Privacy Policy

Last updated: August 31, 2019

Bitwise Account Manager

Chrome extension · Full source code

Bitwise Account Manager (BAM), an open-source Chrome extension, does not collect or leak user information. It uses no third-party web services and loads no external resources.

User-supplied data including trading API credentials are encrypted with a user-supplied password and stored locally.

BAM exposes no interfaces for a host application to extract or tamper with sensitive API secrets.

BAM sends signed API requests directly to crypto exchanges from the Chrome browser without relying on any relay server.

BAM does not log or transmit user’s commands, trading activities, and any account information on crypto exchanges.

Bitwise Terminal

Documentation · Website

Bitwise Terminal (BT) collects user’s email address for account registration and examines HTTP request headers for anti-abuse purposes. The website is hosted on Google Cloud and subject to their privacy policy.

BT stores user’s authentication token in a browser cookie. It uses no third-party web services and loads no external resources.

BT delegates API calls to Bitwise Account Manager (BAM) which uses securely stored credentials to sign and relay API requests. BT does not and cannot access API secrets.

BT does not log or transmit user’s commands, trading activities, and any account information on crypto exchanges.

Bitwise homepage

Website

Bitwise homepage uses Google Analytics to monitor web traffic.

Other than Google Analytics, it uses no third-party web services or external resources. It uses no cookies other than the ones set by Google Analytics.

The website is hosted on Netlify and subject to their privacy policy.

PNL Tracker

Website

PNL Tracker uses Google Analytics to monitor web traffic.

Other than Google Analytics, it uses no third-party web services or external resources. It uses browser’s localStorage to store API keys for user’s convenience. As BitMEX’s API server does not support CORS requests, PNL Tracker signs and relays API requests on the server side.

The website is hosted on Google Cloud and subject to their privacy policy.