Privacy & Cookie Policy
Last updated: 15 October 2026
This policy explains what personal data Polysider collects, why we collect it, who else sees it, how long we keep it and what cookies we use. It also explains your rights under the EU General Data Protection Regulation (GDPR).
The short version
- Our servers are in the EU (Bulgaria).
- We collect what we need to run your account, your alerts and your payments, plus short-lived security logs.
- We do not sell your data and we do not show ads.
- We only set the cookies Polysider needs to work, unless you allow more. Saved display preferences and Google Analytics (on polysider.com) are used only if you accept.
- We never see your private keys, and we never see card details. Payments are in crypto through a payment provider.
- You can see, export, correct or delete your data. Write to support@polysider.com.
1. Who is responsible
Polysider ("Polysider", "we") is run by the Polysider team, who decide how your data is used. Contact us about anything in this policy at support@polysider.com.
This policy covers polysider.com, Polysider Eye (eye.polysider.com), the Polysider Bot and Polysider Chat on Telegram, and the Polysider AI connector. Our Terms of Service describe the services themselves.
2. What we collect and why
For each kind of data, the table shows what it is for and the legal basis under the GDPR. "Contract" means we need it to give you the service you asked for (Art. 6(1)(b)). "Legitimate interest" means we need it to run the service safely and well, and it does not override your rights (Art. 6(1)(f)). "Consent" means only if you agree (Art. 6(1)(a)). "Legal obligation" means the law requires it (Art. 6(1)(c)).
| Data | What we use it for | Legal basis |
|---|---|---|
| Login details. Depending on how you sign in: your Telegram ID, username and profile photo link; your Google account ID, name and verified email; your Polygon or Solana wallet address; or your email address. | To sign you in, link several logins to one account and show your display name. | Contract |
| Account details. Display name you choose, account creation date, plan, PRO period, reminder setting. | To run your account and your plan. | Contract |
| Sessions. A random session token, when it was created and last used, your browser's user-agent string and your IP address at login. | To keep you signed in, let you see your active sessions, and spot account takeovers. | Contract; legitimate interest (security) |
| Usage of your account. Last login time, login and visit counts, last active time, the scans you start and how much of your scan allowance you used. | To apply plan limits, prevent abuse, and understand how the product is used. | Contract; legitimate interest |
| Things you save. Saved wallets, folders, notes, card layout, CopyScore preferences, Bot filters, Bot language and alert on/off. | To give you these features. | Contract |
| Payments. Plan, price, our order ID, the provider's invoice ID, the coin you paid with, the amount received, payment status and the provider's payment confirmation. We do not receive card or bank details. | To give you PRO, handle problems and refunds, and keep accounting records. | Contract; legal obligation (accounting and tax) |
| Emails and messages. One-time login codes we email you, PRO expiry reminders, and anything you write to support. | To sign you in, remind you before PRO ends (you can turn this off), and answer you. | Contract; legitimate interest |
| Telegram Bot and Chat. Your Telegram user ID and username, whether you are a member of the Polysider group, the commands and settings you send the Bot, and the alerts we sent you. | To deliver alerts, check group access, and keep alerts in order. | Contract; legitimate interest |
| AI connector. The name of the AI app you connect, the permissions you approve, access tokens, and the IP address that registered the app. | To let the app act for you, and to let you revoke it. | Contract; legitimate interest (security) |
| Guest access (using Eye without signing in, when available). A Cloudflare Turnstile bot check, a short-lived guest cookie, and a shortened IP address in our logs. | To stop bots and abuse of free guest access. | Legitimate interest (security) |
| Server logs. IP address (sometimes shortened), time, address requested, browser user-agent, error details and account ID. | To keep the service secure, fix problems, and stop abuse. | Legitimate interest |
| Website analytics (polysider.com only, only if you accept). Google Analytics: pages viewed, referring site, approximate location (country/city), device and browser type, and a random visitor ID stored in a cookie. | To count visits and see which pages are useful. | Consent |
You do not have to give us any of this. Without login details we cannot give you an account, and without payment details we cannot give you PRO.
