Discord Start

Privacy

What data we process, why, and what rights you have.

This privacy policy applies to the website mantacharts.com, to mantacharts at app.mantacharts.com, to the documentation at docs.mantacharts.com, and to the mantacharts app for iOS and Android.

1. Controller

Fabio Schack
Kreuzotterweg 1f, 06116 Halle (Saale), Germany
Email: info@coindome.de

You can find further details in the Legal notice.

2. Overview

We process personal data only insofar as it is necessary to provide the website and the terminal, you have consented, or we have a legitimate interest. The legal bases are Art. 6(1)(b) GDPR (contract and use of your account), Art. 6(1)(f) GDPR (legitimate interest, such as security and operation), Art. 6(1)(c) GDPR (legal obligations), and Art. 6(1)(a) GDPR (consent).

We do not use analytics, tracking, or advertising services, meaning no Google Analytics, no pixels, and no advertising cookies.

3. Hosting and server log files

The website and terminal are hosted by Vercel Inc. (USA). The server functions run in the Frankfurt region. Each time a page is accessed, the host processes technically necessary data such as the IP address, date and time, the address accessed, the referrer, and the browser identifier (user agent) in order to deliver the page and fend off attacks (Art. 6(1)(f) GDPR).

We run some of the background services (delivery of alerts, recording of market data, our Discord bot) at Railway (USA).

4. This website

The pages of mantacharts.com load no content from third parties: we serve fonts ourselves, and we fetch the prices in the terminal preview through our own server. The website sets no cookies. The sections on the terminal apply only once you sign in.

5. Sign-in and user account

You sign in with your Discord account, with your Apple ID, or with a code by email. With the details from the sign-in, we create your mantacharts account and keep you signed in (Art. 6(1)(b) GDPR).

  • Discord (OAuth, Discord Inc., USA): We receive from Discord your Discord ID, your username and display name, your profile picture, and your email address.
  • Apple (Apple Distribution International Ltd., Ireland): We receive from Apple an identifier for your account, your email address or, if you hide it, a forwarding address generated by Apple, and, at your first sign-in, your name if you share it. So that we can remove the link to your Apple ID when you delete your account, we store a token from Apple on our server for this purpose.
  • Email: We send a code to your address through our email delivery service. With the code, you confirm that the address belongs to you.

Sign-in and your account are managed by an authentication service based on Supabase.

If your account is connected to Discord, our Discord bot checks whether you are a member of our Discord server and which roles you have there, in order to assign you your rank and unlocks. You can connect an account you created with Apple or by email to Discord at any time. Optionally, you can set up two-factor sign-in (TOTP).

6. Waitlist

Until the official launch of mantacharts 1.0, we keep a waitlist. If you sign up with your email address, we store the address with the time and send you an email through our email delivery service Resend (USA) with which you confirm your entry (double opt-in). Only after your confirmation do we write to you at launch (Art. 6(1)(a) GDPR). You can withdraw your consent at any time: an email to us is enough, and we will delete your entry.

If you sign in before the launch and have not yet been granted access, we note your account with its email address and, if connected, your Discord name on the waitlist (Art. 6(1)(b) GDPR). We check whether you have been granted access using your Discord username, your Discord ID, and your roles on our Discord server, or using your confirmed email address.

To prevent anyone from filling the waitlist with other people’s addresses, we limit entries per IP address. For this we hold the IP address only briefly in memory; it is not stored (Art. 6(1)(f) GDPR). We delete the waitlist as soon as it has served its purpose.

7. Use of the terminal

So that the terminal stays the way you set it up, we store with your account, among other things: settings, workspaces, layouts, drawings, watchlists and notes, alerts, your own scripts, journal and paper trading, your chats with MantaAI, ideas and comments, shared snapshots, and invitation and sharing links (Art. 6(1)(b) GDPR). Your plan (Free, Plus, or Pro) is stored as well.

When you redeem invitation links, we store a hash value of your IP address (not the address itself) for 30 days to protect against abuse (Art. 6(1)(f) GDPR).

8. Payment and subscription

If you book Plus or Pro, the payment is processed by the payment service provider Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland). For this we transmit to Stripe your email address, your name, your account’s identifier, and the selected plan. You enter your payment details (for example card or account number) directly in Stripe’s fields; they do not reach our servers. From Stripe we receive only whether and when payment was made, the plan, the term, and a short description of the payment method (such as “Visa •••• 4242”). The legal basis is the performance of the contract (Art. 6(1)(b) GDPR).

