Your keys, your data, minimal everything else.

Degrop is non-custodial: we never hold your keys or your funds. We store the minimum needed to run the product — your wallet address, your public profile, your trades and your settings. We sell nothing, we run no third-party trackers, and our own analytics carry no cookies and respect Do Not Track.

Wallet address and session: when you connect, we keep your address and a session token so you stay signed in. Sessions expire automatically.

Profile: handle, display name, bio and avatar — only what you type or pick. Your avatar upload is compressed in your browser before it reaches us.

Trades and social activity: positions, fills, theses, follows, reactions and comments you create, so the desk, board and leaderboard work.

Push subscriptions: only if you opt in, only on that device, deletable anytime from your account menu.

Deposits: Derive assigns deposit addresses and credits subaccounts on-chain. On-chain activity is public by nature of the blockchain — anyone can see it, with or without Degrop.

No tracking cookies and no third-party analytics, fingerprinting or ad pixels.

No sale, rental or sharing of personal data for marketing.

No private keys, seed phrases or wallet signatures beyond the login message — Degrop can trade on your behalf only with a session key you explicitly authorize, which can never withdraw.

We count anonymous product events (page views, completed onboardings, trades, copies, shares) to understand what works. Events carry no wallet address, no IP storage and no cookies, and are ignored entirely when your browser sends Do Not Track.

You can opt out on the insights page; opt-out is stored only in your own browser.

Paper balances, fills and social content persist so your history survives restarts. Disconnecting stops new collection immediately.

To delete your profile content, remove it in the app (profile editor, close/delete where available) or contact us and we will remove what the ledger does not require for integrity. On-chain records cannot be deleted by anyone.

Traffic is encrypted in transit. Session tokens are signed and expire. The venue path (Derive testnet) is a separate system with its own custody model — funds you deposit there live under your wallet's control, not ours.

Degrop is not directed at children under 18, and we do not knowingly collect their data.

If this policy changes materially, the updated date below moves and significant changes are announced in-app. Continued use after changes means you accept the updated policy.