Privacy statement

Version 1.0 — effective 2026-08-26.

This statement forms part of the End User Licence Agreement. Where the two use the same defined terms, they mean the same thing.

1. This website

rungterminal.com is a set of static files. It runs no analytics, sets no cookies, embeds no third-party scripts, fonts, or trackers, and asks you for nothing. There is no consent banner because there is nothing to consent to.

It is served by Cloudflare Pages. Cloudflare processes request data — including your IP address — as part of delivering the page, under their own terms. We do not receive per-visitor reports from them and do not build any profile of visitors.

2. What stays on your device

The following is written to your computer and is never transmitted by the Software:

• Your wallet. Private keys are held in an encrypted local vault. They are never sent to us, to any server we run, or to anyone else. We cannot recover them. If you lose the vault and its password, the funds it controls are gone, and there is nothing we can do about it.
• Your settings — layout, panel positions, and preferences.
• A local market-data cache so the application does not re-download the same market history on every start.
• A diagnostic log of the application's own activity, for troubleshooting. It is not uploaded anywhere. It never contains keys, signatures, session tokens, or passwords.
• An installation id — 128 random bits, generated once on first run. It is not derived from your hardware, your operating system, your account, or anything about you; it is a random number in a file.

Settings, the market-data cache, and the diagnostic log can be cleared from within the application.

The wallet vault and the installation id deliberately cannot be. A "reset" that could erase the vault would be a reset that could destroy your funds, so the application refuses to touch either one. Both are ordinary files in the application's data folder — %APPDATA%\RungTerminal on Windows — and you can delete them yourself. Deleting the installation id gives you a new one on the next start; deleting the vault without a backup destroys the keys it holds, and no one can recover them.

3. What the Software sends to us

Connection check. On start, the Software asks our service which connection route to use. That request records one row per installation, updated in place rather than one row per call:

• the installation id described above;
• your IP address, as seen by our service;
• your country and region, as reported by Cloudflare from that address;
• whether the check succeeded, and which route was selected.

We keep this to route connections, to see whether a route is working, and to recognise abuse. An IP address counts as personal data under most data protection law, and we treat it as such. It is not sold, shared for advertising, or used to build a profile of your trading.

If you create an in-app profile or take part in the leaderboard, we additionally store the username you chose, your Polymarket wallet address, your Polymarket display name if you have one, your wallet type, and a link to your installation id so a rebate can reach you. A session record and a log of which of our API routes you called (route, wallet, status code, time) are also kept.

Trading volume for rebates. Where our builder code is attached to your orders, we periodically read your matched trades — address, size, the builder fee, and the time — from Polymarket's builder API. That comes from Polymarket, not from your device. Only the address, the chosen usernames, volume and fee may appear on a public leaderboard; your installation id and IP address never do.

We do not collect your name, email (unless you give one), postal address, date of birth, government ID, phone number, contacts, browsing history, or location beyond the country and region above. We run no advertising and no third-party analytics inside the application.

4. What the Software sends to others, at your instruction

• Polymarket — your orders, balance and position queries, and market subscriptions. You have your own direct relationship with Polymarket and their privacy policy governs what they do with it. We are not a party to it.
• The Polygon blockchain — deposits, withdrawals, and settlements are public, permanent, and outside anyone's control once broadcast, including ours.
• Bridge and wallet providers you choose to use, under their own terms.

5. Connection routing

For reliability and latency the Software may reach a venue through a server we operate rather than connecting to it directly. Where it does, that server forwards your traffic and can see which host you are connecting to, and the volume and timing of it.

It cannot see the contents. The encrypted session runs end to end between your device and the venue; the server only forwards encrypted bytes it cannot read. It cannot see your orders, your balances, or your keys, and neither can we.

6. Legal basis and how long we keep things

We process the connection-check data on the basis of our legitimate interest in operating and protecting the service; profile and leaderboard data on the basis of performing this agreement with you, at your request.

Connection-check rows are held as a single record per installation and updated in place, so there is no growing history of your individual sessions. Profile, session, and trade-accounting records are held while your profile exists and for as long as needed to settle any rebate owed. We will publish a specific retention period here once the service has been running long enough for one to be honest rather than invented.

7. Your rights

Data protection law where you live may give you the right to ask us for a copy of the personal data we hold about you, to have it corrected, to have it deleted, to object to our processing of it, or to receive it in a portable form. We will honour those requests from anyone who makes one, wherever they live, rather than only where the law compels us. Write to legal@rungterminal.com.

To find your records we generally need your installation id, or the wallet address you used. We will not ask you for identity documents, and we will not ask you for a private key, a seed phrase, or a signature over anything other than a message you can read in full — no one legitimate ever needs those, and we never will.

We will answer within one month. If you are not satisfied, you may complain to your national data protection authority.

8. Security

The vault is encrypted on your device. Traffic between the Software, our service, and the venues is encrypted in transit. Our service holds no private keys, no card details, and no credentials that could move your funds.

No system is perfectly secure. If we ever become aware of a breach affecting your personal data, we will say so here and notify the relevant authority where the law requires it.

9. Age

The Software is not for anyone under 18.

10. Changes

A new version of this statement gets a new version number and effective date, published here. Material changes will also be announced in the application.

Contact: legal@rungterminal.com