Last Updated: October 28, 2026
This Privacy Policy describes how Theorem Capital LLC ("Company", "we", "us", or "our") collects, uses, and protects your information when you use WatchCrypto ("Service").
| Purpose | Data Used |
|---|---|
| Provide and maintain the Service | Account info, usage data |
| Send price alerts and notifications | Email, alert settings |
| Transmit and sign orders you initiate at third-party venues | Encrypted exchange/agent credentials |
| Comply with sanctions and export-control laws (geo-blocking and circumvention prevention) | IP address, derived country/region |
| Improve our Service | Aggregated usage analytics |
| Communicate with you | Email address |
| Prevent fraud and abuse | IP address, device info |
We do not sell your personal information. We may share information only in these circumstances:
WatchCrypto is operated from the United States and is subject to U.S. economic sanctions and export-control laws. To comply with those laws, we use IP-based geolocation to enforce sanctions-based access restrictions and to detect and prevent circumvention. We resolve your IP address to a country and region only (not a precise location), using MaxMind GeoLite2 data and our content delivery network's (Cloudflare) country signal, in order to block access from comprehensively or precautionarily sanctioned jurisdictions, which currently include Cuba, Iran, North Korea, Syria, and the Crimea, Sevastopol, Donetsk, and Luhansk regions of Ukraine.
When access is blocked, we write a sanctions-compliance record containing a timestamp, a truncated SHA-256 hash of the IP address (pseudonymous; the raw IP address is not retained in that log), the resolved country and subdivision, and the requested path, to a dedicated append-only audit log. These records are retained to meet U.S. recordkeeping requirements as described in the Data Retention section.
We also check the wallet addresses you sign in with or connect for trading against the U.S. Treasury's list of sanctioned crypto addresses (part of OFAC's Specially Designated Nationals list). A listed wallet cannot be used on WatchCrypto; a refusal is kept in our sanctions-compliance records with the wallet address, which is already public on that list. The same IP geolocation also decides where our trading features are offered (see our Terms of Service).
IP geolocation is imperfect and may occasionally misidentify your location, which means a legitimate, non-sanctioned user could be wrongly blocked. If you believe you have been blocked in error and you are not located in, ordinarily resident in, or a citizen or national of a sanctioned jurisdiction, contact [email protected] to request review. We will not lift a block where doing so would conflict with applicable sanctions or export-control law.
We implement industry-standard security measures to protect your information:
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
You have the right to:
To exercise these rights, contact us at [email protected]
You do not need to contact us to delete your account. Sign in and use Delete account on your account page, or on the Me tab in the terminal on a phone. You will be asked to re-enter your password to confirm.
Deletion is immediate and cannot be undone. It removes your account record, your saved layouts and preferences, your price alerts and push-notification subscriptions, any connected exchange, Hyperliquid or Bulk agent keys, and any outstanding sign-in sessions. The one exception is the sanctions-compliance records described in the Data Retention section, which contain no account identifiers and are subject to a 10-year legal hold.
Our own code sets no cookies. The terminal keeps the following in your browser's local storage and IndexedDB, which stays on your device and is not sent to third parties:
Two kinds of cookies can be set on our pages: Google Analytics cookies, when analytics is on (see Section 9), and, if you sign in with email or a social account, Privy's sign-in cookies (their names start with privy-), which keep that sign-in working.
Analytics and your consent. If you are in the European Economic Area, the United Kingdom or Switzerland, Google Analytics and our own usage statistics run only if you accept them when asked on your first visit; until then, and if you decline, neither stores or sends anything. Elsewhere they run by default and you can turn them off the same way. You can change your choice at any time with Cookie settings, also in the footer of our pages; declining removes the Google Analytics cookies and the usage statistics not yet sent. We work out which applies from your IP address's country, as described in Section 4; your browser keeps the answer until you close the tab.
You can also clear local storage and cookies through your browser settings; clearing local storage signs you out and resets your layout.
We use the following third-party services:
Your information is stored and processed on servers located in Japan (Amazon Web Services, Asia Pacific (Tokyo) region). WatchCrypto is operated from the United States, so our personnel may access it from there. For transfers from the European Economic Area, the United Kingdom, or Switzerland we rely on the European Commission's Standard Contractual Clauses, together with supplementary measures as appropriate.
Our Service is not intended for users under 18 years of age. We do not knowingly collect information from children.
This section describes the rights of California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA").
Categories of personal information we collect:
Sources of personal information: you, and your device when you access the Service.
Business purposes for which we use it: providing the Service; sanctions and export-control compliance screening; and security and fraud prevention.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. California residents may request access to or deletion of their personal information, subject to the 10-year sanctions-record legal hold described in the Data Retention section. To exercise these rights, contact [email protected].
If you are in the European Economic Area, the United Kingdom, or Switzerland, the following legal bases apply to our processing of your personal data:
You have rights under the GDPR including access, rectification, erasure, restriction of processing, data portability, and objection. The right to erasure is subject to the 10-year sanctions-records legal hold described in the Data Retention section, to the extent retention is required by law. To exercise these rights, contact [email protected].
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date.
For questions about this Privacy Policy or our data practices:
Theorem Capital LLC
Email: [email protected]
By using WatchCrypto, you acknowledge that you have read and understood this Privacy Policy.