Privacy Policy

Last updated: April 15, 2026

1. Introduction

WESSLO Trade ("we", "us", "our", "the extension") is a Chrome browser extension that provides cryptocurrency futures signal analysis and automated trading tools for the WEEX exchange. This privacy policy explains what data we collect, how we use it, how we store it, who we share it with, and your rights regarding your data.

By installing and using WESSLO Trade, you agree to the practices described in this policy.

2. Data We Collect

We collect only the minimum data necessary to provide our services. Below is a complete list of all data collected:

2.1 Data Stored on Our Servers (Firebase)

Data	Purpose	Required
Email address	Account authentication and login	Yes
Password (hashed)	Account authentication	Yes
WEEX UID	Affiliate verification and volume check	Yes
Registration date	Account management	Yes
Last login timestamp	Account activity tracking	No
Rate limit timestamps (Firebase Cloud Functions)	Prevent abuse of authorization check endpoint (limited to 3 requests per minute per user)	Yes

These are stored in Firebase Authentication and Firebase Firestore, operated by Google, under their security standards. Rate limit data is automatically cleared after 60 seconds per entry.

2.1.1 Firebase Cloud Functions

WESSLO Trade uses Firebase Cloud Functions to securely handle affiliate verification without exposing sensitive API credentials in the extension. Two Cloud Functions are used:

• checkUserAuthorization: Called at extension login. Receives the authenticated user's Firebase ID token and WEEX UID. Verifies referral status and 30-day trading volume via the WEEX Affiliate API. Returns authorization result only — no WEEX API credentials are exposed to the client. Protected by Firebase Authentication and rate-limited to 3 requests per minute per user.
• checkWeexUidAvailable: Called during registration. Receives a WEEX UID and checks if it is already associated with another account in our Firestore database. Returns availability status only.

Both functions run on Google Cloud infrastructure (us-central1 region) and use HTTPS encryption.

2.2 Data Stored Locally on Your Device Only

Data	Purpose	Stored Where
WEEX API Key	Execute trades on your behalf	chrome.storage.local
WEEX API Secret	Sign API requests	chrome.storage.local
WEEX API Passphrase	Additional API authentication	chrome.storage.local
Trading preferences (margin amount, excluded pairs, signal mode, trailing stop loss settings)	Remember your configuration	chrome.storage.local

Important: Your WEEX API credentials (Key, Secret, Passphrase) are stored exclusively in your browser's local storage (chrome.storage.local). They are never transmitted to our servers, any third party, or any external service. All trade requests are sent directly from your browser to the WEEX API.

2.3 Data We Do NOT Collect

• We do not collect browsing history or web activity
• We do not collect personal identification information beyond email and WEEX UID
• We do not use cookies or tracking technologies
• We do not collect device identifiers or fingerprints
• We do not read or access content of any web pages
• We do not monitor keystrokes or form inputs outside the extension

3. How We Use Your Data

• Authentication: Email and password are used to verify your identity when you log in.
• Affiliate verification: Your WEEX UID is used to verify your WEEX referral status and 30-day trading volume via the WEEX Affiliate API. This check happens at each login.
• Trading: Your locally stored API credentials are used to send trade orders directly from your browser to the WEEX exchange API. This includes opening/closing positions, placing stop loss and take profit orders.
• Market analysis: The extension fetches publicly available market data (candlestick charts, prices) from WEEX API to generate trading signals.
• User preferences: Your saved settings (margin, signal mode, excluded pairs) are used to customize the extension behavior for you.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to any third party.

Your data is shared only with the following third-party services, solely for the purpose of providing the extension's functionality:

Service	Data Shared	Purpose
Firebase Authentication (Google)	Email, hashed password	User login and account management
Firebase Firestore (Google)	Email, WEEX UID, registration date, last login, rate limit timestamps	User database and abuse prevention
Firebase Cloud Functions (Google)	Firebase ID token, WEEX UID	Secure authorization check via WEEX Affiliate API (server-side)
WEEX Exchange API	API credentials (sent directly from your browser, not our servers)	Market data retrieval, trade execution
WEEX Affiliate API	WEEX UID (sent from our Cloud Function, not your browser)	Referral verification and volume check
Alternative.me API	No personal data	Fear & Greed Index data

No data is shared with advertisers, data brokers, or any other third parties not listed above.

