Privacy Policy
3xOrange (“we”) provides market briefs, a market workspace and membership verification. This policy explains what we collect, why, how we keep it, and the choices you have. We only collect what is needed to run the service. We do not sell personal information, show ads, or use third-party analytics trackers.
1. Information we collect
- Sign-in information: when you sign in with Google, we receive your account identifier, display name, email address and whether the email is verified. We never receive your password and do not access your contacts, files or other account data.
- Exchange verification: when you verify an OKX or Binance referral, we store your exchange UID, whether the referral and a deposit were confirmed, and the verification time. For OKX we also store the invite code used at sign-up, the cumulative deposit amount (USDT) and the join time.
- API keys you submit: read-only API keys, secrets and passphrases are used only within a single verification request to read your UID, key permissions and deposit status, and are discarded immediately afterwards. They are never written to our database or logs.
- Session and security data: your login session identifier (only its hash is stored), account creation and last sign-in times, and a temporary anti-forgery value during sign-in that expires within 10 minutes.
- Technical logs: our server and network providers may log IP addresses, request times and browser types for security and troubleshooting.
- Local preferences: your language and light/dark theme are stored in your browser’s local storage and are not sent to us.
2. How we use it
- To create and maintain your 3xOrange account and keep you signed in;
- To check whether you signed up at an exchange with our referral code and have deposited, so we can grant the matching membership benefits;
- To prevent one exchange account from being linked to several accounts, prevent abuse and keep the service secure;
- To respond when you contact us.
3. Google user data
When you choose “Continue with Google”, we request only the basic openid, email and profile scopes. We do not request access to Gmail, Google Drive, Contacts, Calendar or any other Google service.
- Data accessed: your Google account identifier (sub), name, email address, and whether Google has verified that email address. We do not store the profile picture URL Google returns.
- How we use it: only to create and identify your 3xOrange account, keep you signed in, and show your name and email in the interface. We do not use Google user data for advertising, marketing, profiling or credit decisions, and we do not use it to develop, improve or train artificial intelligence or machine learning models.
- Storage and protection: this data is stored in the account database on our server, transmitted over HTTPS, and the database file is only accessible to the application on that server. We do not store Google access tokens or refresh tokens, and we make no further Google API calls on your behalf after sign-in.
- Sharing: we do not sell, rent, transfer or disclose Google user data to any third party, except where required by law, where necessary to prevent fraud or protect security, or with your explicit prior consent.
- Human access: no person reads your Google user data unless you consent, it is needed to handle a security incident, or it is required by law.
- Retention and deletion: we keep this data until you delete your account. Email [email protected] to request deletion and we will delete your account and associated Google user data within 30 days (database backups are purged when their rotation period ends). You can also revoke 3xOrange’s access at any time on your Google Account third-party connections page.
3xOrange’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4. Cookies
__Host-3xo_session: your login session, valid for 30 days and deleted when you log out;__Host-3xo_login: a one-time anti-forgery value used during sign-in, expiring within 10 minutes.
Both are strictly necessary, HttpOnly and Secure. We do not use advertising or cross-site tracking cookies.
5. Sharing and third parties
We do not sell, rent or share your personal information for marketing. We only interact with third parties where necessary:
- Google, as the identity provider, to complete a sign-in you start;
- Exchanges (OKX, Binance), to read account information with the read-only key you submit and to look up referral relationships with our affiliate account;
- Infrastructure providers: server hosting (Oracle Cloud) and DNS, HTTPS and network protection (Cloudflare), which process data in transit under their own terms;
- Where required by law, or where necessary to protect users and the security of the service.
3xOrange may earn referral commissions when you sign up at an exchange through our referral links.
6. Retention and security
- Account and verification records are kept until you ask us to delete your account; expired sessions are removed automatically;
- To prevent data loss we make periodic database backups, which are rotated out after a reasonable period;
- Database files are only readable and writable by the application on our server, and credentials are not kept in our code repository. No system is perfectly secure, but we take reasonable technical measures to protect your information.
7. Your choices and rights
You can log out at any time, delete the API key used for verification in your exchange account, and email [email protected] to access, correct or delete your account and verification records (deletion requests are completed within 30 days). You can also revoke 3xOrange’s access in your Google Account security settings. We will handle requests within a reasonable time.
8. Children
The service concerns financial markets and exchange accounts and is not directed at anyone under 18.
9. Changes and contact
When this policy changes we will update the effective date at the top of this page, and highlight significant changes on the website. For questions or requests, email [email protected].