Privacy Policy

Last updated: 10 November 2026

Perpscore grades Hyperliquid perps traders and coaches them, on the website at perpscore.app and through our Telegram bot. This page says what we collect, why, who helps us, how long we keep it, and what you can do about it. Questions: support@perpscore.app.

Who we are

Perpscore is run from India. For this policy, Perpscore is the "controller" (the one who decides how your data is used) and, under India's data protection law, the "data fiduciary". For anything about your data, including a complaint, write to support@perpscore.app. The person who reads that inbox answers privacy questions and grievances. We don't have a separate data protection officer.

What we collect

• Your account. If you sign in with Google: your email address and name (Google also sends a link to your profile picture; we don't keep it). If you sign in with Telegram: your Telegram ID, name and username. If you use email: your email address and your password, which we store only in scrambled (hashed) form. Also the name you choose for your greeting, the picture you pick (initials or one of our marks, never an upload), your language, your time zone, and who invited you, if someone did.
• Wallets. The public wallet addresses you look up or save, and your labels for them.
• What you ask and set. Questions you ask the Coach or the Desk and their answers, your Coach goal, rule and trading style, the alerts and Whale Watch or Whale Select rules you set, the whales and coins you follow, and your home page settings. When you rate a Desk answer (helpful or not), we keep your rating, the reasons you tick, any note you write, and that question and answer, so we can make answers better.
• Telegram. Signing in with Telegram also connects our bot, so it can message you (you choose what it sends). If you connect the bot: your chat ID and the messages you send it, so it can answer and send your alerts.
• Payments. If you buy Pro or an AI top-up: what you bought, the amount, the date and the payment reference (for crypto, the transaction on the blockchain, which also shows the paying wallet, where a refund goes back to). If you are in the EU, the EEA or the UK, also when you asked for it to start right away, the version of the words you agreed to, and the country our host saw. If you ask for your money back or withdraw from a payment: when, and how much comes back. Old card and UPI payments went through Razorpay; your card details went to them, never to us.
• Refer & Earn. If you take part: your referral code, the payments your link earned (never who bought), your payout wallet address and network, and your payouts.
• Safety data. A scrambled (hashed) form of your IP address, a hashed form of email addresses typed into sign-in forms, and, if you ask the Coach or the Desk without an account, a random device ID. We use them only to stop spam and abuse, to keep free limits fair, to count each visitor once a day in our visit totals and in the clicks on an invite link, and to keep one rating per person on a Desk answer. We don't keep the raw IP address.
• Page views. Described under Site statistics.

You give us most of this yourself. You don't have to: you can read most of Perpscore without an account. An account needs an email address, a Google account or a Telegram account to sign you in; without one we can't keep your wallets, rule or alerts for you.

Why we use it, and on what basis

We use your data only to run Perpscore. For each use, the law asks us to say what allows it:

• To give you the service you asked for (because it is needed for our agreement with you): sign you in, grade and coach your wallets, answer your questions, keep your settings, send the alerts and Telegram messages you chose, handle Pro, payments, refunds and withdrawals, and tell you about your own account (a confirmation email, a receipt, a reminder that your Pro is ending).
• To keep records the law requires (a legal obligation): payment, refund and withdrawal records for tax and accounting.
• To keep Perpscore safe, fair and working (our legitimate interests, weighed against yours): stop spam, abuse and fake invites, keep free limits fair, count visits without cookies to see which pages help, and use Desk ratings to make answers better. You can object to these; see Your rights.

We don't use your data for advertising, we don't build marketing profiles, and we don't sell or share it with anyone for their own use.

Automated grades and answers. Your grade, your Coach rule and AI answers are made by software from your public trades. They are information to help you learn, not decisions about you: they don't affect your rights, your access to Perpscore or anything else in a way that matters legally.

