Privacy Policy
Effective April 9, 2026.
HFAT collects the minimum data necessary and uses it only to run the service.
What we collect
- When you join early access — email and (optionally) Telegram username.
- On form submission — the Cloudflare Turnstile bot-check result (a service token, not personal data).
- Nothing else without your active action.
What we DON'T do
- We don't share your data with third parties.
- We don't use it for marketing outside HFAT.
- Exchange API keys are stored encrypted. It is your responsibility to lock the keys down on the exchange side: IP allowlist, no withdrawal permissions, minimum required scopes.
Data removal
On request we'll delete all your data from the system — typically within 1–3 business days.
Questions and data removal — Telegram @hfat_admin or email [email protected].