Privacy policy

01Who is responsible

Aliyan Nasir, trading as Trendr, registered in Karachi, Pakistan, operates the website at trendr.bid and the app at app.trendr.bid and is responsible for the personal data described here. Contact us about privacy at contact@trendr.bid.

02The short version

You do not give us a name, email address or phone number to use Trendr. We only have your email if you join the Mainnet waitlist, and we use it for nothing else.
Your account is a passkey on your device. The passkey never reaches us.
We identify you by your account address on Monad, which is public, like every transaction on a blockchain.
Notes and strategies in your vault are encrypted on your device. We only store ciphertext.
This website uses no cookies, analytics or advertising trackers. See the cookie policy.

03This website

trendr.bid is a static marketing site. It sets no cookies, runs no analytics and loads no third-party trackers. Like any website, its hosting provider receives technical request data (IP address, browser type, page requested and time) to deliver pages and protect the service from abuse, and keeps it in short-lived server logs. Its only form is the Mainnet waitlist, which sends what you enter to the Trendr backend.

04What the app and backend store

When you use the app at app.trendr.bid, the Trendr backend stores the following:

Data	Why	Kept
Account addresses: your smart account address and the addresses of keys it has authorised (trading session keys, Autopilot grant keys).	To sign you in, attach your rules, follows and posts to your account, and check permissions on chain.	While your account uses Trendr.
Sign-in tokens: short-lived tokens issued after your account key or session key signs a request.	To keep you signed in. Each request is re-checked on chain. Revoked tokens are recorded by their hash so they stop working.	Until they expire.
Follows and rules: accounts you copy-trade and their settings; Autopilot rules, backtests, grants, positions, orders and an audit log of what they did.	To run copy-trading and Autopilot for you and show you their history.	While your account uses Trendr. You can stop rules and follows at any time.
Push subscriptions: the push endpoint and keys your browser creates, and the topics you choose.	To send the notifications you turned on.	Until you turn notifications off or the endpoint stops working.
Vault: strategies and notes, sealed on your device with AES-GCM before upload.	To sync them across your devices. We store only ciphertext and cannot read it.	Until you delete them.
Social content: posts and calls you publish, with their signatures.	To show them in the feed. They are public to other users.	Until removed.
Links you submit for the radar to consider.	To review them as possible trends.	As long as the radar needs them.
Faucet and activation records: account, amount and transaction of test-token drips; the IP address that asked to activate an account.	To share test tokens fairly and stop abuse of sponsored gas.	Activation records expire; faucet records are kept to enforce limits.
Deposits (Mainnet only): the deposit address Aurora gives you and its status.	To track a deposit from another chain until it arrives.	While the deposit is open, then as a record.

Data: Account addresses: your smart account address and the addresses of keys it has authorised (trading session keys, Autopilot grant keys).
Why: To sign you in, attach your rules, follows and posts to your account, and check permissions on chain.
Kept: While your account uses Trendr.

Data: Sign-in tokens: short-lived tokens issued after your account key or session key signs a request.
Why: To keep you signed in. Each request is re-checked on chain. Revoked tokens are recorded by their hash so they stop working.
Kept: Until they expire.

Data: Follows and rules: accounts you copy-trade and their settings; Autopilot rules, backtests, grants, positions, orders and an audit log of what they did.
Why: To run copy-trading and Autopilot for you and show you their history.
Kept: While your account uses Trendr. You can stop rules and follows at any time.

Data: Push subscriptions: the push endpoint and keys your browser creates, and the topics you choose.
Why: To send the notifications you turned on.
Kept: Until you turn notifications off or the endpoint stops working.

Data: Vault: strategies and notes, sealed on your device with AES-GCM before upload.
Why: To sync them across your devices. We store only ciphertext and cannot read it.
Kept: Until you delete them.

Data: Social content: posts and calls you publish, with their signatures.
Why: To show them in the feed. They are public to other users.
Kept: Until removed.

Data: Links you submit for the radar to consider.
Why: To review them as possible trends.
Kept: As long as the radar needs them.

Data: Faucet and activation records: account, amount and transaction of test-token drips; the IP address that asked to activate an account.
Why: To share test tokens fairly and stop abuse of sponsored gas.
Kept: Activation records expire; faucet records are kept to enforce limits.

Data: Deposits (Mainnet only): the deposit address Aurora gives you and its status.
Why: To track a deposit from another chain until it arrives.
Kept: While the deposit is open, then as a record.

The relayer that pays your gas also keeps per-account and per-IP limits in memory. They reset when it restarts.

05The Mainnet waitlist

Trendr runs on Monad Testnet today. If you join the waitlist on this website or in the app, the Trendr backend stores:

your email address;
the Trendr account address you chose to link, if you joined in the app while signed in and left “Link my Trendr account” on;
when you joined (and when you last joined again), and whether you joined on the website or in the app;
that you agreed to the launch email, and whether you were invited or unsubscribed;
a keyed hash of the network address you joined from, used only to stop abuse of the form. The address itself is not stored.

Purpose. To email you when Trendr launches on Monad Mainnet and to invite you to its beta. We send nothing before then, we do not add you to other lists, and we never sell or share your email for marketing.

Legal basis. Your consent, given by ticking the box when you join. You can withdraw it at any time.

Retention. Until the Mainnet launch and its beta invitations are done, and at most 12 months after the launch. We delete your entry sooner if you unsubscribe or ask us to.

Unsubscribe or delete. Every email we send has an unsubscribe link. To leave the list or have your entry deleted at any time, write to contact@trendr.bid from the address on the list.

The list is kept in the backend's database, run by our hosting provider. When we send the launch email, an email delivery service receives your address only to deliver it.

06What stays on your device

Some data never leaves your browser. It is listed in the cookie policy, and includes:

your passkey, held by your device or password manager;
your trading session key and the keys that open your vault, encrypted under non-extractable browser keys in IndexedDB;
your sign-in token (session storage, cleared when you close the tab);
your theme, notification topics, a local record of series you traded, and the email you joined the Mainnet waitlist with, if you did (local storage).

07Public blockchain data

Your trades, balances and account settings on Monad are public and permanent. Anyone can read them, and Trendr indexes them with Envio to build portfolios, track records, volumes and leaderboards. We cannot change or delete data on a blockchain.

09Legal bases

Where data protection law such as the GDPR applies, we process data to provide the service you ask for (contract), to keep Trendr secure and prevent abuse (legitimate interests), to send notifications you turned on (consent, which you can withdraw at any time by turning them off), and to email you about the Mainnet launch if you joined the waitlist (consent, which you can withdraw at any time by unsubscribing).

10Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict its use, and to complain to your data protection authority. To use them, write to contact@trendr.bid from, or with a signature by, the account concerned (for the waitlist, from the email address on it).

In the app you can delete vault items, turn off notifications, and stop Autopilot rules and follows at any time. Data on a blockchain cannot be deleted by anyone.

11Security and transfers

We encrypt data in transit, keep what we store to a minimum and seal private content on your device. Our providers may process data outside your country; where the law requires, we use appropriate safeguards for those transfers.

12Children

Trendr is not meant for children, and we do not knowingly collect data from them.

13Changes

We will update this policy when Trendr changes what it stores, for example before a Mainnet launch. The date at the top shows the latest version.