Privacy & Cookie Policy
What LabelYX does and does not collect, which cookies run and when, and how to withdraw consent. Written to be read rather than skipped.
This policy explains what data LabelYX (“we”, “us”) processes when you use labelyx.com, the cookies we use, and the rights you have under the EU General Data Protection Regulation (GDPR) and the ePrivacy Directive.
Who is responsible
LabelYX is an independent project built and run by one person, Casper Audenaert. It is not a company and has no team. The site is free to use; running costs are offset by advertising, optional donations and a Hyperliquid referral link (see how LabelYX is funded). For any privacy request you can contact us at [email protected].
Data we process
- Wallet addresses you enter. A Hyperliquid wallet address you type is used to query the public Hyperliquid API and render analytics in your browser. We do not require an account, and we do not ask for private keys, seed phrases or signatures. Searching an address also updates the anonymous counters described below.
- Anonymous search statistics. When a wallet is analyzed we increment a global search counter and record the address in a recent-searches list (capped at the 100 most recent) and a most-searched ranking. These addresses are public on-chain identifiers, not names or accounts, and they are displayed publicly on our home page and on /supporters. To avoid counting the same visitor twice we store a short one-way SHA-256 hash of your IP address combined with the wallet viewed, for 30 days. The hash cannot be reversed back to your IP, and we never store the IP address itself.
- Push notification subscriptions. If you opt in to browser alerts for a wallet, we store that wallet address together with the push subscription your browser generates (an endpoint URL at your browser vendor’s push service, plus the two encryption keys required to deliver a message). This is the only way push delivery can work. It is stored until you turn alerts off or your browser invalidates the subscription, at which point it is deleted automatically.
- Analytics data. If you consent, Google Analytics 4 collects pseudonymous usage data (pages viewed, approximate location, device/browser type, interactions) to help us understand traffic. This is only activated after you click “Accept” or enable Analytics.
- Advertising data. If you consent, Google AdSense serves ads on this site and may set cookies or identifiers to measure and, where permitted, personalize them. See analytics & advertising.
- Technical request data. Like any website, our server processes standard request information (e.g. IP address) in memory to serve pages, apply rate limits and keep the service secure. We do not keep server access logs containing IP addresses.
Data that stays on your device
Several LabelYX features store data in your browser’s localStorage and never send
it to our server: your trading journal notes, your watchlist,
your wallet groups (their names, and any names you give individual
wallets, which are kept per address and reused across your groups — the wallet
addresses themselves are in the page URL, not stored by us; when you copy or share a named
group, its name is added to that link so the recipient sees it), your theme choice,
notification preferences, news read/muted state, learning-path progress and
your cookie consent choice. We cannot read any of it. Clearing your browser storage deletes it
permanently, and because it is never uploaded there is no server-side copy to restore.
Cookies & similar technologies
| Category | Purpose | Consent |
|---|---|---|
| Strictly necessary | Local storage that remembers your cookie choice and your on-device preferences and content (see data that stays on your device). Required for the site to function. | Always active |
| Analytics | Google Analytics (gtag.js) cookies such as _ga and _ga_*,
used to measure anonymous traffic and usage. |
Only with your consent |
| Advertising | Google AdSense and DoubleClick ad storage and personalization cookies, used to serve and measure the ads shown on this site. | Only with your consent |
We use Google Consent Mode v2: analytics and advertising storage is set to denied by default, and Google only stores cookies or sends measurement data after you give consent through our banner.
Analytics & advertising
Analytics is provided by Google Ireland Ltd through Google Analytics 4. Advertising, where and
when it runs, is served by Google AdSense (publisher ID
ca-pub-9905684016562570). Ads may not appear on every page, and may not be running
at all at the moment you read this; this section describes what happens whenever they do.
Google may use cookies and similar identifiers to serve, measure and
personalize ads, in line with its own
privacy policy
and its partner-sites
notice. You can withdraw consent at any time (see your rights), manage ad personalization at
My Ad Center, or
install Google’s Analytics
opt-out browser add-on.
How LabelYX is funded
LabelYX is free and has no paid tier. Costs are covered by the advertising described above, by optional donations, and by a Hyperliquid referral link in our navigation: if you sign up through it you get a fee discount and we receive a small rebate, at no extra cost to you. Following that link takes you to Hyperliquid, whose own privacy policy then applies. We disclose this so you can weigh it when reading anything we publish. We do not sell your data, and we do not receive payment for the ranking or content of any wallet, vault or market page.
Third parties & processors
We do not sell your data. These are the external services involved in running the site and what they receive:
| Service | Role | What it receives |
|---|---|---|
| Google (Analytics, AdSense, Fonts) | Analytics, advertising, web fonts | Usage data and ad identifiers after consent; your IP address when a font is fetched |
| Upstash (Redis) | Stores push subscriptions and the anonymous search counters | Wallet addresses, push subscription objects, hashed-IP dedup keys |
| Your browser’s push service (e.g. Google FCM, Mozilla, Apple) |
Delivers push notifications | The encrypted alert payload, if you opt in to alerts |
| Ko-fi | Optional donation widget shown on every page | Your IP address when the widget loads; payment details only if you choose to donate |
| Hyperliquid | Source of all wallet, market and vault data | The wallet address being analyzed, sent from our server |
| CoinGecko, Binance, Bybit, alternative.me | Token descriptions, cross-exchange funding rates, market sentiment | Nothing about you — requested by our server, not your browser |
| News publishers (RSS) | Headlines and summaries shown on /news | Nothing about you — fetched server-side |
| Supabase | Stores the aggregated news feed | Article metadata only, no user data |
| jsDelivr, Socket.IO CDN | Serve charting and real-time libraries | Your IP address when a script is fetched |
Retention & international transfers
- Push subscriptions — kept until you disable alerts or your browser invalidates the subscription; expired ones are pruned automatically.
- Recent-searches list — capped at the 100 most recent addresses; older entries are dropped. Search counters are aggregate totals only.
- Hashed-IP dedup keys — deleted automatically after 30 days.
- News articles — retained for 90 days.
- Analytics data — retained according to our Google Analytics configuration.
Some of these providers (Google, Upstash, Supabase) may process data outside the European Economic Area. Where that happens, transfers rely on the European Commission’s Standard Contractual Clauses or an adequacy decision.
Your rights & withdrawing consent
Under the GDPR you have the right to access, rectify, erase, restrict or object to processing of your personal data, and to data portability. You can withdraw analytics and advertising consent at any time; it is as easy as giving it:
To delete a push subscription, turn alerts off in the notification panel on any wallet page — this removes the stored subscription immediately. To remove on-device data (journal, watchlist, preferences), clear this site’s storage in your browser. For anything else, email [email protected].
You also have the right to lodge a complaint with your local data protection authority. In Belgium this is the Gegevensbeschermingsautoriteit / Autorité de protection des données.
Governing law
This policy and any dispute arising from it are governed by Belgian law, without prejudice to the mandatory consumer-protection rights you have in your country of residence. The courts of Belgium have jurisdiction, subject to those same mandatory rights.
Changes
We may update this policy; the “last updated” date above reflects the latest version.
LabelYX is not affiliated with Hyperliquid. Information on this site is for informational purposes only and is not financial advice.