Privacy policy

Last updated: 28 September 2026

PerpyX is an independent project, not affiliated with Bybit. This page explains what data we handle on this website and in the PerpyX app, and why. The short version: we collect only your email address when you join the beta, and the app keeps your exchange API keys on your phone.

Who is responsible

The data controller is the developer of PerpyX. You can reach us at [email protected] with any question or request about your data.

Beta signup

When you join the beta, we store:

• your email address,
• the date and time you signed up and gave consent.

We use it only to invite you to the beta and to send you occasional important updates about PerpyX. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by emailing us or using the unsubscribe link in any email we send. We don't sell or share your email with anyone for marketing.

We keep your email until you unsubscribe or ask us to delete it, and in any case no longer than 24 months after your last contact with us.

Hosting and service providers

This website and the signup list are hosted by Cloudflare, Inc., which acts as our processor. Like any web host, Cloudflare processes technical data such as your IP address to deliver the site and protect it from abuse; we do not store IP addresses with your signup. Cloudflare may process data outside the EU under the EU Standard Contractual Clauses and the EU–US Data Privacy Framework.

No cookies, no tracking

This website uses no cookies, no analytics and no third-party scripts or fonts.

The PerpyX app

• Your Bybit API key and secret are stored only on your device. They are never sent to us.
• Requests to Bybit are signed on your device; only the signature is sent to Bybit, not the secret.
• The app talks to Bybit directly. Your positions, balances and orders are not sent to us. Your drawings, alarms and settings are stored on your device.
• PerpyX works with read-only keys and cannot place orders.

If a future version adds features that need a server (for example push notifications for alarms while your screen is off), we will update this policy before they launch and explain exactly what is sent. API keys will stay on your device.

Your rights

Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw your consent at any time. To exercise any of these rights, email [email protected]. You also have the right to lodge a complaint with a data protection authority — in the Czech Republic that is the Office for Personal Data Protection (ÚOOÚ), or the authority in your own EU country.

Changes

If we change this policy, we'll update the date above. If a change affects how we use your email, we'll tell you by email first.