This is a small experimental version (Quick Scan). Everything below matches how it actually works today.
How API credentials are handled
Your API key, secret and passphrase are sent to our server over HTTPS and are kept only in server memory for this one sync.
When the sync ends, successfully or not, they are cleared from memory and the report shows “API credentials deleted”.
Credentials are never written to a database, file, application log, error report or analytics, and never sent back to the browser.
The server only calls OKX read endpoints (account configuration, position history, fill history, instruments, public candles). There is no code that places, cancels, transfers or withdraws.
If a key has Trade or Withdraw permission, we reject it and ask you to create a read-only key.
You can delete the API key in OKX right after the analysis.
What we store
Normalized records of your closed derivatives positions and fills from the last 90 days: instrument, side, open/close time, price, size, fees, funding, realized PnL and leverage setting.
The report generated from that data.
An irreversible hash of your OKX account ID (to tell sessions apart; the raw ID is not stored).
An anonymous visitor cookie, your page language and page events (for example “viewed report” or “clicked a button”), used to measure the experiment funnel.
If you choose to give it: a Telegram username or email.
What we do not store
API credentials.
Raw OKX API responses.
Balances, deposit or withdrawal addresses, or funding-account records (we never request them).
How long we keep it and how to delete it
Normalized trade data and reports are kept for at most 30 days, then deleted automatically.
“Delete my analysis” at the bottom of the report immediately deletes your normalized trade data, report and any contact you left, and unlinks page events from that analysis (only anonymous counts remain).
A report can only be opened with the session cookie in your browser; the link alone is not enough.
Our hosting provider's access logs may contain IP addresses and URL paths (not request bodies, so never credentials).
Other commitments
Evidge cannot trade or withdraw.
We do not sell your trading data.
Reports are statistical descriptions and mechanical historical replays. They are not investment advice and not a forecast of future returns.