Bitcockpit

The controller is Business Technology Consulting OÜ, Sepapaja tn 6, 15551 Tallinn, Harju maakond, Estonia (contact: privacy@bitcockpit.com). This policy covers app.bitcockpit.com, api.bitcockpit.com and the bitcockpit command line.

1. What we process

Account: e-mail address, sign-in times, language, roles in portfolios (Art. 6(1)(b) GDPR – contract).
Portfolio data you enter yourself: journal (buys/sells/spends), extended public keys (xpub) of watched wallets and their on-chain balances/transactions, loans, exchange balances (only if you store read-only API keys), RoboSats trades, settings (Art. 6(1)(b)).
Integration secrets you store (e.g. exchange read keys, robot token) – encrypted at rest, never returned in clear text.
Audit log: who changed what and when in a portfolio (Art. 6(1)(f) – traceability for all members).
Technical data: server logs (IP address, time, path, response code) for at most 30 days; error reports (Sentry) with technical context (Art. 6(1)(f) – operation and security).
Product analytics (OpenPanel): page views and product events without cookies or fingerprinting; pseudonymous profile id (Art. 6(1)(f) – product improvement).
E-mails we send you: sign-in links/codes, invitations, reports and alerts you enable in a portfolio.

2. What we do not do

No private keys, no seed phrases – Bitcockpit only watches.
No selling of data, no advertising, no tracking across other sites.
No credit scoring or profiling with legal effect.

3. Processors and locations

Supabase Inc. (Projekt in der EU-Region Frankfurt) – database and sign-in (magic link / e-mail code)
Vercel Inc. (Functions in fra1, Frankfurt) – hosting of the web app
Hetzner Online GmbH (Deutschland) – operation of the API (api.bitcockpit.com)
OpenPanel (Openpanel AB, Schweden) – cookieless product analytics (no cross-device tracking)
Functional Software Inc. (Sentry, USA – Standardvertragsklauseln) – application error reports (technical data, truncated IP)
Cloudflare Inc. (DNS) – DNS for the domain
TypeSafe AI (typesafe.ai, über unser eigenes LLM-Gateway) – typed judgments: suggested kind for unclassified wallet transactions, matching Lightning buys to their on-chain arrival, reading the payment methods of public RoboSats offers (Art. 6(1)(f) – convenience; what is sent: amounts, times, the wallet names you chose and nearby bookings by kind/venue/amount – no addresses, no transaction ids, no notes, no identity)

Data is processed in the EU; the only exception are error reports at Sentry (USA) under the EU standard contractual clauses. Public market data comes from Kraken (prices), the ECB (FX rates) and mempool.space or our own Bitcoin nodes (wallet scans); those services see the queried addresses, not your identity.

4. Retention

Account and portfolio data is kept as long as your account exists. You can delete a portfolio or your account in the app at any time (settings → danger zone, portfolio list → delete account); the data is then removed immediately and permanently, backups are overwritten within 30 days. Server logs: 30 days. Error reports: 90 days.

5. Your rights

Access, rectification, erasure, restriction, data portability (JSON export in the settings) and objection under Art. 15–21 GDPR. Write to privacy@bitcockpit.com. Complaints go to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or the supervisory authority of your residence.

6. Cookies

Only strictly necessary cookies: session (Supabase Auth), language and display (light/dark, currency). No marketing or third-party cookies, hence no cookie banner.