Privacy policy
TL;DR
- HYPE is in a private pilot. Trading uses virtual money: we don't handle your money, card or bank details, and we don't ask for ID.
- To get early access you give us your email address. We use it to confirm it's yours and to send your invite. No marketing.
- In the app you have a username, display name and photo. Other people see these, and your trades in the public feed, without amounts. People in a group with you also see amounts and what you write there.
- Sign-in is handled by Privy. It also sets up a crypto wallet for you, which HYPE doesn't use during the pilot.
- We measure how the app is used (which screens, whether people come back) to improve it. Never amounts, balances or what you write. You can switch this off on your profile.
- We don't sell your data and there are no ads.
- Our service providers process data for us, mostly in the EU. Some are in the US (see below).
- You can ask us for a copy of your data, to correct it, or to delete it: [email protected]. The GDPR applies.
1. Who we are
HYPE is run by Three Letter Company BV, Singel 542, Amsterdam, the Netherlands, KvK 95046518. We're the controller of the personal data described here. Questions: [email protected].
2. What we collect
Early access (hype.cm)
- Your email address, when you signed up and confirmed it, and the waitlist group you chose or joined.
- Your country, as estimated from your connection, to see where interest comes from. Your IP address is used only to prevent abuse (too many signups) and isn't stored.
Your account (the app)
- Sign-in: your email address, or your Google account if you sign in with Google, or a passkey. Privy handles this and gives us an account id; we read your email to check you were invited.
- Profile: username, display name and photo. If you sign in with Google, we can use your Google profile picture; we store a copy of it.
- Activity: your virtual trades and balances, coins you favourite, groups you're in, messages and reactions you post, and your notification settings.
- Notifications: if you turn on push notifications, a delivery address for that device, issued by your browser's push service.
Usage statistics
- Events like "opened the app", "viewed a screen", "made a first trade", "joined a group", "sent a message" or "reacted", with your HYPE account id. Never amounts, prices, balances, message text, names or email addresses.
- Screens are recorded by type (for example "a coin page" or "an invite link"), not the exact address.
- No location: we turn off location lookup.
What we don't collect
No payment, card or bank details, no ID documents, no contacts, no precise location. We don't record your screen or keystrokes.
3. Why we use it
| What for | Data | Legal basis |
|---|---|---|
| Early-access list and invites | Email, signup details, group | Your request to join (pre-contract) |
| Running your account and the app | Account, profile, activity | Our agreement with you (contract) |
| Showing your profile and trades to others | Profile, trades (public: no amounts; groups: with amounts) | Contract: sharing is how HYPE works |
| Push notifications | Device push address | Your consent (you turn them on, and can turn them off) |
| Using your Google photo | Google profile picture | Your choice when signing in or tapping "Use Google photo" |
| Improving HYPE | Usage statistics | Our legitimate interest; you can switch it off |
| Security and abuse prevention | Technical logs, rate limits | Our legitimate interest |
| Legal obligations | What the law requires us to keep | Legal obligation |
4. What other people see
- Everyone in HYPE: your username, display name, photo, and your trades (coin, buy or sell, time, price), never the amount. Your profile shows your number of trades and your overall return as a percentage.
- People in your groups: also the amounts of your trades, and the messages and reactions you post in that group.
- We never show balances or position sizes on your profile.
5. Who we share it with
We use service providers who process data on our behalf, under a data processing agreement:
| Provider | What for | Where |
|---|---|---|
| DigitalOcean | Hosting the app | Amsterdam, Netherlands |
| Supabase | Database | Ireland (EU) |
| Privy | Sign-in and wallet | United States |
| Cloudflare | hype.cm website, domain and email forwarding | Global network |
| MailerSend | Sending confirmation and invite emails | EU |
| Resend | Backup for sending emails | United States |
| PostHog | Usage statistics | EU (Frankfurt) |
| Apple, Google, Mozilla | Delivering push notifications to your device | Depends on your device |
Not shared: CoinGecko (prices) and X (team posts on coin pages and in News) never receive your data from us. When you tap "View on X", you go to X and their privacy policy applies.
We don't sell personal data, don't share it for advertising, and only give it to authorities when the law requires.
6. Data outside the EU
Some providers (Privy, Resend, Cloudflare) are based in or process data in the United States. We rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the EU's standard contractual clauses.
7. How long we keep it
- Early-access list: until you ask us to remove you, or 12 months after the pilot ends, whichever comes first.
- Account and activity: as long as you have an account. When you ask us to delete it, we delete or anonymise it within 30 days. Backups expire on their normal schedule.
- Usage statistics: up to 12 months.
- Technical logs: a few weeks at most.
8. Cookies and storage on your device
We don't use advertising or tracking cookies. The app stores a few things in your browser so it works and opens quickly: your sign-in session (Privy), the coin list, and small preferences like the last tab you used. Usage statistics don't store anything on your device.
9. Your rights
You can ask for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Email [email protected] from the address on your account; we answer within a month. You can switch usage statistics off on your profile ("Help improve HYPE") and push notifications in Notifications.
If you're unhappy with how we handle your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or the authority where you live.
10. Security
Data is encrypted in transit, access is limited to the people who need it, and admin actions are logged. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.
11. Age
HYPE is for people aged 18 and over. If we learn we have data from someone younger, we delete it.
12. Changes
This policy describes the pilot. Before real-money trading starts it will change, for example for identity checks and payments, and we'll tell you in the app or by email before that applies to you.