3. Public wallet data
Polysider analyses data that anyone can see on the Polygon blockchain and through Polymarket's public data: wallet addresses, trades, positions, the public Polymarket profile name and linked X handle, and leaderboard rank. Wallet addresses are pseudonymous. They can count as personal data if they can be linked to a person.
- Why: to give users analytics about public market activity. Our legal basis is legitimate interest. The data is already public, and we do not try to find out who is behind a wallet.
- What we keep: each scan is stored as a snapshot and can be opened by other users. Wallet-level metrics (never account data) are also copied to Google BigQuery for internal analysis.
- Your login wallet is different. If you sign in with a wallet, we link that address to your account. We never show other users which account owns which wallet.
- If it is your wallet, you can object to our analysis of it by writing to support@polysider.com. We will review your request and reply within one month.
4. Who we share data with
We do not sell personal data and we do not share it for advertising. We use these providers. Where they act for us, they are bound by data-processing terms.
| Provider | What for | Data involved |
|---|---|---|
| Our hosting provider (Bulgaria, EU) | Servers that run Polysider and store its database and logs | Everything in section 2 |
| Telegram | The Bot, alerts, Polysider Chat and "Log in with Telegram" | Telegram ID, username, messages to and from the Bot |
| "Sign in with Google"; Google Analytics (only with consent); Google Fonts (web fonts); BigQuery (wallet metrics only) | Google account ID, name and email (sign-in only); analytics data (with consent); IP address and browser info when fonts load | |
| NOWPayments, OxaPay | Crypto payments | Order ID, plan, price; what you give the provider on its own payment page |
| Cloudflare | Turnstile bot check for guest access | IP address, browser and device signals |
| Polymarket | Your browser checks Polymarket's public status page (status.polymarket.com) to show a notice when Polymarket has an outage or maintenance. All market and wallet data comes from our own servers. | IP address and browser info |
| Your AI assistant provider | Only if you connect one through the AI connector | The data you ask the assistant to read |
Each of these providers also has its own privacy policy. We may also share data when the law requires it, to protect our rights or users' safety, or if Polysider is sold or merged (you would be told).
5. Transfers outside the EU
Our servers are in the EU. Some providers above (for example Google, Cloudflare, Telegram and the payment providers) may process data outside the European Economic Area. When they do, the transfer is protected by an EU adequacy decision (such as the EU–US Data Privacy Framework) or by the European Commission's Standard Contractual Clauses.
6. How long we keep data
| Data | How long |
|---|---|
| Account, login details and things you save | While your account exists. If you delete your account, you can restore it by signing in within 30 days. After that it is deleted for good. |
| Sessions | Deleted when you log out, or after 30 days without use |
| One-time email login codes | 5 minutes, and only in memory |
| Sign-in flow cookies | 2 to 10 minutes (see cookies) |
| Payment records | As long as needed for accounting, tax and dispute purposes |
| Server logs | About 14 days |
| AI connector tokens | Until they expire or you revoke the app. Unused registrations are cleaned up automatically. |
| Telegram Bot data | While you use the Bot. Ask us and we delete it. |
| Google Analytics data | Up to 14 months, then deleted by Google |
| Support emails | As long as needed to resolve your request, then up to 2 years |
7. Cookies and local storage
Cookies are small files a website stores in your browser. "Local storage" and "IndexedDB" are similar browser stores that stay on your device and are not sent to us. We use them in three ways:
- Strictly necessary: needed for signing in, security, bot checks and remembering your cookie choice. The law does not require consent for these, and you cannot turn them off in our settings. You can still block them in your browser, but then signing in will not work.
- Preferences: remember your display choices on your device, such as recent wallets, table column widths and sort order. Only with your consent. Without it, Polysider Eye keeps these choices only until you close the tab.
- Analytics: Google Analytics on polysider.com. Only with your consent.
We do not use advertising or tracking cookies, and Polysider Eye has no analytics.
Your choice
When you first visit polysider.com or Polysider Eye, we ask you to accept all, reject all, or choose categories. One choice covers both sites. We ask again after 12 months.
Current setting: not set yet.
