Privacy
Last updated 14 October 2026
Short version: the calculator needs no account, sets no advertising cookies, and runs no analytics or trackers of any kind. Signed out, the numbers you type stay in your browser.
What stays on your device
Your balance, your risk percentage and your minimum reward-to-risk are saved in
your browser's local storage (rapater.rules.v1), as is anything you
log (rapater.journal.v1). If you are signed out, these are not sent to
us, and clearing your browser data removes them. If you are signed in, your balance,
risk percentage and minimum reward-to-risk are also saved to your account, so your
rules can size trades.
What is sent to our server
- The signal text you paste, when you press the button. It is sent to our parse endpoint so the symbol, direction, entry, targets and stop can be read out of it.
- Your IP address, which Cloudflare provides with every request. It is used to count requests per hour so the endpoint cannot be run up as a bill, and for that purpose it is discarded within 48 hours.
- Your IP address, kept for seven years, in two cases only:
- when you accept the Terms of Service and Refund Policy. Accepting is a signature (§20.11), and the record of it holds the time, your account, your IP address and a cryptographic hash of the exact text you were shown — so that what you agreed to can be proved later, and so a subsequent amendment can never be mistaken for it;
- when you buy a Founding seat. The purchase confirmation holds the time, your account, your IP address, the price, the statements you ticked and a cryptographic hash of the exact text you were shown, for the same reason.
Who else sees the signal text
The signal text is sent to Anthropic's API to be read. We use their Claude Haiku model for that and nothing else. Do not paste anything into the box that you would not want sent to a third-party service — it is a trading signal box, and it should only ever contain a trading signal.
If that request fails, a much simpler pattern-matcher runs inside your own browser instead, and in that case the text does not leave your device at all.
If you connect Telegram
Telegram forwarding is not built yet — there is no bot and nothing to connect today. This describes what will happen when it exists, so it is written down before it is switched on rather than after.
Forwarding a signal to the bot sends that message's text to Anthropic's API to be read, exactly as pasting it into the calculator does. Your Telegram user id is stored so the reply goes back to you and so the verdict is sized against your own rules; it is the only thing that links a Telegram chat to a Rapater account.
You can also let Rapater read the Telegram channels you choose (up to five) from your account page. Connecting is a QR scan in the Telegram app. If your Telegram account has two-step verification, you type that password once on your account page: the two-step verification password, if you have one set, goes straight to Telegram and is never stored. Rapater never asks for an exchange password.
Rapater keeps an encrypted Telegram session so it can read new posts in the channels you picked. It only reads: it never posts, joins, reacts or marks anything as read. New posts are sent to Anthropic's API to be read, as pasting does. Rapater stores what it read from each post — coin, side, entry, stop, targets — and what happened to it. It also keeps the post's text for 30 days, so a post it could not read can be checked, and then deletes it. Disconnecting on your account page deletes the session at once and signs it out of Telegram.
You can disconnect at any time by writing to support@rapater.com, which deletes the link between your Telegram account and your Rapater account.
If you sign in
Sign-in is by one-time link. We store your email address and, for each session, a hashed token — never a password, because there is no password. Email is sent through Postmark. Anything you save to a journal is stored against your account in Cloudflare D1.
What we never collect
No advertising or analytics cookies. No tracking pixels. No third-party scripts of any kind — you can check the page source. No card or bank payment details.
If you connect an exchange
Rapater stores your exchange API keys, encrypted: your Kraken API key, or your Hyperliquid agent key. A key is sent once, encrypted as soon as it arrives, and never shown again.
When you connect an exchange, Rapater can place and manage orders on that account. It can never withdraw: a Kraken key that can withdraw is refused, and a Hyperliquid agent key cannot withdraw at all.
You can disconnect an exchange and delete its key at any time, with the Disconnect button on your account page. The stored key is deleted straight away and Rapater stops managing your trades on that exchange; your positions and orders on the exchange are not touched.
The only wallet addresses we keep are the payout address you give us if you register as a referrer, with a record of each change to it, and, if you connect Hyperliquid, the address of your Hyperliquid account.
Where it is stored
On Cloudflare's platform (Workers, D1 and Durable Objects). Rate-limit counters expire within 48 hours. Terms acceptance records and Founding-seat purchase confirmations are kept for seven years; they are the only things here with a long retention, and the reason is that each is a signature.
Deleting it
Local data: clear your browser storage. Anything held against an account: write to support@rapater.com and it is deleted, including the account itself.