Privacy policy

Last updated 1 October 2026

Datenschutzerklärung. This policy covers two things: this website, and the PolyAgent desktop app. The short version: we set no cookies, have no user accounts and never receive what you do in the app. This site counts visits with cookieless analytics that cannot identify you.

Controller

Justin Burchartz handelnd unter „GHSTSOFT“, Dorotheenstraße 83c, 40235 Düsseldorf, Germany.
Email: [email protected]. More details in the imprint.

This website

Hosting (Cloudflare)

This site is hosted on Cloudflare Pages by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you open a page, Cloudflare processes technical data needed to deliver it and protect it from attacks: your IP address, the date and time, the page requested, your browser and operating system, and the referring page. We have a legitimate interest in running the site securely and reliably (Art. 6 (1) (f) GDPR). Cloudflare is certified under the EU-U.S. Data Privacy Framework, and a data processing agreement with standard contractual clauses is in place. See Cloudflare’s privacy policy.

Finding the latest release (GitHub)

To point the download button at the newest version, your browser asks GitHub for the latest release when the page loads. The installers themselves are also served by GitHub. Both requests go to GitHub, Inc., 88 Colin P. Kelly Jr. St, San Francisco, CA 94107, USA, which receives your IP address and browser details. We have a legitimate interest in always offering the current, correct installer (Art. 6 (1) (f) GDPR). GitHub is certified under the EU-U.S. Data Privacy Framework. See GitHub’s privacy statement.

Analytics (Umami)

To see how many people visit and which pages they read, this site uses Umami, a cookieless analytics tool run by Umami Software, Inc., 28 Geary St, Suite 650 #243, San Francisco, California, United States, on servers in the European Union. It records the page viewed, the referring page, and your browser, operating system, device type and country. It sets no cookies, stores nothing on your device, does not record your IP address, and cannot recognise you across visits or across sites. We have a legitimate interest in knowing which parts of the site are useful (Art. 6 (1) (f) GDPR). See Umami’s privacy policy.

No cookies

This site sets no cookies, uses no advertising or cross-site tracking tools, and stores nothing on your device. The font is bundled with the site, so no request goes to Google.

Contacting us

If you email us, we use your message and address only to reply (Art. 6 (1) (b) or (f) GDPR) and delete them when the conversation is over, unless we are legally required to keep them.

The PolyAgent app

PolyAgent runs entirely on your computer. We run no server for it, there is no PolyAgent account, and the app sends no telemetry, crash reports or usage data to us. We never see your keys, trades, chats or settings.

Stored on your device

Your wallet key and AI provider keys are encrypted with your operating system’s keystore (Windows DPAPI, macOS Keychain or your Linux keyring). Chats, jobs, skills, proposals, alerts and bot history are kept in a local database in the app’s data folder. Uninstalling the app and deleting that folder removes everything.

Services the app connects to

To work, the app talks directly to the services below. Each receives your IP address and the data the feature needs, and handles it under its own privacy policy. We are not involved in these connections.

• Polymarket: market data, your orders, positions and balances, deposits and withdrawals, and a check of whether trading is allowed in your location.
• Polygon network nodes (for example polygon-rpc.com, publicnode.com, drpc.org): reading balances and sending your signed transactions.
• The AI provider you choose (Anthropic, OpenAI, Google Gemini or OpenRouter), using your own key: your chat messages and the market, position and job data the assistant needs to answer. With a local Ollama model, nothing leaves your computer. When the assistant reads a web page for you, that site receives the request.
• Coinbase: public BTC, ETH, SOL, XRP, DOGE and BNB price data, only while the 5-minute bot is switched on. No account or personal data is sent.
• WalletConnect (Reown): only if you choose to sign with a phone wallet instead of an imported key.
• YouTube, Twitch or Kick: only when you open a live stream inside the app.
• GitHub: checking for and downloading app updates.

Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Email us to use any of them. Because we hold no data about app users, most requests will concern the website only.

You can also complain to a data protection authority. Ours is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, ldi.nrw.de.

Changes

We update this policy when the site or the app changes what it processes. The date at the top shows the latest version.