inequal. / LEGAL
Privacy Policy
Draft for owner and legal review · Updated November 2, 2026
This draft explains the information the current inequal. website and account screens ask you to provide. It must be confirmed against the deployed service and its providers before publication.
Information you provide
When you request an account, the site submits your name, email address, password, and password confirmation to the inequal. authentication service. During signup or sign-in verification, the service also receives your email address and the six-digit code you enter. The frontend does not display or log authentication tokens.
How the site uses this information
The account details and verification code are sent to process signup, email verification, and sign-in. After successful sign-in, access and refresh credentials are stored in this tab's sessionStorage so the session survives page reloads in that tab. A separate 24-hour trusted-device token is stored in localStorage so the same browser can sign in again without another code during that period. The session and trust token are available to scripts running on the page, so protection against script injection is important. Signing out removes the session and requests revocation from the authentication service; the trust token expires independently after 24 hours.
Service providers and processing
Account requests are sent to the authentication API configured for inequal. The API and its hosting or email-delivery providers may process information needed to provide these flows. The operator must identify the providers, their locations, and the data they handle before this policy is final.
Market data on this site
Market prices, signals, sentiment, strategy performance, and backtest figures shown on the marketing page are simulated illustrative content. The current page does not connect these displays to live exchange data.
Retention, security, and your choices
The frontend stores the signed-in session in tab-scoped sessionStorage and clears it when you sign out. It stores a separate trusted-device token in localStorage for up to 24 hours; clearing site storage removes it, and the service checks its expiry before accepting it. Account-record retention, verification-code retention, server logs, deletion requests, and other backend data practices are controlled by the service and are not specified by this frontend. Contact support to ask about your account or personal information; the operator must confirm the request process and applicable rights before launch. No website can promise absolute security, but the operator should document the safeguards used by the deployed service.
Contact
Questions about privacy can be sent to support@inequal.space.