alerts still waiting are kept until you remove them, and all go when you delete your account).

Account notices (a sign-in from a new device, a password change, a change to your access) — 90 days after they are written, and at once if you delete your account.

Support messages — kept while the conversation is open; 180 days after its last message once it is settled, and at once if you delete your account.

Community chat messages — 30 days after they are written (reports about them go with them), and at once if you delete your account.

Direct messages — 90 days after they are written, and at once, for both people, if either deletes their account.

Security trail — 400 days, then deleted.

Sign-ups never confirmed by email — removed after 7 days.

Server logs at our host — for the short period the host keeps them.

Your choices

Delete your account: Settings → Delete account (how it works). Your name, email, password and sign-up details are removed. What remains is a security record that an account existed, with your name, address and browser taken out of it.

Change your password and sign out other devices: Settings.

Ask to see or correct what we hold about you: contact us as above.