Privacy Policy

Last updated 2026-09-23.

What we collect

• Telegram identifiers, your numeric Telegram user ID and chat ID, captured when you run /start. Used to route alerts and store per-user state.
• Telegram username (if set), stored alongside your user ID for display/support purposes.
• How you found us, if you opened the bot from a link on this website or from a referral link: the page or referral it came from.
• Trading state, wallets you watch, copy targets, snipes, paper-mode positions, fee ledger entries, referral attribution, and tracked referral credits. All linked to your Telegram user ID.
• Live-mode credentials, when you go live, the bot stores the per-user smart wallet signer and Polymarket L2 API credentials encrypted at rest (Fernet) so it can submit the copy, withdrawal, auto-redeem, and fee-sweep actions you enable.
• Audit log, timestamp, your user ID, the command you invoked. We do not log the content of your messages or the parameters of your commands beyond the command name.

What we don't collect

• We do not request your external wallet seed phrase or private key.
• We do not pool user funds in a shared operator wallet.
• We do not collect your Telegram phone number, contacts, or messages outside the bot.
• No advertising or cross-site trackers. This website counts visits with Cloudflare Web Analytics, which sets no cookies and does not identify you. Fonts and images are served from our own server.

Where it's stored

Account data lives on a single VPS in Dublin, Ireland (EU). Once a day it is encrypted on that server (AES-256) and the encrypted copy is stored in Cloudflare R2 for 30 days; Cloudflare cannot read it.

To run the service, data goes to: Telegram (the messages you exchange with the bot), Polymarket's APIs (market data and, in live mode, your orders), Polygon RPC providers (blockchain reads and live transactions), and Cloudflare, which carries all traffic to this website.

Sharing

We do not share, sell, or rent your data to anyone. We may disclose data only if compelled by lawful court order in our jurisdiction.

Community leaderboard

The community leaderboard is off by default. Live users can appear under a random name, a nickname, or their public Telegram username. The page publishes all-time account P&L, closed-position win/loss record, biggest closed win, Polymarket rank, and update time from Polymarket's Data API. It never publishes Telegram numeric IDs, chat IDs, wallet addresses, balances, settings, or trade lists. Use /leaderboard off to leave the page immediately.

Retention

Per-user state is retained while your account is active. The audit log keeps the most recent ~100,000 entries, then rolls. Encrypted backups roll off after 30 days. Use /forget in Telegram to delete your PolyTortoise account data, or /support if you need help.

Security

Live-mode credentials are encrypted at rest with Fernet (AES-128 CBC + HMAC-SHA256). The master key lives only on the operator's VPS environment, never in source control. Each account's files can be read only by the service's own system user. SSH access to the host is key-based only. More in Security and trust.