Privacy Policy
Effective: August 30, 2026
Important: research model, not investment advice
BTC Cycle Cockpit is solely an analytical, informational and research tool. Market stages, scores, signals, probabilities, bands, reference values, scenarios, indicators and other classifications are model-based outputs derived from historical and current data. They are not a guarantee of future results and do not constitute investment, financial, tax or legal advice, asset management, or a personal recommendation or solicitation to buy, hold or sell Bitcoin or any other crypto-asset. Outputs are not tailored to your finances, knowledge, objectives or risk tolerance. BTC Cycle Cockpit does not execute trades, custody customer funds or crypto-assets, or broker financial instruments. You remain solely responsible for your decisions.
Read the full Risk & Methodology notice →Controller
Inhaber: Tobias Leluschko
c/o IP-Management #11513
Ludwig-Erhard-Straße 18
20459 Hamburg
Scope and data minimisation
We process only data needed to provide the service, authentication, access rights, security, billing, support and technical product improvement. BTC Cycle Cockpit does not access your contacts, photos, microphone, camera or precise location and does not use advertising SDKs. Where a function can be provided without personal data, no additional identification is required.
Accounts, sign-in and entitlements
When you register or sign in, we process in particular your email address, an internal user ID, authentication and session information, and your assigned Free/Pro entitlement status. Passwords are handled through the Supabase authentication service and are not stored by BTC Cycle Cockpit in plain text. If you choose GitHub sign-in or account linking, the account information required for that process is exchanged between GitHub, Supabase and BTC Cycle Cockpit.
Local settings, cookies and device storage
Technically necessary cookies, Local Storage and Session Storage are used for language, appearance, authentication, session state, cockpit state, snapshot/history caches and navigation. Where German law applies, storage or access that is strictly necessary to provide the digital service expressly requested by you is based on Section 25(2) no. 2 TDDDG and does not require consent. Optional non-essential device access would be used only after any legally required consent. These technologies are not used for behavioural advertising or cross-app/cross-site tracking.
Usage and feature analytics
For signed-in accounts, we record limited first-party usage statistics, in particular an internal user ID, session identifier, usage date/timestamps, cockpit section, active duration and page views. The purposes are reliability, capacity planning, troubleshooting, abuse prevention and improvement of BTC Cycle Cockpit. Where the GDPR applies, the legal basis is Art. 6(1)(f) GDPR and our legitimate interest in secure, reliable and needs-oriented operation. We do not use screen recording, advertising profiles or device fingerprinting, and the data is not used for personalised advertising or tracking across third-party apps or websites.
Contact, feedback and diagnostics
If you send feedback or a support request, we process in particular the selected category and area, message content, optional email address, locale, Free/Pro status, relevant page, data status, app version, a reference, time received and the technically transmitted user agent. These data are used to handle the request and investigate errors. Depending on configuration, email delivery is handled through Resend and an additionally configured support/monitoring recipient may receive the data required for the respective purpose. Do not submit passwords or authentication tokens.
Subscriptions and payments
Web subscriptions may be processed by Stripe. Stripe processes payment, billing and fraud-prevention information required for the transaction; BTC Cycle Cockpit stores in particular the customer, subscription, product, status and term references required to determine access, but not full credit-card details. Purchases and subscriptions in the iOS/iPadOS app are processed through Apple In-App Purchase/StoreKit. Apple processes payment under its own privacy terms; BTC Cycle Cockpit receives only transaction or entitlement information needed to verify and assign access.
Market, macro and on-chain data
BTC Cycle Cockpit obtains market, macro, technical and on-chain information from external data sources. These data are used solely for display, calculation and calibration of the research models. Provider requests are made server-side where designed. Personal account information is not sent to market-data providers unless technically required for a specific request.
Service providers and recipients
Depending on the feature used, Vercel may be used for hosting and delivery, Supabase for authentication and database functions, Stripe for web payments and subscriptions, Apple for App Store/TestFlight distribution and in-app purchases, Resend for email delivery, and GitHub for an explicitly chosen GitHub sign-in or account link. Providers receive only the data required for their specific function. Where they act as processors, processing is governed by applicable data-protection agreements and safeguards designed to provide protection consistent with applicable privacy requirements.
Purposes and legal bases
Where the GDPR applies, processing is based as appropriate on performance of the user relationship and requested functions (Art. 6(1)(b) GDPR), compliance with legal obligations such as accounting and tax record requirements (Art. 6(1)(c) GDPR), and legitimate interests in secure operation, abuse prevention, troubleshooting and product improvement (Art. 6(1)(f) GDPR). Where consent is legally required for optional processing, that processing is based on Art. 6(1)(a) GDPR and consent can be withdrawn at any time for the future.
Processing outside the EU/EEA
Some service providers may process data outside the European Union or European Economic Area. Where no adequacy decision applies, appropriate safeguards such as EU Standard Contractual Clauses or another lawful transfer mechanism are used as required by applicable law. The relevant provider remains subject to its contractual privacy and security obligations.
Server logs, security and abuse prevention
Technical log data may be processed where necessary for secure and reliable operation, including timestamps, requested routes, status and error information, shortened or technically required network attributes, and security-relevant events. These data are used only for operations, diagnostics, attack detection and abuse prevention and are not used for advertising.
No advertising and no sale of personal data
BTC Cycle Cockpit does not sell or rent personal data. Personal data is not shared with advertising networks and we do not track users across third-party apps and websites for advertising or profiling. If these practices were ever to change, this policy would be updated before such processing and any legally required consent would be obtained.
Retention
Account data and related entitlement information are generally retained for the duration of the account or user relationship. User-linked usage session data is generally deleted after 30 days; aggregated daily usage statistics are generally deleted after 365 days. Expired technical rate-limit records are generally removed no later than one day after expiry. These periods are implemented through a regular automated cleanup. Payment, billing or evidentiary records may be retained longer where required by law. Technical hosting and security logs are retained and deleted or overwritten according to the applicable periods of the infrastructure providers unless longer retention is required for a security investigation or legal obligation.
Withdrawal, account deletion and deletion requests
You may withdraw consent at any time with effect for the future. BTC Cycle Cockpit provides, or will provide before public store release, a readily accessible account-deletion option in the account settings. Deletion covers the account and associated personal data unless a statutory retention obligation or another overriding legal basis requires limited continued retention. For Google Play, a publicly accessible web resource for requesting account deletion will also be provided. An Apple- or Google-billed subscription may continue independently of the BTC Cycle Cockpit account and may need to be cancelled separately in the relevant store subscription settings; this does not prevent account deletion. Privacy requests may additionally be sent to the contact address above.
Your privacy rights and right to complain
Subject to applicable law, you may have rights of access, correction, deletion, restriction, data portability and objection to processing based on legitimate interests. Consent can be withdrawn at any time for future processing. You also have the right to lodge a complaint with a competent data-protection authority. Requests can be sent to the contact address above; reasonable identity verification may be requested to prevent unauthorised disclosure.
Data security
We use appropriate technical and organisational measures intended to protect personal data against loss, misuse, unauthorised access and unlawful alteration. Measures include encrypted transport, access restrictions, server-side secrets, authentication and entitlement controls, and security logging. No internet-based service can guarantee absolute security.
Changes to this Privacy Policy
This Privacy Policy will be updated when functions, providers, legal requirements or data-processing practices materially change. The current version remains available at btccyclecockpit.com/privacy and btccyclecockpit.com/datenschutz. Material changes will also be highlighted within the service where required.