Privacy Policy of the Snapback Service

Version 2026-10-06 · Updated 06.10.2026

This policy explains what personal data the Snapback service (https://snapbackbot.com) processes, for what purpose and for how long. Version: 2026-10-06. It applies together with the Public Offer.

1. What Data We Collect

Account data:

  • email address;
  • password hash (the password is stored only as an irreversible argon2 hash; we do not know the password itself);
  • account role and status (for example, awaiting approval or approved), and the dates of creation and approval;
  • interface language;
  • the date and version of the terms you accepted at registration.

Sign-in and recovery data: email confirmation codes (stored as a hash, with an expiry time and an attempt counter) and password reset tokens (stored as a hash).

Trading data:

  • exchange API keys (key and secret) in encrypted form, a flag showing whether it is a test exchange, and the status and date of the last check;
  • Bot settings and the results of testing them on historical data (backtest);
  • positions and trades, and their executions (prices, volumes, fees, result, funding, exit reasons, time).

Notification data: your Telegram chat identifier (chat id), the Telegram linking token and the queue of messages the bot needs to send you.

Logs:

  • a signal log (why a Bot traded or did not trade a particular coin) and a position event log;
  • a log of the trading process itself;
  • an account activity log (audit), which may store the action, its details and the IP address.

Technical request data: IP address, browser data and request times, which inevitably end up in the server's technical logs. For cookies see section 8.

We do not collect identity document data or bank card numbers, and the Service does not receive funds from you.

2. How We Use Data

  • creating an account, signing in, confirming email, recovering a password;
  • carrying out your trading configuration: connecting to the exchange, placing orders, protective stops and take-profits, recording trades;
  • Telegram notifications and emails with codes;
  • security, preventing abuse, resolving technical problems and handling complaints;
  • keeping proof of your acceptance of the terms;
  • website traffic analytics, only with your consent (see section 8).
  • Performance of a contract: processing account data, keys, settings and trading data, without which the Service cannot be provided.
  • Consent: acceptance of the terms and this policy at registration, connecting Telegram, and the use of analytics cookies.
  • Legitimate interest: security of the Service, preventing fraud and abuse, technical logs.
  • Compliance with legal obligations, should any arise.

4. Who We Share Data With

We do not sell personal data. Data may be processed by:

  • an email service used to send emails with codes (your email address and the text of the message);
  • Telegram, to which messages for you are sent (the chat and the text of the message);
  • a hosting provider whose servers run the Service and the database;
  • the Binance exchange: through your API key the Service contacts the exchange to place orders and to get information about your account. Data processing on the exchange is governed by Binance's rules;
  • Google Analytics: only if you accepted analytics cookies in the banner;
  • public authorities, where required by law.

5. Retention Periods

  • The signal log, the position event log and the process log are kept for 15 days (a Service setting), after which old records are deleted automatically.
  • All other data (account, keys, Bot settings, positions and trades, Telegram link) is kept until you delete your account. After the account is deleted, the related data is deleted, except for data that we are required to keep, or have a legitimate interest in keeping, for longer (for example, the activity log for security purposes), and only for as long as necessary.
  • The account activity log (audit) may remain without a link to the deleted account.

6. Your Rights

You may: access your data, correct it, obtain a copy of it (export), request its deletion, restrict or object to its processing, and withdraw consent (this does not affect the lawfulness of processing before withdrawal). The account settings page will have a button for exporting data and deleting the account. Until it appears, send your request to [email protected]. You also have the right to lodge a complaint with the data protection authority in your country.

7. Security

  • API keys are stored only in encrypted form; the encryption key is stored separately from the database.
  • Passwords are stored only as an argon2 hash.
  • The database enforces row-level access control: queries from the web application see only the current user's data.
  • Only authorized persons have access to the servers and data.
  • We recommend creating an API key without withdrawal permission and, if the exchange supports it, restricted to specific IP addresses.

No system is absolutely secure, so we cannot guarantee complete data security.

8. Cookies

The Service uses cookies and similar technologies. See the Cookie Policy for details.

9. Age

The Service is intended for people aged 18 and over. We do not knowingly collect data from minors. If you learn that a minor has registered, tell us and we will delete the account.

10. International Data Transfers

The providers named in section 4 (including Telegram, Google and the exchange) may process data in countries other than yours. We transfer data only to the extent needed to provide the service, and rely on the safeguards required by applicable law.

11. Users in the European Union

If you are in the EU, the General Data Protection Regulation (GDPR) applies to the processing of your data. You can exercise the rights described in section 6 by contacting us. For all other users, the personal data protection law of their country applies to the extent it is mandatory.

12. Changes to this Policy

The Snapback service reserves the right to change this policy and the terms of the Offer. The new version, with its date, is published on the website; we will notify users of changes on the website, by email or in Telegram.

13. Contact

For questions about data processing, write to [email protected].