5. Data Storage and Security

5.1 Security Measures

• All network communications use HTTPS (TLS encryption) exclusively
• API credentials are stored only in Chrome's local storage and never leave your device
• Passwords are hashed by Firebase Authentication before storage
• WEEX API requests are signed using HMAC-SHA256 cryptographic signatures
• No server-side processing of trade data — all trades execute directly from your browser

5.2 Data Retention

• Firebase data (email, WEEX UID): Retained as long as your account is active. Deleted upon account deletion request.
• Local data (API keys, preferences): Stored until you clear them manually or uninstall the extension. Uninstalling the extension automatically deletes all local data.
• We do not retain any trading history, transaction logs, or position data on our servers.

6. Chrome Web Store Limited Use Disclosure

7. Network Permissions (Host Permissions)

WESSLO Trade uses the storage permission to save your trading preferences and API credentials locally in your browser (chrome.storage.local). This data never leaves your device.

WESSLO Trade requires network access to the following domains. Each permission has a specific, necessary purpose:

Domain	Purpose
api-contract.weex.com	WEEX Futures API — market data, trade execution, position management
api.weex.com	WEEX general API — exchange information
www.weex.com	WEEX website — supplementary data
api.alternative.me	Fear & Greed Index data (no personal data sent)
identitytoolkit.googleapis.com	Firebase Authentication — user login and token verification
securetoken.googleapis.com	Firebase token refresh
firestore.googleapis.com	Firebase Firestore — user database
us-central1-weo-trade.cloudfunctions.net	Firebase Cloud Functions — secure authorization check and WEEX UID availability verification

Note: WEEX Affiliate API (api-spot.weex.com) is NOT accessed from your browser. All affiliate API calls are made server-side via our Firebase Cloud Functions to protect API credentials.

8. Automated Trading Features

WESSLO Trade includes two automated trading bots:

• WSL Auto: Scans markets every 15 minutes using the HEX signal engine. When a signal is found, it opens a position on WEEX with the user's configured margin and places TP/SL orders.
• QNT Auto: Uses a Quantum signal engine (RSI-based) with Trailing Stop Loss. Checks open positions every minute and updates Stop Loss orders on WEEX as price moves favorably.

Both bots:

• Only activate when you press the Start button
• Can be stopped at any time
• Run entirely in your browser (no server-side execution)
• Send all trade orders directly to the WEEX API from your browser

9. Your Rights and Data Deletion

9.1 How to Delete Your Account and All Associated Data

You have the right to request deletion of all data we hold about you at any time. To delete your account and all associated data:

1. Send an email to bilgi@kriptopusulasi.com from the email address registered with your WESSLO Trade account
2. Use the subject line: "Account Deletion Request"
3. Include your registered email address in the message body
4. We will confirm receipt within 48 hours
5. All your data will be permanently deleted within 30 days of confirmation

Data deleted upon request:

• Email address (Firebase Authentication)
• WEEX UID, registration date, last login timestamp (Firestore)
• Any rate limit data associated with your user ID

Data you can clear yourself immediately:

• WEEX API Key, Secret, Passphrase — Go to Trade tab in the extension and click "Clear" button
• Trading preferences, favorites, trailing SL settings — Clear by uninstalling the extension
• All locally stored data (chrome.storage.local) — Removed automatically when you uninstall the extension

9.2 Other Rights

• Access: You can request a copy of all data we store about you by emailing bilgi@kriptopusulasi.com. We will provide the data within 30 days.
• Rectification: You can update your email address or password through Firebase Authentication. To change your WEEX UID, contact us.
• Opt-out of automated trading: You can stop using automated trading features at any time by pressing the Stop button in the extension.
• Data portability: Upon request, we will provide your data in a machine-readable format (JSON).

10. Cookies and Tracking

WESSLO Trade does not use cookies, web beacons, pixels, or any other tracking technologies. Firebase Authentication uses local storage for session management only.

11. Age Restriction

WESSLO Trade is not intended for individuals under the age of 18. We do not knowingly collect data from minors. If we discover that a user is under 18, their account will be terminated and their data deleted.

12. Risk Disclaimer

WESSLO Trade is not a financial advisor. Cryptocurrency futures trading involves substantial risk and may result in the complete loss of your capital. Signals, analysis, and automated trading features are provided for informational purposes only and do not guarantee profits. Do not trade with money you cannot afford to lose. All investment decisions are your sole responsibility.

13. Changes to This Policy

We may update this privacy policy from time to time. When significant changes are made, users will be notified through the extension or website. The "Last updated" date at the top of this page reflects the most recent revision.

14. Contact Us

If you have any questions about this privacy policy or your data, please contact us:

Email: bilgi@kriptopusulasi.com