Privacy Policy

This policy explains what data the RedRook app and the license service at https://redrook.app collect, why, and how long it is kept. Contact for privacy questions and requests: @chelovek86.

1. What stays on your computer

Exchange API keys (in the app's encrypted vault), orders, trades, balances, watchlists, alerts, notes, drawings and market recordings stay on your computer and are never sent to the service. Orders go directly from the app to the exchange.

2. What the service stores

• Purchase: the contact you enter (Telegram handle or e-mail), the plan, add-ons, period and amount, the payment network, the IP address the order was placed from, the date you accepted these terms. The license key is stored as a keyed hash; for an order placed on the site the key is also stored encrypted, so that the order page and the Telegram bot can show it to you.
• Payment: data from NOWPayments about the invoice and the payment — invoice and payment ids, amounts, currency and network, the deposit address and status. We do not receive card data (cards are not accepted) and do not ask for your wallet's private keys.
• Activation and lease renewal: a computer code derived from the system identifier (/etc/machine-id or IOPlatformUUID), the computer name, OS and architecture, app version, and the IP addresses of requests.
• Usage statistics (always, needed for the license): app version, OS and architecture, computer code, minutes the app was running and in focus, number of launches and crashes.
• Extended statistics (only with your consent, off by default; can be changed in the app and in your account): minutes per section, feature counters, enabled markets, whether trading is connected, number of windows, charts and alert rules, language and theme. Never: pairs and tickers, trades, amounts and balances, exchange keys, texts of alerts and notes, files and paths.
• Trial: the contact you enter, a hash of the computer code (one trial per computer) and the IP address.
• Telegram bot (if you use it): your chat id, which order or license it is linked to, and which messages have been sent.
• Account and site: a session cookie after signing in with the key, a language cookie when you switch the language. No advertising or analytics trackers are used.
• Server logs: requests (method, path, status, time); the hosting provider's proxy logs may contain IP addresses.

3. Why

To issue and check licenses, bind a license to one computer, process payments and resolve payment problems, deliver the key, remind you about the end of the term, prevent abuse (trial limits, key sharing), and understand which features to improve (extended statistics — only with consent).

4. Where the app connects directly

• Exchanges and brokers you use — market data and, with your keys, trading.
• DNS-over-HTTPS resolvers of Cloudflare (1.1.1.1, 1.0.0.1) and Google (8.8.8.8, 8.8.4.4) — to resolve exchange host names when the provider's DNS blocks them; they see which host names the app resolves and your IP address. You can switch to the system DNS in the app settings.
• AI providers (Anthropic or an OpenAI-compatible API) — only if you enter your own key; the request contains what you ask about (for example, chart data or a trade).
• Telegram — only if you connect your own bot for notifications.
• The RedRook service — license, statistics above and update checks.

Crash reports and “Report a problem” archives are saved on your computer and are not sent automatically; the service only receives the number of crashes.

5. Who else receives data

NOWPayments processes the payment (see its privacy policy); the hosting provider of the server; Telegram — messages of the bot you started. We do not sell data and do not share it for advertising.

6. How long

• IP addresses of computers — up to 30 days after the computer was last seen; raw statistics packets — 30 days (aggregated daily totals without IP are kept).
• Orders, payments and the payment journal — as long as needed for accounting and resolving disputes.
• License, contact and computers — while the license exists; after that on request.
• Telegram links — 7 days; account sign-in links from the bot (/cabinet) — 15 minutes, single use; bindings — until you send /stop to the bot.

7. Your choices and rights

You can turn extended statistics off, unlink a computer, unlink the Telegram chat (/stop), and ask us for a copy of your data, its correction or deletion. Payment records required for accounting are kept, but the contact can be anonymized. Write to @chelovek86.

8. Changes

We will update this page when the app or the service starts collecting something new; the version date is at the top.