mktrades

Privacy Policy

Last updated 23 October 2026

This Privacy Policy explains how ARTES LABS LTD (“we”, “us”), which operates mktrades, collects, uses, and protects your personal data when you use our read-only portfolio analytics for crypto and equities. mktrades is read-only by design: we analyse what your portfolio is doing; we never take custody of your assets and never have the ability to move or trade them.

1. Who we are

mktrades is a service operated by ARTES LABS LTD, a private limited company registered in England and Wales under company number 16956380, with its registered office at Flat 11 Power House, 74 Stanley Gardens, London, W3 7SZ, United Kingdom. ARTES LABS LTD is the data controller responsible for your personal data. If you have any questions about this policy, contact us using the details in the “Contact us” section below.

2. What we collect

mktrades is in open beta. What we hold depends on how you use it.

  • Instant checks (no account): the public wallet addresses you paste and the report we produce for them, including the holdings and values we read. We keep the report for 30 days at a private link, so you can return to it, save it to an account or share its score, then delete it. For usage statistics we keep only a salted one-way hash of the addresses checked. To rate-limit checks we derive a one-way hash of your IP address; the IP address itself is never written to storage.
  • Account data: your email address, which is how you sign in (we send a one-time link; there is no password). Each signed-in session stores a one-way hash of the IP address it started from and your browser’s user-agent string, for security.
  • Public wallet addresses: the addresses you add, which we use to read publicly available balances. We never request or store private keys or seed phrases.
  • Read-only exchange API keys: the keys you choose to connect. Before storing a key we check its permissions where the exchange allows it, and refuse keys that can trade or withdraw. Keys are encrypted before they are stored (see section 9). We also keep the last four characters of each key, to label it for you.
  • Stock holdings: tickers, quantities and, if you give them, cost and value figures, typed in or imported from a CSV file. We keep the positions from an imported file, not the file itself.
  • Portfolio and analytics data: the balances we read, and the reports, daily snapshots and alerts we compute from them.
  • Waitlist signups: the email address you submitted before accounts opened, the date, and the country the request came from.
  • Usage data: aggregate, cookieless analytics about how the site is used (pages viewed, referrer, coarse city-level location, browser and device type) to keep it working and improve it. See section 6.

3. How we use your data

We use your data to:

  • Provide the core service: read your connected portfolios and produce scores, metrics, scam flags, and sector analytics.
  • Create, secure, and administer your account, and communicate with you about the service.
  • Monitor, debug, and improve the product, including measuring feature usage through analytics.
  • Detect and prevent fraud, abuse, and security incidents.
  • Comply with our legal obligations.

4. Read-only access and no custody

mktrades only ever requests read-only access. We do not take custody of your funds, hold private keys, or have any ability to move, withdraw, or trade your assets. If a connected exchange or wallet offers more granular permissions, we ask only for the minimum read access needed to analyse your portfolio.

5. How we share your data

We do not sell your personal data. We share it only with service providers who help us run mktrades, and only to the extent needed to deliver the service:

  • Vercel: hosting. Our server code runs in Frankfurt, Germany; static pages are served from Vercel's global network.
  • Neon: our database, in Frankfurt, Germany.
  • Upstash: a short-lived cache and the waitlist store, in London, UK.
  • Resend: email delivery (sign-in links, alert digests, waitlist mail), in Ireland.
  • Market and blockchain data providers: Alchemy and mempool.space (wallet balances), CoinGecko (prices and market data), GoPlus (token contract checks), DexScreener (DEX liquidity), Alpaca (US stock prices), Finnhub (company data) and the SEC's EDGAR service (industry codes). They receive only what a lookup needs: public addresses, token contracts or tickers. Never your email address or your keys.
  • The exchanges you connect: we call them with your read-only key to read your balances.

Some of these providers process data outside the UK. Where they do, we rely on the safeguards the UK GDPR provides, such as adequacy regulations or the International Data Transfer Agreement. We may also disclose data where required by law.

6. Cookies and analytics

We set one cookie, and only when you sign in: a session cookie that keeps you signed in. It is strictly necessary for the service you asked for, so it does not need your consent. It expires after 30 days or when you sign out. We use no advertising or tracking cookies.

This site uses Vercel Web Analytics, which is cookieless: it does not store identifiers on your device, does not follow you across other websites, and does not build a profile of you. It records aggregate page views along with coarse, city-level location and device type derived from the request.

7. Data retention

  • Instant checks: 30 days, then deleted.
  • Account data: until you delete your account. Settings > Delete account removes your account, connections (including encrypted keys), stored holdings, reports, snapshots and alerts straight away. Database backups that may still hold copies are overwritten within 7 days.
  • Waitlist entries: until you ask us to remove you. Reply to the confirmation email or write to hello@mktrades.com.
  • Server logs, which never contain your keys: kept by our host for a short period for debugging and security.

You can remove any single wallet, exchange or stock holding at any time from the Connections page.

8. Your rights

Under the UK GDPR and the Data Protection Act 2018, you have the right to access, correct, delete, or restrict the processing of your personal data, to object to certain processing, and to data portability. Signed-in users can download everything we hold (Settings > Download) and delete their account themselves. For anything else, contact us using the details below.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk if you are unhappy with how we handle your data. Depending on where you live, the law of your country may give you further rights, including the right to complain to your local data protection authority.

9. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit and restricted access. Exchange API keys are encrypted with AES-256-GCM before they are stored, under a key held separately from the database, and are decrypted only on our servers for the moment it takes to read your balances. They are never sent back to your browser. No system is perfectly secure, but we work to protect your information and limit access to it.

10. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you.

11. Contact us

Questions about this policy or your data? Email us at hello@mktrades.com, or write to ARTES LABS LTD, Flat 11 Power House, 74 Stanley Gardens, London, W3 7SZ, United Kingdom.