Privacy Policy

Last updated: 2026-08-13

CryptoGamma (https://cryptogamma.io) is an independent crypto options analytics site. Most of the site — the Dashboard, Skew Analysis, Vol Lab, and educational pages — is fully usable without an account. This page covers what we collect, why, and what happens when you sign in with Google to generate an API token.

1. Signing in with Google

Signing in is only required to generate an API token on /api-docs. We use Google's OAuth 2.0 sign-in and request only the openid, email, and profile scopes — your name, email address, and profile picture. We never see or store your Google password.

On first sign-in we create an account record containing your Google account ID (a stable, non-guessable identifier — not your password or any Google credential), email, display name, and profile picture URL. This is stored in our own database and used only to (a) identify your account when you return, and (b) associate an API token with you so it can be revoked or regenerated.

2. API tokens

When you generate a token, we store only a one-way cryptographic hash of it — never the token itself. The raw token is shown to you exactly once, at generation time. We record when a token was created and when it was last used (for abuse detection), but not what it was used to request. Regenerating a token immediately invalidates the previous one.

3. Cookies & sessions

Signing in sets a single, HTTP-only session cookie so you stay logged in across visits. It contains only a signed token identifying your session — no tracking payload. We do not use third-party advertising cookies.

4. Analytics

Like most websites, we use Google Analytics to see aggregate page-view counts and general traffic patterns, and ipinfo.io to see the approximate country/region visitors are browsing from. Neither is tied to your CryptoGamma account. You can opt out of the ipinfo check by setting localStorage.ipinfo_disabled = "true" in your browser.

5. What we don't do

• We do not sell or rent your personal data to anyone.
• We do not use your data to train AI models.
• We do not share your Google profile data with third parties beyond the analytics providers named above.

6. Data retention & deletion

Account and token records are kept for as long as your account exists. To delete your account and all associated data (profile info and token hash), contact us using the details below — we'll process the request within 30 days.

7. Changes to this policy

If this policy changes materially, we'll update the "Last updated" date above. Continued use of the site after a change means you accept the revised policy.

8. Contact

Questions about this policy or a data deletion request? Reach us via the contact links on our GitHub repository.