If you withdraw consent, we stop Google Analytics and delete its cookies, and delete saved preferences from your browser. You can also delete cookies in your browser's settings at any time.
polysider.com (website)
| Name | Type | Purpose | Kept for | Category |
|---|---|---|---|---|
polysider_consent | Cookie (shared by polysider.com and eye.polysider.com) | Remembers your cookie choice | 12 months, then we ask again | Strictly necessary |
polysider_pm_status_dismissed | Local storage | Remembers that you closed the Polymarket status banner | Until you clear it or withdraw consent | Preferences, consent only |
_ga, _ga_<ID> | Cookie (Google) | Google Analytics: tells visits apart and counts them | 2 years | Analytics, consent only |
eye.polysider.com (Polysider Eye)
| Name | Type | Purpose | Kept for | Category |
|---|---|---|---|---|
eye_session | Cookie (secure, HttpOnly) | Keeps you signed in | 30 days | Strictly necessary |
eye_oidc | Cookie (secure, HttpOnly) | Protects the "Sign in with Google" step | 10 minutes | Strictly necessary |
eye_wallet, eye_solana | Cookie (secure, HttpOnly) | Protects the wallet sign-in step | 10 minutes | Strictly necessary |
eye_tg_connect | Cookie (secure, HttpOnly) | Protects linking a Telegram login to your account | 2 minutes | Strictly necessary |
eye_merge | Cookie (secure, HttpOnly) | Protects merging two of your accounts | 10 minutes | Strictly necessary |
eye_guest | Cookie (secure, HttpOnly) | Guest pass after the bot check, to prevent abuse. Not used for tracking. | 6 hours | Strictly necessary |
| Cloudflare Turnstile | Third-party check (Cloudflare) | Tells people from bots before guest access. Cloudflare processes device and browser signals for this. | Session | Strictly necessary |
| Telegram login widget | Third-party (Telegram) | Only when you choose "Log in with Telegram". Telegram may set its own cookies on its sign-in window. | Set by Telegram | Strictly necessary |
polysider_consent | Cookie (shared with polysider.com) | Remembers your cookie choice | 12 months, then we ask again | Strictly necessary |
polysider_state_owner | Local storage | Keeps one account's data on this device apart from another's | Until you clear it | Strictly necessary |
polysider_resume | Session storage | Returns you to the wallet you were viewing after you sign in | Until you close the tab | Strictly necessary |
| Scan cache | IndexedDB | Holds the scans you open so the result pages can show them | Up to 4 hours; deleted when you log out | Strictly necessary |
polysider_recent_wallets, polysider_card_layout, polysider_tx_col_widths, polysider_tx_price_precision, polysider_fav_sort, polysider_pm_status_dismissed | Local storage | Remembers recent wallets and display choices on this device | Until you clear it or withdraw consent. Without consent: until you close the tab | Preferences, consent only |
Both sites load web fonts from Google Fonts. This sends your IP address and browser details to Google, but sets no cookies.
8. Security
All traffic uses HTTPS. Sign-in cookies are secure and HttpOnly, so scripts cannot read them. Access to our servers and database is limited to the people who run Polysider. We never ask for or store private keys or seed phrases. No system is perfectly secure. If something goes wrong, we will tell you and the authorities as the GDPR requires.
9. Your rights
Under the GDPR you have the right to:
- access your data and get a copy;
- correct data that is wrong;
- delete your data ("right to be forgotten");
- restrict how we use it;
- receive your data in a portable format;
- object to use based on legitimate interest;
- withdraw consent at any time, without affecting what happened before.
Many of these you can do yourself in Eye: change your display name, export your saved wallets, revoke AI apps and delete your account on your account page. For anything else, email support@polysider.com. We reply within one month, and we may ask you to prove the account is yours, for example by writing from a linked email or signing in.
You can also complain to the data protection authority in the country where you live or work.
10. Automated decisions
CopyScore, archetypes and other scores describe wallets, not our users. We do not make automated decisions about you that have legal or similarly significant effects, and we do not profile users for advertising.
11. Children
Polysider is for adults (18+). We do not knowingly collect data from children. If you think a child has given us data, contact us and we will delete it.
12. Changes to this policy
When we change this policy, we update the date at the top. If a change matters to you, we will tell you on the website, in Eye or through the Bot before it applies. If we start using a new kind of non-essential cookie, we will ask for your consent again.
13. Contact
Email: support@polysider.com