Privacy Policy

AlphaGoat.fun is run by [operator’s legal name], [operator’s postal address], which is responsible for the personal data described here. Write to [contact email address], or open a support ticket on our Discord, about anything in this policy.

• Your account: username, email address and when it was confirmed, a hash of your password (never the password itself), and when the account was made and last signed in to.
• The ways you sign in: for a linked Telegram or Discord account, its id, username and display name; for a Solana wallet, its address.
• Sessions and security: for each signed-in device, the browser, IP address, sign-in method and times. To keep plans to one person and enforce device limits, we also log the address, network and device of requests to the feed, how long connections stay open, and the codes redeemed.
• Orders and payments: the plan, amount, asset, status, the address made for the order, the blockchain transactions that paid it, and any refund. Payments on Solana are public; the paying wallet can be seen there by anyone.
• Support: the tickets you open, on the web or through our Telegram or Discord bots, and their messages.
• Settings: muted sources, trading terminals, email preferences, and wallet alerts (the Telegram chat or webhook they go to, and the wallets you follow).
• Emails we send you: receipts, notices that a plan started or is ending, and what they said.

• To run your account and give you the plan you bought (the agreement in our terms).
• To keep the service secure, stop accounts and plans from being shared, and trace copies of the feed to the account they were shown to (our legitimate interest in protecting the service and its customers).
• To keep a record of payments and refunds (our legal and accounting obligations).
• To email you about your account and plan. The reminder before a plan ends can be turned off on your profile.

We don’t sell your data or use it for advertising. These providers handle it for us:

• Cloudflare hosts this site and the app, protects them from attacks, and runs Turnstile, the check that you are not a bot at sign-up and sign-in. On this site it may count page views without cookies.
• Maileroo sends our emails.
• Telegram and Discord, when you sign in with them, link them, or use our bots there: they see what you do on their platforms, under their own privacy policies.
• The Solana network, through the providers we read it with, to see your payment arrive.

We may also share data when the law requires it, or to deal with fraud or a breach of our terms.

We use no advertising or tracking cookies. The app sets only the cookies it needs to keep you signed in:

• alpha_session and alpha_refresh: your sign-in. They can’t be read by scripts, and go when you sign out or the session ends.
• alpha_discord_state: for the few minutes of a Discord sign-in, to check it is the one you started.
• Cloudflare Turnstile may store what it needs for its check while it runs.

The app also keeps your display settings in your browser’s storage (such as the sidebar, sounds, a pinned caller and the translator), and who is signed in so the page opens quickly. It stays on your device. This site sets no cookies of its own.

On your profile in the app, “Download my data” gives you a file with everything above that we hold about you (once an hour). “Delete my account” deletes it at once, once you confirm it is you; it can’t be undone, and a plan you had ends without a refund. It waits while a payment is being processed, or while part of a payment is still to be settled with staff.

Deleting removes:

• your account, sessions and every way you sign in (your linked Telegram and Discord lose the plan they had through it);
• your plan, settings, muted sources, wallet alerts and followed wallets, and the emails we sent or had queued.

We keep, without your name or contact details:

• orders and payments, as our record of money received and refunded;
• which codes were redeemed, and the security and audit logs, by account number only;
• support tickets, signed “Deleted account”;
• a ban, if the account was banned (staff handle deleting a banned account);
• the link between a bot user and the account, so the bots can take back what it gave.

Backups still hold deleted data until they are replaced, after [number of days backups are kept] days. You can also ask us, through a ticket or by email, to correct your data or to tell you what we hold.

We keep your data while you have an account. Security logs of requests to the feed are deleted after about 90 days. What we keep after a deletion is listed above.

Depending on where you live, you may have the right to see, correct, delete or take a copy of your data, to object to how we use it, and to complain to your data protection authority. Most of this you can do yourself on your profile; for the rest, contact us as above.

AlphaGoat.fun is not for anyone under 18, and we don’t knowingly hold their data.

The date at the top says when this policy last changed. We tell you of a change that matters on our Discord or by email.