Your browser loads Stripe’s payment field only when you open the payment step. In doing so, Stripe also processes technical data such as your IP address and details about your device in order to prevent fraud; Stripe itself is responsible for this (Art. 6(1)(f) GDPR; Stripe’s privacy policy: stripe.com/de/privacy). If you choose a payment method from another provider, for example PayPal, Klarna, Apple Pay, or Google Pay, that provider’s privacy terms apply in addition. Stripe may also transfer data to Stripe, Inc. in the USA; Stripe is certified under the EU-US Data Privacy Framework.

If you cancel, we store your declaration with its time, type, and, if applicable, reason, as well as the confirmation we send you by email via Resend (Art. 6(1)(b) and (c) GDPR).

9. Public profile, rank, and XP

We award XP for activities in the terminal, in the Academy, when reading analyses, and on Discord. For this we record each activity with its time (Art. 6(1)(b) and (f) GDPR).

Your profile at app.mantacharts.com/u/… is public, even without signing in. It shows your name, your profile picture, your rank with XP and placement, rank milestones, your bio, pinned work, and other details you add there. Your name, profile picture, and XP also appear on the public Leaderboard. Published ideas, layouts, and scripts are visible to other members.

10. Our Discord server

If you are a member of our Discord server, our bot processes messages, reactions, and voice channel activity to award XP and assign rank roles. In doing so, we count messages per Discord account, including for members without a mantacharts account (Art. 6(1)(f) GDPR; our interest is fair rank assignment in the community). The terminal’s dashboard shows the latest message from a public channel with the name and picture of its author. Discord’s privacy policy applies to Discord itself.

If you create a ticket in the terminal under “Support,” we store the category, title, description, and number of attached images along with your Discord ID and Discord name, as well as the page, browser, and plan from which you create it. For this, our bot creates a channel on our Discord server that only you and our team can see and posts your details and images there (Art. 6(1)(b) GDPR). You and our team can delete the channel as soon as your request has been resolved; we store the ticket details until you delete your account.

11. Alerts and notifications

We deliver alerts through the channels you select (Art. 6(1)(b) GDPR):

  • Push: In the browser, we store your browser’s push address with a device identifier (user agent); delivery is through the push service of your browser’s manufacturer. In the app, we store your device’s push identifier and whether it is an iPhone or an Android device; delivery is through the Apple Push Notification Service (Apple) or Firebase Cloud Messaging (Google). The title and text of the notification go to this service for that purpose.
  • Email: Your confirmed email address and the contents of the alerts go to our email delivery service Resend (USA).
  • Telegram: We store your Telegram chat ID and your username and send through the Telegram bot.
  • Discord: Alerts arrive as a direct message from our bot.
  • Webhook: The alert goes to the address you specify. The operator of that address is responsible for the processing there.

12. Market data directly from the exchanges

For charts, the order book, the trade tape, and order flow, your browser connects directly to exchanges in the terminal, for example Binance, Bybit, OKX, Coinbase, Bitstamp, Kraken, Bitfinex, Bitget, Deribit, and Hyperliquid. These exchanges receive your IP address and technical data from your browser in the process. We do not transmit account or profile data in doing so. These connections are technically necessary for the live data (Art. 6(1)(b) GDPR). The website coindome.de does not establish any such connections.

13. Optional features

  • MantaAI: If you use the assistant, your browser sends your question, the chat so far, pictures you attach (such as a snapshot of your chart) and the terminal’s data MantaAI reads for the answer (such as prices, the code in the editor, next to the chart also what is on your screen, meaning symbol, timeframe, indicators, drawings, the contents of your widgets and, when MantaAI looks at it or you mark it, a picture of the chart, or, when a question needs them, your layouts, scripts, alerts and watchlists) directly to the provider you have chosen (Anthropic or OpenAI), using your own API key. We do not store the key on our servers; it stays in your browser’s storage. We store your chats, without the attached pictures, in your account so that you find them on all your devices; you can delete any chat yourself, and we delete all of them with your account.
  • Hyperliquid: If you connect a wallet, we store its public address and use it to query Hyperliquid’s public interface. We do not process keys or signatures.
  • Referral links: If you open a referral link, we remember the code for 30 days in a cookie (cd_ref) so that the referral counts when you sign in.

