Privacy Policy

1. The short version

WhaleGraph is a read-only analytics site. It does not require an account, does not set tracking cookies, and does not run third-party advertising or tracking networks. For aggregate traffic understanding it uses a privacy-friendly, cookieless, self-hosted analytics tool (Plausible) that does not profile individuals or follow you across sites. The only personal data the Site processes is what your browser inevitably sends when it requests a page.

2. What we collect

Server access logs. Like any web server, ours records standard request metadata — IP address, timestamp, requested URL, referrer, and user-agent. These are used for operating the service, security, debugging, and aggregate traffic understanding. We do not use them to build profiles of individuals.

Cookieless analytics. We self-host Plausible to count page views and referrers in aggregate. It sets no cookies, assigns no persistent identifier, and stores no personal data — which is why this Site shows no cookie banner. The data stays on our own infrastructure and is never sold or shared.

No cookies for tracking. The Site does not set advertising or cross-site tracking cookies. Any storage used is strictly functional (e.g. remembering a UI preference) and stays on your device.

Feedback form.If you use the Contacts form, the message and any name / contact details you choose to include are delivered to the operator over a private Telegram channel so we can read and reply. They are not published, sold, or used for any purpose other than responding to you. Leaving the name and contact fields blank is fine — only the message is required.

3. What we do not collect

We do not collect names, email addresses, payment details, wallet private keys, or any account credentials, because the Site has no accounts and no payments. We never ask for and never want your private keys or seed phrase.

4. On-chain data is public

The wallet addresses, trades, and positions displayed on the Site are public records on the Polygon blockchain, retrieved via public APIs. They are not personal data we collected from you, and we make no attempt to link an address to a real-world identity.

5. Third-party data sources

To render pages, our servers fetch data from third parties — primarily the Polymarket Gamma and Data APIs and Polygon RPC/indexers. Your browser does not talk to those services directly for this data; our backend does. When you follow an external link (for example to a market on Polymarket), that destination's own privacy policy applies.

6. Data retention & your rights

Access logs are retained only as long as needed for operations and security, then rotated out. Feedback messages persist in the operator's Telegram history until manually removed. To request deletion of a message you sent, or to ask what we hold, contact us via the channels on the Contacts page. There are no user accounts, so there is no broader profile to export or erase.

7. Contact

Questions about this policy can be raised via the channels listed on the Contacts page.