Cookies and your browser

We use only cookies the site needs to do what you ask, so we don't show a cookie banner. No advertising or tracking cookies, and none from other companies. These are all of them:

• Signed in (__Secure-authjs.session-token): keeps you signed in, for up to 30 days.
• Sign-in safety (__Host-authjs.csrf-token, __Secure-authjs.callback-url, __Secure-authjs.state, __Secure-authjs.pkce.code_verifier, __Secure-ps.tg-state, ps-tg-state): protect a sign-in while it happens and remember the page to return to. The ones set for a Google or Telegram sign-in last 15 minutes at most; the others end when you close the browser.
• Language (ps-lang, ps-lang-offer): your language, and that you already answered our language suggestion. 1 year.
• Time zone (ps_tz): the time zone you picked, or your browser's, so times show in it. 1 year.
• Free questions (ps-device): a random device ID, set only when you ask the Coach or the Desk without an account, so the free daily limit is fair. 1 year.
• The Desk (ps-desk-wallet, ps-desk-hist): which wallet the Desk opens with (none, a wallet address you entered, or a saved report's link with a shortened address), so the Desk opens on it; and whether you folded away its list of past chats. Your browser sends them to our server with each page, like every cookie here. 1 year.
• Home, without an account (ps_guest): when you first opened the home page on this device, when you were last there and the last tool you opened, so the home can say what changed since your visit. Only times and a tool's name, no ID. 180 days. Because this is a convenience rather than something the page needs, we only set it outside the EU, the EEA and the UK. There, and whenever we can't tell where you are, the home remembers nothing about your visits and deletes this cookie if it finds one.
• "Not now" to Pro (ps_pro_quiet): set only when you press "Not now" on the home page without an account, so the Pro line stays away for the week it promises. 7 days.
• A graded wallet, kept for your new account (ps_carry): after you grade a wallet on the home page without an account, that report's link, so the wallet can be saved to the account you make next (like a basket that waits while you sign up). Deleted as soon as it is saved, when you choose to leave it out, or when you come back without making one. 1 day at most.
• Invite (ps-ref): the invite code in a link someone shared with you, and when you opened it, so they get the credit if you make an account. Nothing else about you. 60 days.
• Five more (ps-owner, ps-owner-ch, ps-admin, ps-preview, ps-preview-ui) exist only in the site owner's own browser, for running the site.

Your browser also keeps a few things on your device only (in its local storage, which works like a cookie but is never sent to us): your theme, wallets you looked up, a few small display preferences, the payment network you last picked, and, when you're not signed in, your recent Desk chats. Some things last only until you close the tab, such as a link you opened from an email. Clearing this site's data in your browser removes all of it.

Site statistics

We count visits ourselves, privately and without cookies, to see which pages are used and where the site can be better. No outside analytics company is involved. For each page view we keep: the page (with wallet addresses and report links removed) and its title (only for pages without such details), how long it was open and how far down it was read, the site that linked to it and any campaign tag in the link, the country, region and city our host works out from your connection, your device type, browser and system family (not their versions), language and screen width. We also note when the upgrade offer or the payment step was opened, and from which feature.

When you're signed in, these records are linked to your account. When you're not, a visitor is only a scrambled code that changes every day (made from the IP address, which lets us count each visitor once a day), so visits on different days can't be linked together. Your IP address and full browser details are not stored.

We respect Do Not Track and Global Privacy Control in your browser: with either one on, your browser sends us no page-view records and no usage events. A few things are counted on our server as part of what you do, whatever that setting: daily totals of actions such as grading a wallet or making an account (each counted once per visitor a day, with a one-way code kept 1 day, never linked to you), and opening an invite link (see How long we keep it).

AI answers

Coach and Desk answers, and some short summaries such as the news behind a market move, are written by Anthropic's AI. For an answer it receives your question and the trade facts needed to answer it, never your email, your name or your password. Under Anthropic's commercial terms, what we send through its service is not used to train its models. AI can be wrong: check anything important before you act on it.

Who helps us run Perpscore

These services process data for us, only to do their job and under their data processing terms:

• Vercel (hosting the website; it also tells us the country, region and city of a connection) and Neon (our database).
• Anthropic (the AI that writes Coach and Desk answers; see above).
• Resend (sending account emails such as sign-in confirmations, password resets, receipts and money-back copies; it receives your email address and the email).
• Google and Telegram (if you choose to sign in with them), and Telegram for the bot's messages.
• Cloudflare Turnstile (a check that sign-ups, password-reset requests and, after many wrong passwords, sign-ins come from people, not bots; it receives your IP address).
• Blockchain data providers (such as Alchemy) to see your crypto payment arrive. They receive only our own payment addresses, never your name or email.
• Razorpay (old card and UPI payments; it also receives your Telegram ID, to match the payment to you).
• Hyperliquid (public trade and market data; we ask it about the wallets you look up) and CoinGecko (prices; no personal data).

