Privacy Policy
This Privacy Policy explains how Sinux Consulting (SSM Registration No. 202503207573), based in Malaysia ("we", "us", "our"), collects, uses, and protects information in connection with Sinux Signals (the "Service"). By using the Service, you agree to this Policy.
1. Information we collect
When you sign in with Discord, we receive from Discord (via OAuth) and store:
- your Discord user ID, username, and display name;
- your Discord avatar;
- the Discord servers you belong to and your roles in the servers relevant to the Service — used solely to determine your access permissions.
We do not collect your Discord password, your email address (unless you choose to provide it to us), payment details, or your private messages.
We also process:
- Trade-signal content (messages, watchlists, and analysis) posted by analysts in the Discord channels connected to the Service. This content is provided by those analysts and their servers and is displayed to authorised users.
- A strictly-necessary session cookie to keep you signed in.
- Basic technical and log data (such as request metadata) as part of normal operation and security.
2. How we use information
We use information to: authenticate you and manage access; operate, maintain, and secure the Service; display trade signals and related data; respond to your requests; and comply with legal obligations. We do not sell, rent, trade, or share your data with third parties for advertising or marketing purposes.
3. Cookies and local storage
We use no advertising, analytics, or cross-site tracking cookies, and no third-party trackers. Everything stored on your device is either strictly necessary to sign you in or a preference you set yourself, which is why the Service does not show a cookie-consent banner.
Cookies we set:
tape_session— a signed, httpOnly session cookie that keeps you signed in. Strictly necessary; without it the Service cannot authenticate you.tape_oauth_state— a short-lived (10 minute) httpOnly cookie used only during Discord sign-in to protect against cross-site request forgery. Strictly necessary.
Both are first-party, marked SameSite=Lax, and sent over HTTPS only in production. Neither is used to profile you or track you across other websites.
Local storage on your device. The Service also saves a small amount of data in your browser's local storage so the app behaves the way you left it. This never leaves your device and is not sent to us:
- your display preferences — light/dark theme, and layout/density settings;
- where you were — the last tab you had open and which servers you had selected, so a refresh returns you to the same view;
- your notification preferences and which alerts you have already seen;
- whether you have completed the product tour, and when a feedback prompt was dismissed, so you are not asked again;
- a short-lived cache of chart data to reduce repeat loading.
You can clear all of it at any time through your browser's "clear site data" controls; the Service will simply return to its defaults. Note that clearing the session cookie will sign you out.
If we ever introduce analytics or any non-essential tracking, we will update this Policy and ask for your consent first where the law requires it.
4. How information is stored and shared
We do not sell your personal information. We use the following providers to run the Service:
- Discord Inc. — authentication and message delivery (discord.com/privacy).
- Supabase — database and authentication hosting (supabase.com/privacy).
- Vercel — application hosting (vercel.com/legal/privacy-policy).
- We may disclose information if required by law or to protect our rights, our users, or the public.
5. Data retention
We retain personal information for as long as your access is active and as needed to provide the Service, then delete or anonymise it within a reasonable period, unless a longer retention period is required by law.
6. Your rights
Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to withdraw consent. To exercise these rights, or to request deletion of your account data, contact us using the details below. You may also revoke the Service's access at any time from your Discord account's "Authorized Apps" settings.
7. Security
We use reasonable technical and organisational measures to protect information, including access controls and encryption in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Children's privacy
The Service is not intended for, and may not be used by, anyone under 18. We do not knowingly collect information from children.
9. Third-party links and content
The Service may link to or display content from third parties (including Discord). We are not responsible for the privacy practices of those third parties.
10. International data transfers
Sinux Consulting is based in Malaysia. Your information may be processed in Malaysia and in other countries (including where our service providers operate), which may have different data-protection laws than your own. By using the Service, you consent to such processing.
11. Changes to this Policy
We may update this Policy from time to time. We will indicate changes by updating the "Last updated" date above.
12. Contact
Questions about this Policy or our data practices? Contact us at support@sinuxconsulting.com.