Privacy

1. Controller and contact

Jan Schäfer, Kybera Trading
Email: Kyberaofficial@proton.me

Contact this address to request access to, correction or deletion of your data, or to ask any other privacy question. Postal address: c/o MDC#1660, Welserstraße 3, 87463 Dietmannsried, Germany.

2. Website and technical access

When you open the website, technical data such as your IP address, the time, requested page and browser information is transmitted to the hosting infrastructure. OpenAI's ChatGPT Sites hosts this website and may use infrastructure partners such as Cloudflare. Processing is necessary to deliver and secure the website (Article 6(1)(f) GDPR). Our legitimate interest is a secure, accessible website. We do not run our own visitor analytics or advertising tracking on this site.

Fonts are served directly from this website; no connection to Google Fonts is made. The home page and member area load the JavaScript library used for authentication through jsDelivr. This transmits technical connection data, including your IP address, to jsDelivr. Processing supports sign-in (Article 6(1)(f) GDPR); our legitimate interest is a working member account and sign-in status display. More information: jsDelivr.

3. Registration and member account

When you register, we process your first and last name, email address, a technical user ID and a protected password hash. Kybera cannot see your password itself. The account uses Supabase Auth for sign-in and password links. You must confirm your email address. Your name is used for personal account support and to associate inquiries and access with your account. Email and password support sign-in and account security. These fields are required to register through this form; without them you cannot create an account here. Processing is necessary to provide and administer the account you requested (Article 6(1)(b) GDPR). The Supabase project is stored in the London region of the United Kingdom.

The displayed Discord member count is an approximate server value from Discord’s public invite API. We do not record website account activity times for this display.

The home page checks your sign-in status and displays your email as a dashboard link when you are signed in. This is visible only in your browser and is not a public member directory.

To keep you signed in, the application stores technically necessary session information in your browser's local storage. Signing out or clearing browser data removes it. Persistent sign-in cannot work without this storage.

Confirmation and password emails are sent through Resend. Your email address and the message content are passed to Resend for this purpose. The sending domain is configured in the Ireland region. Registration does not subscribe you to marketing emails. More information: Supabase and Resend.

4. Bitget and Bitunix UIDs

If you enter a UID, we store it with your account and email address. Jan Schäfer manually checks the stated affiliate association in the relevant partner dashboard and records the review result. Other members cannot see your UIDs or review result. This information is used to process your association request (Article 6(1)(b) GDPR). An approved UID does not automatically grant paid Discord access. No decision with legal effect is made solely by automated means.

Enter only your UID. We do not need passwords, API keys or identity documents for this check.

5. Contact, payments and external links

If you contact us by email or Discord, we process the information you send to answer your inquiry or check a payment or activation (Article 6(1)(b) GDPR; Article 6(1)(f) GDPR for general inquiries). Our legitimate interest is responding to your message. For manual crypto payments, this can include a transaction hash, selected plan, Discord username and TradingView username. Blockchain transactions are publicly traceable independently of this website.

Links to Subscord, Discord and X open their sites only when you click. Their own privacy policies govern their processing. Subscord may handle checkout and the paid Discord role; payment details are entered there, not in the Kybera member area.

6. Recipients, international transfers and retention

For the purposes above, we use OpenAI/ChatGPT Sites and its infrastructure partners for hosting, Supabase for authentication and the database, and Resend for emails. Loading the authentication library connects your browser to jsDelivr. Depending on the provider, data may also be processed outside the European Economic Area. The EU has an adequacy decision for the United Kingdom. For other international transfers, safeguards depend on the providers' applicable contractual terms; we can explain the information available for your case on request.

Accounts including first and last name, UIDs, review results and assigned products and access periods are retained while the account and association review are needed. We delete them on request unless legal retention duties or legitimate claims require otherwise. Messages and payment records are kept only as long as needed for handling the matter and any legal obligations. Providers delete technical logs under their own retention rules.

