alphabase

Privacy Policy

Last updated: 2026-10-05

This page describes what data Alphabase (alphabase.cc) collects, why, where it lives, and what your choices are. The short version: we collect only what the service needs to run, we do not sell it, and there are no ads.

1. Data we collect

  • Email address — used for account sign-in and authentication.
  • Bitfinex UID — used once to verify your referral registration.
  • Bitfinex API key and secret — stored AES-256-GCM encrypted, each value with its own IV. They are decrypted only server-side, when needed: on each lending-engine cycle, when your dashboard and history pages read your account from Bitfinex, when the background sync worker updates your records, and when we check a key's permissions and account (saving a key, verifying your UID, or turning on a BTC feature). They are never sent to your browser, and the UI never shows any part of the key.
  • Lending and earnings telemetry — balances, offers, rates and interest history from your Bitfinex account (and, if you enable the optional BTC features, your BTC trades and transfers), needed to run your strategy and render your dashboard.
  • Plan and payment records — your trial dates, plan, billing status and Infini's subscription and order IDs. You pay on Infini's checkout page; we don't receive your wallet or payment details.
  • Bitfinex account ID of your API key — recorded while you're on the free trial, so each Bitfinex account gets one trial.

2. Where it lives

Alphabase uses these providers, which process data on our behalf:

  • Supabase — database and authentication.
  • Vercel — web hosting.
  • DigitalOcean — the server that runs the lending engine.
  • Infini — payments for paid plans. It receives your e-mail address to send invoices.

3. What we never do

  • We do not sell your data. To anyone.
  • We do not show third-party ads or use advertising trackers.
  • We do not share your data with anyone except the providers above, or where the law requires it.

4. Cookies

The site sets only what it needs to work: authentication session cookies (to keep you signed in) and a NEXT_LOCALE cookie that remembers your language. No tracking or advertising cookies.

5. Your choices

You can delete your Bitfinex API keys in Settings at any time — deleting a key removes the stored encrypted credentials.

To delete your account and its associated data, e-mail service@alphabase.cc and we will remove it.

Back to home