Some of these companies process data outside your country, including in the United States. Where the law asks for it, these transfers rely on safeguards such as the European Commission's standard contractual clauses in their terms, or on the EU-US Data Privacy Framework where a provider is certified under it. We may also share data if the law requires it, or to protect Perpscore or its users from fraud or abuse.

Public pages

Wallet data is public on Hyperliquid already. Anyone can look up any wallet on Perpscore, and anyone with a report's link can open it. A report shows the wallet's full address, except for wallets saved in our Telegram bot: those show a shortened address. A few owners who proved a wallet was theirs before we stopped checking that (October 2026) chose to show it in full; /private in the bot shortens it again. Saving a wallet on your account page doesn't change any of this.

How long we keep it

• Your account data: while your account is open. When you delete your account, it is deleted from our database at once; the short-term backups our database provider keeps roll over on their own within days.
• Safety data (scrambled IP addresses, device IDs, and scrambled records of recent sign-in attempts): deleted automatically, most of it within a few days and the rest within 30 days, except for three records. A scrambled record of which network an invite came from, used to stop fake invites, is deleted 6 months after it was last seen. When someone opens an invite link, a scrambled code made from their IP address is kept with the day, so each visitor counts once a day for that invite; it is deleted after 400 days. A Desk answer's copy and its rating keep a scrambled IP address and, without an account, the device ID, for as long as they are kept (below).
• Delivery records: emails we queued, after 14 days; Telegram messages we queued, after 30 days. Usage counters, after 90 days at most. Telegram connection history, after 90 days.
• Partner program invites: if we invite an email address to become a Perpscore partner and the invite is not used (it is cancelled, or it runs out after 90 days), the address is deleted 6 months (180 days) after that.
• Desk answers: a copy of each answer and its question, kept 8 days so you can rate it. If you rate it, the answer, your rating and your note are kept for 6 months (180 days). Both are kept with a scrambled IP address and, if you're not signed in, your device ID, so each person rates an answer once.
• Page-view records: deleted after 6 months (180 days).
• Payment records, and the money-back, withdrawal and "start right away" records that go with them: kept for as long as tax and accounting rules require, also after you delete your account. They are then no longer linked to you by name or email; the blockchain transaction itself is public and can't be deleted by anyone.

Your rights and how to use them

Wherever you live, you can ask us to:

• See and download your data: use "Download my data" on your account page. It gives you a file with everything we keep about your account.
• Correct it: most of it you can change yourself on your account page; for anything else, write to us.
• Delete it: use "Delete my account" on your account page (we send a code to your Telegram or email to confirm it's you), or write to support@perpscore.app from your account's email, or message us on Telegram. We delete your account and everything tied to it, except payment records and the short-lived safety data above, which is deleted on its own schedule.
• Object or restrict: ask us to stop a use that relies on our legitimate interests, or to pause a use while we check something you raised.
• Stop the Telegram bot: send /stop to the bot. It deletes your bot profile, your wallet there and the reports you made with it, and disconnects the bot from your website account (the website account stays until you ask us to delete it). We keep payment records (plan, amount, date and payment reference), and, to stop abuse, a few records with your Telegram ID: connection history (up to 90 days), messages the bot queued (up to 30 days), how often the bot was used (up to 3 days), and whether Telegram lets the bot message your chat.

We answer within one month, free of charge. We may ask you to confirm it's you first, so nobody else can get or delete your data. You can also name someone to act for you.

• In the EU, the EEA and the UK (GDPR): you also have the right to data portability, and to complain to your data protection authority (in the UK, the ICO). We'd like the chance to fix it first.
• In India (the Digital Personal Data Protection Act, 2023): you can ask for a summary of your data and who we shared it with, have it corrected or erased, nominate someone to use your rights if you can't, and raise a grievance with us at support@perpscore.app. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
• In California and other US states with privacy laws: you can ask to know, correct and delete your data, and we won't treat you differently for asking. We don't sell or share personal information for advertising, and we honour Global Privacy Control.

Security, age and changes

Security. Connections are encrypted, passwords are stored only in scrambled (hashed) form, sign-in links and codes expire quickly, and only the site owner can reach your data (changes made in the owner's tools are logged). No system is perfect: if something goes wrong that puts your data at risk, we will tell you and the authorities as the law requires.

Age. Perpscore is for adults. You must be 18 or older to use it, and we don't knowingly collect data from anyone younger.

Changes. If we change this policy, we update this page and the date at the top. For big changes, we tell signed-in users on the site.

See also our Terms of Service.