7. Your rights

You may request access, correction, deletion, restriction of processing and, where applicable, portability of your data. You may object to processing based on legitimate interests. Email Kyberaofficial@proton.me to exercise these rights. You also have the right to lodge a complaint with a data protection supervisory authority.

8. Trade journal

If you use the optional trade journal, we store market, direction, trade date, optional price levels, net result and personal notes together with your user ID in the Supabase database. Imported CSV or ZIP files and pasted tables are processed in your browser; selected trade records are sent to Supabase when you save them. Statistics such as win rate, results and long/short distribution are calculated from your records in your browser. Processing provides the trade documentation and analysis you request (Article 6(1)(b) GDPR).

Other members cannot access your personal records. You can edit them or remove them from your overview. Removed records are initially marked as deleted so you can undo the action; this does not permanently erase them from the database. To request permanent deletion, email Kyberaofficial@proton.me.

9. Charts and saved drawings

For market charts, your browser retrieves public prices and candle data from the Binance market-data API at data-api.binance.vision. The provider receives technical connection data, including your IP address, and the requested market and interval. Kybera does not send exchange credentials, private exchange-account data or saved journal or note data with these requests. The Lightweight Charts library loads through jsDelivr. These connections provide the chart feature you request (Article 6(1)(b) GDPR).

When you save drawings, Supabase stores your user ID, market, interval, drawing type, time and price coordinates, label, colour and creation time. Other members cannot access private drawings; publishing shared analysis is reserved for administrators. You can edit and delete your own private drawings in the chart. Processing provides your saved chart view (Article 6(1)(b) GDPR). The external TradingView link opens TradingView only when you click it; its own privacy policy applies there.

When you open the economic calendar in the dashboard, a TradingView widget connects to s3.tradingview.com and www.tradingview-widget.com to display economic events and published figures. TradingView receives technical connection data, including your IP address and browser information. The visible calendar refreshes automatically. Kybera does not pass your account name, email, exchange UIDs or journal entries to the widget. TradingView’s privacy information is available at tradingview.com/privacy-policy.

10. Learning progress, rank and personal notes

Supabase stores your user ID, lesson ID, completion marking and last saved lesson. Learning ranks and badges are calculated from lessons you mark as completed. They do not assess your financial circumstances, trading results or professional qualifications and do not produce automated decisions with legal effects.

Personal lesson notes are stored in Supabase with your user ID and lesson ID. Other members cannot access your personal notes or progress records. Processing provides the documentation, synchronisation and learning continuity you request (Article 6(1)(b) GDPR). These account features are available independently of paid membership. Your own records remain accessible after membership ends, while access to paid lesson content is governed separately.

Your browser also keeps a local learning record, pending saves, bookmarks and, where applicable, personal notes so you can resume and retry interrupted synchronisation. Previously local-only lesson notes are associated with your account and uploaded to Supabase when you open the notes area, where no corresponding cloud note already exists. You can reset completion markings and edit or clear notes. For complete deletion of saved learning and note records, email Kyberaofficial@proton.me. Remove local copies separately by clearing this website's browser data; signing out alone does not necessarily remove local learning-record copies.

11. Orders and contract confirmation

When you use the Kybera checkout, we process your user ID, name, email address, Discord username and ID, where applicable your TradingView username, product, term, price and payment status. Your consent declarations are saved with their exact wording, version, timestamp and order ID, together with the contract documents. This processes your order, matches payment and access, and records your declarations (Article 6(1)(b) GDPR; Article 6(1)(c) for statutory retention requirements and Article 6(1)(f) for necessary evidence and legal claims).

Resend sends the contract confirmation to your account email address and receives the necessary order and contract information, including an HTML attachment. Payment then takes place with the payment provider identified at checkout. To match a Subscord payment, the provider may send Kybera the email address, Discord ID, product option, amount, payment method, invoice ID and payment time for comparison with your order. Kybera checkout does not collect full card details or wallet-access credentials. Order, consent and payment evidence may be retained beyond membership termination or account deletion where statutory duties or necessary legal claims justify retention.