14. Videos and content

We embed videos in the Academy and livestreams through YouTube (Google Ireland Limited). When the player loads, data such as your IP address is transmitted to Google. In the Academy, we use the enhanced privacy mode (youtube-nocookie.com). The livestream is loaded only by the live page, which you open yourself if you want to watch it.

We deliver images and videos of analyses and courses through Cloudflare R2 (Cloudflare, Inc., USA) with time-limited links. Older content comes from the content service Sanity (Norway). Your browser loads Discord profile pictures from Discord’s servers. We serve fonts and icons ourselves.

15. Cookies and browser storage

We set only cookies that are necessary for operation (§ 25(2) no. 2 TDDDG):

  • sb-…-auth-token: keeps you signed in to the terminal until you sign out (400 days at most).
  • sb-redirect-path: the page you return to after signing in (30 minutes at most).
  • cd_ref: a referral code (30 days, only after opening a referral link).

The terminal also stores settings, layouts, drafts, notes, and the API key for MantaAI in your browser’s local storage. This data stays on your device until you delete it. We do not need a cookie banner for this because we do not set any cookies for analytics or advertising.

16. The mantacharts app

The app for iOS and Android shows the terminal in its own interface. Everything stated here about the terminal applies to it; what is stated there about your browser applies to the app accordingly. With every request, it identifies itself to our server as the mantacharts app along with its platform, so that the server delivers the app’s interface.

The app sends notifications only if you allow them; you can change this at any time in your device’s settings. It accesses photos and the camera only when you select or take a picture yourself, for example for your profile picture or a support ticket. On your device, it stores the push identifier and the same settings your browser otherwise would. Links to other websites open in a browser window on your device; the respective provider’s terms apply there.

When you download and update the app, Apple (App Store) and Google (Google Play) process data under their own responsibility. Their privacy terms apply to this.

17. Reporting, blocking, and community rules

In the app, you can report other members’ content and block members. If you report something, we store your account, the reason, your comment, the time, an excerpt of the reported content, and who it came from, so that our team can review the report. Our team learns of it through an internal channel on our Discord server. The reported member does not learn who reported them. If you block someone, we store this so that this member’s content no longer appears for you.

Before you publish anything in the app for the first time, you agree to the community rules; we store the version of the rules and the time. We automatically check texts you publish in the app for prohibited terms beforehand. The legal basis is Art. 6(1)(b) and (f) GDPR; our interest is a safe community.

18. Recipients and third countries

We pass data to service providers who process it on our behalf (hosting, database and sign-in, email delivery, delivery of notifications, media storage), to the payment service provider Stripe (section 8), or to services you use yourself (Discord, Apple, Telegram, exchanges, AI providers). Some are based in the USA. The transfer relies on the EU-US Data Privacy Framework where the provider is certified, otherwise on the EU Commission’s standard contractual clauses.

19. Retention period

We store data for as long as your account exists or the purpose requires it. The host’s server log files are deleted after a short time. We keep invoices and payment receipts for ten years, as tax and commercial law require (§ 147 AO, § 257 HGB); this also applies if you delete your account.

20. Deleting your account

You can delete your mantacharts account yourself at any time, even if you no longer have the app installed:

  • In the app: More › Profile and account, at the very bottom “Delete account.”
  • In the browser: in the terminal at app.mantacharts.com under Settings › Profile › “Delete account”.
  • Without access to the terminal: on the waitlist page under “Delete account.”
  • By email: Write to us from your account’s email address at info@coindome.de, and we will delete the account for you.

We then delete your account with all associated data, including your uploaded images and everything you have published, unless statutory retention obligations prevent this. If you signed in with Apple, we also remove the link to your Apple ID. What our Discord bot counts on our Discord server (section 10) is tied to your Discord account and remains for as long as you are a member there.

21. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future. You can also lodge a complaint with a data protection supervisory authority, for example the authority at your place of residence or the one responsible for us, the State Commissioner for Data Protection of Saxony-Anhalt (Landesbeauftragter für den Datenschutz Sachsen-Anhalt).

For all requests, it is enough to send an email to info@coindome.de.

Last updated: November 2026 · Legal notice