Last updated: June 23, 2020
Chrome extension · Full source code
Bitwise Account Manager (BAM), an open-source Chrome extension, does not collect or leak user information. It uses no third-party web services and loads no external resources.
User-supplied data including trading API credentials are stored locally and can be encrypted with a user-supplied passphrase.
BAM exposes no interfaces for a host application to extract or tamper with sensitive API secrets.
BAM sends signed API requests directly to crypto exchanges from the Chrome browser without relying on any relay server.
BAM does not log or transmit user’s commands, trading activities, and any account information on crypto exchanges.
Bitwise Terminal (BT) does not collect or leak user information. It uses no third-party web services and loads no external resources. The website is hosted on Netlify’s CDN and Google Cloud.
If Bitwise Account Manager (BAM) is installed, BT delegates API calls to BAM which uses securely stored credentials to sign and submit API requests.
BT does not and cannot access API secrets.
If BAM is not installed, BT saves user data in browser’s local storage, and signed API requests are relayed by Bitwise Relay Server (relay.bitwise.cc). Without BAM, BT needs the relay server to work around BitMEX’s lack of support for CORS requests. The relay server has no access to API secrets.
BT stores user preferences in browser’s local storage.
BT periodically checks the latest version at relay.bitwise.cc.
BT does not log or transmit user’s commands, trading activities, and any account information on crypto exchanges.
Bitwise homepage uses Google Analytics to monitor web traffic.
Other than Google Analytics, it uses no third-party web services or external resources. It uses no cookies other than the ones set by Google Analytics.
The website is hosted on Netlify and subject to their privacy policy.
PNL Tracker uses Google Analytics to monitor web traffic.
Other than Google Analytics, it uses no third-party web services or external resources. It uses browser’s localStorage to store API keys for user’s convenience. As BitMEX’s API server does not support CORS requests, PNL Tracker signs and relays API requests on the server side.
The website is hosted on Google Cloud and subject to their privacy policy.
PNL Tracker’s features will all be ported to Bitwise Terminal, which provides a much better and verifiable privacy model.