Privacy policy
Who we are
Bonded Capital is operated from the United States. Questions about your data go to .
Visiting the site
The website is hosted by Vercel Inc. Our API runs on a server rented from Latitude.sh in Frankfurt, Germany, and is reached through Cloudflare Inc. To deliver pages and protect against attacks, these providers process your IP address and the details of each request in short-lived logs. Our own API does not store IP addresses. To count visits we keep, per day, the number of views of each page, the domain of the site you came from, and how many different visitors there were; to tell visitors apart for that day only, the server forms a one-way code from your IP address and browser name with a key that changes every day and is never stored. We use no cookies, no analytics service and no advertising trackers.
Signing in
You sign in by signing a message with your wallet; we never receive a private key or a seed phrase. We store your public wallet address and a session. The session token and the name of the wallet app you used last are kept in your browser's local storage, which you can clear at any time.
Trading
We store your orders, fills, balances, rule events and payout requests to run your challenge. To find coordinated buying, we compare your buys with public on-chain activity in the minute after them. A flag never decides on its own: a person checks every flagged account before a payout is refused.
Boards and leagues
The public board and the weekly league show running challenges by their account number, level, title and result. They never show a wallet address or anything else about you.
Payments and payouts
Payments and payouts are Solana transactions. They are public and permanent: anyone can see that your wallet paid the reserve or received a payout, and nobody, including us, can delete that from the blockchain. The landing page shows recent challenge purchases with the plan and only the first four characters of the paying wallet. We keep payment records as long as tax law requires.
Referrals
If you arrive through a referral link, your browser keeps its code until your wallet signs in; then we store which wallet referred yours, to apply the discount and pay the referrer's commission. The referrer's dashboard shows each referred trader only by a number, never your address.
Identity check before a payout
Before your first payout we may verify your identity: your name, date of birth, country and an identity document, and check it against sanctions lists. If a verification provider does this for us, we name it here before we ask anyone for it.
Who else receives data
- Vercel Inc., USA: hosting of the website.
- Cloudflare Inc., USA: network and protection for our API.
- Latitude.sh: the server in Frankfurt that runs our API and database.
- Helius, USA: our Solana RPC provider, which reads and sends the transactions of your payments and payouts.
The SOL price comes from CoinGecko; we send no personal data there. We sell no data to anyone.
Your choices
You can ask us at for a copy of the data we hold about your wallet, and to correct or delete it, except what is on the blockchain and the records we must keep to settle payouts and prevent fraud.
Changes
We update this policy when the service changes. The date at the top shows the current version.