Privacy Notice / KVKK Information
Contracting operator / data controller
CryptoTech LLC.
Amsterdam, The Netherlands
support@shortwatch.online
1. Controller and scope
The operator identified below is the controller for membership, account security and service operations. This notice applies to visitors and members. It is information about processing, not a blanket consent to every use of data.
2. Data and purposes
We process email address, password hash, verification/reset tokens, encrypted API credentials, account identifiers, selected profiles and settings, order/fill/balance records, consent versions, security/session records, support correspondence and subscription status. Purposes include account creation, identity and access security, executing authorized trades, reporting performance, providing support, meeting contractual and legal duties and preventing misuse.
3. Legal bases
Core account and execution processing is intended to rely on necessity for entering or performing the service contract, applicable legal obligations and legitimate security interests where those bases are available. Any processing requiring separate consent must use a distinct optional consent rather than bundling it into this notice. Final KVKK/GDPR mappings and balancing assessments must be completed for the actual operator and markets.
4. Recipients and international processing
Trade instructions and identifiers are transmitted to Binance. Hosting, infrastructure and email providers process service data as needed. Payment-provider data flows will be documented before billing is enabled. Amsterdam hosting and the exchange or other providers may involve international transfers. The operator must identify actual recipients and implement applicable KVKK/GDPR transfer mechanisms; acknowledging this notice alone is not a transfer mechanism.
5. Security and retention
Credentials are encrypted at rest; passwords are hashed; browser sessions use secure cookies. Credentials are never returned to the browser after saving. Operational records are retained while necessary for the contract and reasonable dispute/security needs, with statutory retention where applicable. Session/token and delivery data are periodically cleaned. Detailed legal retention periods and backup expiry must be finalized and documented before launch.
6. Rights and contact
Depending on applicable law, you may request information, access, correction, deletion or restriction, object to processing, request portability, withdraw optional consent and complain to the competent authority, including Türkiye’s Personal Data Protection Authority where applicable. Contact the controller below; identity verification may be required. Deletion requests do not remove statutory retention obligations or close exchange positions automatically.
7. No sale or optional tracking
This release includes no advertising trackers, marketing email subscription or sale of member data. If those features are added, the notice and required consent choices must be updated first.