Privacy policy

Short version: this site sets no cookies, runs no analytics and no advertising, and has no accounts. What it cannot avoid is the technical trace every web request leaves — at the hosting providers, and at Google, because the fonts are loaded from Google's servers. The details follow.

This policy explains what happens to personal data when you use marketintel.dev and the API at api.marketintel.dev. It is written for the Swiss Federal Act on Data Protection (revDSG) as in force since September 2023. Where the site reaches readers in the EU or elsewhere, the same facts apply; nothing on this site is directed specifically at those readers.

Controller

The controller is the person named in the imprint. There is no data protection officer and no representative in the EU; this is a one-person research site.

What is processed, and why

a. Hosting and delivery: Cloudflare

The site is served by Cloudflare Pages, and requests to the API pass through Cloudflare's proxy before they reach the API host. For every request Cloudflare sees your IP address, the requested URL, the time, your browser's user agent and referrer, and the protocol details of the connection. Cloudflare uses this to deliver the page, to defend against abuse and, in aggregate, for its own service analytics; its logging is governed by Cloudflare's own policies. The operator does not enable Cloudflare's web analytics and sees no visitor-level data from Cloudflare.

Cloudflare also sends the response headers NEL and Report-To. These ask your browser to report network errors (a failed or slow connection to this site) to Cloudflare's reporting endpoint. Such a report contains the URL that failed, the type of error and your IP address as seen by that endpoint; it goes to Cloudflare, not to the operator.

b. The API host: Railway

The API at api.marketintel.dev runs on Railway. Railway keeps request logs (IP address as forwarded by the proxy, URL, time, status) for the operation of the platform, under Railway's own retention rules.

The API itself applies a per-IP rate limit so a single client cannot exhaust it. This limiter keeps a short-lived counter per IP address in the memory of the running process. Nothing is written to disk, nothing is kept beyond the refill window of a few minutes, and the counters vanish when the process restarts. Application logs record request paths and status codes for debugging; the operator does not build user profiles from them.

c. Fonts: Google Fonts

The typefaces (IBM Plex Sans and IBM Plex Mono) are loaded from Google's servers, fonts.googleapis.com and fonts.gstatic.com. This means that when the page loads, your browser sends a request to Google, and Google receives your IP address, the user agent and the referring page. Google is in the USA. The operator gets no information back from that request. If you do not want this, a browser extension that blocks third-party fonts or a system-installed copy of the fonts prevents the request; the page still works with fallback fonts.

d. Browser storage: no cookies, no tracking

The site sets no cookies. It uses your browser's localStorage for one thing: the key mi-theme, which remembers whether you chose the dark or the light theme. This value never leaves your browser and is not sent to any server. There are no analytics, no tracking pixels, no fingerprinting, no advertising and no consent banner, because nothing needs consent.

One exception concerns the operator alone: the copy-trading desk, an internal tool of this site, keeps an admin token in localStorage of the operator's own browser and sends it as a request header. Visitors have no such token and this mechanism does not touch them.

e. External links

The site links to GitHub (source code) and Polygonscan (on-chain view of the live-run wallet). Following a link takes you to a site with its own privacy policy; the operator has no control over what those sites collect.

f. Wallet addresses and leaderboard data

Some pages show wallet addresses and their trading activity. This is public data: positions and trades on Polymarket are recorded on the Polygon blockchain, and both Polymarket and Kalshi publish leaderboards and trade histories through public APIs. The operator processes this data to study market microstructure and to measure whether trading skill can be told from luck. The legal basis is the operator's legitimate interest in research on a public market; no attempt is made to link an address to a natural person, and the site adds no identity information of its own.

If a wallet address you control appears on this site and you would rather it did not, write to [contact email] naming the address. The operator will remove the address from the displayed views and from published data files within a reasonable time. Removing it from this site does not remove it from the blockchain or from the venues' own APIs, which the operator cannot change.

g. Where data goes: countries of export

Cloudflare, Railway and Google are companies based in the USA, and requests may be processed on their servers in the USA or in other countries where they operate. Switzerland recognises the USA as offering adequate protection for companies certified under the Swiss-U.S. Data Privacy Framework; beyond that, transfers rest on the providers' standard contractual clauses and their own published commitments. The operator relies on those safeguards and has no separate agreement with any of these providers beyond their standard terms.

Retention

The operator stores nothing about visitors. Server and request logs are kept by Cloudflare and Railway for the periods their own policies define; the operator does not copy them. The in-memory rate-limit counters live for minutes. The theme preference stays in your browser until you clear it.

No profiling, no automated decisions

The site makes no decisions about you, automated or otherwise, and builds no profiles of visitors. The studies and rankings shown concern wallets and markets, not the people reading the page.

Your rights

Under the revDSG you can ask the controller

• whether and which personal data about you is processed, and to receive a copy (right of access);
• to correct data that is wrong;
• to delete data, including a wallet address shown on this site;
• to object to a processing, in particular one based on legitimate interest.

Write to [contact email]. Since the operator holds no visitor data, most requests will end with that answer; requests about wallet addresses are handled as described above. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC).

Changes to this policy

This policy is changed when the site's setup changes, for example when a provider is replaced or the fonts are moved to the site's own server. The current version is always at this address, and the date below says when it was last changed. Earlier versions can be read in the source repository's history.