Privacy Policy
Version of 2026-10-18
1. Who the operator is
The data controller is Igor Shatilov, Ukraine. Email for questions and data requests: (write in Gmail · message on Telegram).
This Policy describes what data the Level Alert service (website and Telegram bot) collects, why and for how long it is kept, who it is shared with, and what rights you have.
2. What data we collect
| Data | Source | Purpose | Retention |
|---|---|---|---|
| Telegram ID, name, username (if any) | Telegram, when you sign in via the bot | Sign-in, sending notifications | While the account exists |
| Telegram profile photo (if public) | Telegram | Avatar in the profile menu on the website, visible only to you | Refreshed once a day, deleted with the account |
| Session token (cookie) | Created at sign-in | Recognising the signed-in user | 30 days or until you sign out |
| Watches: exchange, coin, timeframe, levels, creation time | You enter them on the website | Sending signals | Until triggered, deleted, or 14 days |
| Signal history: price, volume, RSI, delivery status | The Service | Showing history on the website | While the account exists (the last 100 entries are shown on the website) |
| Settings: language, signal format, accepted version of the terms and time of acceptance | You | Operating the Service, proof of consent | While the account exists |
| Time on the website per day (how long the tab was open and you were using it) | The website, only after sign-in | Understanding how the Service is used and improving it | While the account exists |
| Device at sign-in: type (phone, tablet, computer), operating system, the app in which the website is open (browser, Telegram, TikTok, etc.) | The browser, when you sign in via the bot | Understanding which devices the Service is used on and improving it | While the account exists |
| Support messages: text, screenshots, files | You write to the bot or by email | Answering questions, fixing bugs | Not stored in our database — they remain in the Telegram chat or the mailbox |
| IP address and user-agent | The browser, with every request | Security, rate limits | Logs — up to 30 days; the rate limiter keeps addresses in memory only |
In addition, we count website visits anonymously: for each day — how many times a page was opened, from which type of device and where the visitor came from (for example, TikTok, Telegram or a search engine). These are only numbers: no cookies, IP addresses or identifiers of any kind, so they cannot be linked to you.
If you have consented to analytics, the website records how you use it through Microsoft Clarity: pages, clicks, mouse movements, scrolling and screen taps, device type, browser, screen size and approximate location (country by IP address). We use this data to watch session recordings and click maps in order to find inconvenient spots and bugs on the website. Your name, username and profile photo are hidden in the recordings, and Clarity also hides text typed into input fields. Recordings are kept by Microsoft for up to 30 days, aggregated statistics for up to 13 months. Without your consent, Clarity is not loaded.
We do not collect email addresses, phone numbers, passwords, payment data or exchange API keys. The Service works only with public market data and has no access to your accounts.
3. Purposes and legal bases
- Performance of the Terms of Use: sign-in, watches, notifications, history.
- Legitimate interest: security of the Service, protection against abuse, rate limits, backups, understanding how the Service is used (time on the website, device at sign-in, anonymous visit statistics).
- Consent: analytics (Microsoft Clarity) — only if you have consented to it. There is no advertising at the moment; if it appears, it will also require your consent.
4. Cookies and browser storage
| Name | Purpose | Category | Duration |
|---|---|---|---|
| session (__Host-session over https) | Signing in to your account | Necessary | 30 days |
| poll_secret (__Host-poll_secret over https) | Confirming sign-in via the bot | Necessary | 15 minutes |
| la_consent | Your cookie choice | Necessary | 12 months |
| __cf_bm, cf_clearance (set by Cloudflare, only during bot checks) | Protecting the website from bots and attacks | Necessary | 30 minutes / up to 1 year |
| _clck, _clsk (set by Microsoft Clarity, only after consent to analytics) | Recognising repeat visits and grouping page views into one session | Analytics | 1 year / 1 day |
| MUID, CLID, ANONCHK, SM (clarity.ms and bing.com domains, only after consent to analytics) | Clarity service cookies for sending analytics data | Analytics | up to 1 year |
| la_lang, la_theme, la_tz and other la_* (browser storage) | Language, theme, time zone and chart settings | Necessary | Until you clear them |
Analytics (Microsoft Clarity) is enabled only after you consent in the cookie banner. There is no advertising at the moment; if it appears, we will add it to this table and enable it only after your consent as well. You can change or withdraw your consent at any time via the "Cookie settings" link at the bottom of the page. We treat the browser's Global Privacy Control signal as a refusal of analytics and advertising.
5. Who we share data with
- Telegram — sign-in and delivery of notifications. Telegram's privacy policy also applies.
- Server — during the beta, the Service runs on the operator's computer in Ukraine. After moving to a hosting provider, the provider will be named here.
- Cloudflare (Cloudflare, Inc., USA) — registrar of the lvlalert.com domain, DNS and secure connection: all requests to the website, including your IP address and user-agent, pass through the Cloudflare network and are forwarded to our server. During bot checks, Cloudflare may set a security cookie (for example, __cf_bm or cf_clearance). Cloudflare's privacy policy also applies.
- Bybit and Binance — we request only public market data from them, from our server's address. Your data is not shared with them.
- Microsoft (Microsoft Corporation, USA) — the Clarity analytics service, only if you have consented to analytics: your browser sends the data described in section 2 directly to Microsoft, including your IP address. Microsoft's privacy statement also applies.
- The website's fonts, icons and libraries are loaded from our own server — without consent to analytics, your browser does not contact third-party services when opening pages.
- Advertising — only after your consent (not used at the moment).
We do not sell your data.
6. International transfers
The server is located in Ukraine. Requests to the website pass through the Cloudflare network (a US company with servers worldwide — the request is handled by the one nearest to you). Analytics data (if you have consented to it) is processed by Microsoft in the USA; Microsoft participates in the EU-U.S. Data Privacy Framework. Telegram may process data in other countries under its own rules.
7. Retention and deletion
Retention periods are listed in the table in section 2. After you delete your account, the data is removed from the live database immediately, and from backups during their regular rotation, no later than 14 days.
An account with no sign-ins to the website and no active watches for more than 12 months may be deleted automatically; we will warn you in Telegram 14 days before that.
8. Your rights
You can access your data, correct it, delete it, restrict its processing, object to processing, withdraw your consent and lodge a complaint with a data protection supervisory authority.
- Download your data — "Download my data" in the profile menu (JSON file).
- Delete your account and all data — "Delete account" in the profile menu.
- Withdraw cookie consent — "Cookie settings" at the bottom of the page.
- Other requests — by email to (write in Gmail · message on Telegram). We reply within 30 days.
9. Security
The connection to the website is encrypted (HTTPS), the session is stored in a secure cookie that scripts cannot access, access to the server and the database is restricted, and the database is backed up regularly.
10. Children
The Service is not intended for persons under 18, and we do not knowingly collect their data.
11. Changes to this Policy
The Policy has a version and a date (shown at the top of the page). When it changes, the website will show a "We updated our terms" window.