Privacy Policy

Last updated: October 15, 2025

WHAMM ("we", "us", "the app") is a portfolio monitoring dashboard for Hyperliquid. This Privacy Policy explains what data we collect, how we use it, with whom we share it, and how we protect it.

1. Data Controller

The data controller is the operator of WHAMM, contactable at [email protected].

2. Data We Collect

2.1 Google Authentication Data

When you sign in with Google, WHAMM receives the following data through Google's OAuth 2.0 API:

Email address (scope userinfo.email): used to identify your account and to send you any email alerts you have enabled.
Name and profile picture (scope userinfo.profile): used solely to display your avatar and name in the dashboard.
Google user ID (scope openid): used to uniquely associate your data with your account.

We do not access Gmail, Google Drive, Google Calendar, Google Contacts, or any other Google data beyond what is listed above.

2.2 Data You Provide Manually

You may add one or more public Hyperliquid wallet addresses (format 0x...) to the dashboard. These addresses are public on-chain data and do not contain personal information.

2.3 Technical Data

The platform does not use tracking cookies or third-party analytics. Only technical cookies strictly necessary to maintain the authentication session are used.

3. How We Use the Data

Authentication: your email and Google ID are used to create and manage your WHAMM account.
Dashboard display: your name and avatar are shown in the interface to personalize your experience.
Email alerts: if you enable risk notifications, your email address is used to send you an email when the risk of one of your accounts exceeds your chosen threshold. Emails are delivered through the Resend service.
Portfolio monitoring: the wallet addresses you add are queried through the public Hyperliquid API to retrieve balances, positions, and risk data.

4. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes.

Your data may be processed by the following technical service providers:

Supabase (database and authentication): stores email, Google user ID, wallet addresses, and notification settings. Servers are located in the European Union.
Resend (email delivery): receives your email address only when a risk alert needs to be sent.
Cloudflare (hosting and CDN): serves the static files of the application.
Hyperliquid API: receives the public wallet addresses you enter, to retrieve portfolio data.

5. Data Retention

Your data is retained for as long as you keep an active account on WHAMM. You may request complete deletion of your data at any time by writing to [email protected]. Deletion is completed within 30 days of the request.

6. Data Security

We adopt appropriate technical and organizational measures to protect your data:

Encryption in transit (HTTPS/TLS) for all communications.
Row Level Security on the database: each user can access only their own data.
OAuth 2.0 authentication via Google: we never store your Google password.
Data access limited to personnel strictly necessary.

7. Your Rights

In accordance with the GDPR (EU Regulation 2016/679), you have the right to:

Access your personal data.
Rectify inaccurate data.
Erase your data ("right to be forgotten").
Restrict processing.
Data portability.
Object to processing.

To exercise these rights, contact [email protected].

8. Google API Services User Data Policy

WHAMM's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, the user's Google data is used exclusively to:

Authenticate the user on WHAMM.
Display the user's name and avatar in the dashboard.
Send risk alert emails (only if enabled by the user).

Google data is not transferred to third parties, is not used for advertising, and is not read by humans except for security purposes or to comply with legal obligations.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page indicates the most recent version. Material changes will be communicated by email.

10. Contact

For any questions about this Privacy Policy: [email protected]