Read this first. This text was written from the system's own code, and it describes what the system does today. It has not been reviewed by a lawyer. If you need a formal legal guarantee before using the service, don't use it — and if anything here is wrong or incomplete, write to the address in item 8 and I'll fix it.
Henrique Muniz, an individual, responsible for processing the data of this site (the controller, in the language of the LGPD). There is no company behind PERPBOT: it is a personal project, free and experimental.
Contact for anything to do with data, including deletion:
exclusao@perpbot.online
| Data | When | What for |
|---|---|---|
| sign-up (required) | to identify the account, to send the confirmation code and, if you agree to it, the weekly summary | |
| Password | sign-up (required) | to log in to the dashboard. Stored as a scrypt hash — never in plain text, not even to us |
| Name/nickname | sign-up (optional) | becomes the address of your dashboard (/u/your-nickname) |
| WhatsApp or Telegram | sign-up (optional) | only to get in touch; you can leave it blank |
| Public wallet address | sign-up (optional) | to show your public balance next to the simulated one. It is a public address — we never ask for a private key or a recovery phrase |
| Language | automatic | to show the site in your language |
| Exchange API key | only if you activate a real account | see item 3, which is entirely about it |
| Your results | use | trades, curve and state of every bot you have turned on |
We do not collect: tax ID, identity document, home address, card details (there is nothing to pay), wallet private key or recovery phrase. None of these is asked for anywhere on the site — and if anyone asks for them in our name, it's a scam.
If you activate a real account, you connect an OKX API key. The path it takes is designed so that neither the site nor the database can read it:
The key cannot withdraw or transfer. We refuse any key with those permissions, automatically, before storing it. The worst anyone can do with it — us included — is to open and close positions in your sub-account. Your money never leaves your account and never passes through us.
You can delete the key whenever you want, from your dashboard. The server overwrites the file before removing it.
We do not sell or hand over data to anyone. We use these services to make the site work, and only these:
| Service | What it sees | Where |
|---|---|---|
| Vercel | hosts the site and the functions; sees the requests you make | USA / global network |
| Neon | database: e-mail, password hash, your results | cloud |
| Resend | sends the e-mails (confirmation code, summary) | USA |
| Amazon AWS (EC2) | the bots and the private key of the envelope | São Paulo, Brazil |
| Google Analytics | visit statistics — only on the public pages and only with your consent | USA |
There is no Google Analytics on the client-facing pages. The sign-up, login, dashboard and deletion pages do not load a single line of it — precisely so that your use of the dashboard turns up in no report at all.
pb_session — essential. It is what keeps you logged in.
Signed, HttpOnly (the page's JavaScript cannot read it) and
Secure. It lasts 30 days or until you delete the account.cr_lang — stores the language you chose.perpbot_ck — is not a cookie, it is a note
in your browser's storage, and it serves only to remember your answer
to the banner above. Storing a cookie to remember that you don't want cookies
would be absurd.If you visited this site before the banner existed, there may be an old Google Analytics cookie in your browser. Until you say yes, we delete it on every visit — stopping planting is not the same as pulling up what was already planted.
Changed your mind? Delete the site's data in your browser
(Clear browsing data for perpbot.online): the
banner asks again. To block Google Analytics on any site,
Google offers an add-on at
tools.google.com/dlpage/gaoptout.
As long as your account exists. When you delete the account, everything goes at once — e-mail, nickname, wallet, bots, history and the exchange key, including its file on our server. There is no trash can and we keep no copy.
One single record stays, with no owner: the note that an account was deleted, with how many bots it had and whether it had a key. It contains no e-mail, no nickname and no data that identifies you.
What does not get deleted are the public fleet's trades — they are ours, they have always been public and they never carried your name.
The LGPD (Law No. 13.709/2018) gives you, among others, the right to access, correct, port and delete your data. Here:
exclusao@perpbot.online.Henrique Muniz — exclusao@perpbot.online
To delete your account you don't need to write: the /sair page does it at once. The address is there for questions, corrections and for whatever the page does not settle.
If this policy changes, the date at the top changes with it and the previous version stops being valid. Changes that affect what we do with your exchange key will be announced by e-mail to everyone with an active real account.
Brazilian law, in particular the LGPD (Law No. 13.709/2018).