Privacy Policy

1. Summary

Coil is built around a simple privacy principle: the parts that matter most to you never touch our servers. There are two pieces to be clear about, and they are deliberately separate.

• The website, coil.trade, is a static marketing site. It has no login, no account system, and no database of users. It exists to describe the product, and it collects only the minimal technical data described below.
• The Coil software is something you download and run yourself on your own Mac or Windows machine, inside your own AI agent, against your own brokerage account. Your broker and market-data API keys stay on your device. They are never transmitted to Coil, and the operator of Coil has no ability to see your credentials, your trades, your positions, or your capital.

In other words: we sell you a tool, you run it, and the sensitive material — your keys and your money — stays with you. This policy explains what little we do handle, who the third parties are, and how to reach us.

2. Information we do NOT collect

Because the engine runs locally on your device, there is a large category of data we never receive and never want. Specifically, Coil does not collect, store, transmit, or have access to:

• Your brokerage username, password, API keys, tokens, or any other login credentials.
• Your market-data provider keys or credentials.
• Your trades, orders, fills, open positions, or trade history.
• Your account balances, buying power, capital, or portfolio value.
• Any instruction the engine sends to your broker on your behalf.

All of that lives on your machine and flows directly between your device and your broker or data provider. The operator of Coil is not in that path and cannot observe it.

3. Information collected by the website

The coil.trade website is static and hosted on a content-delivery network. Visiting it involves the small amount of routine technical data that any modern website generates:

• Server and CDN logs. Our host, Cloudflare, processes basic request data — such as your IP address, browser user-agent, the pages requested, and timestamps — for security, abuse prevention, and performance. This is standard infrastructure logging, handled by Cloudflare under its own terms.
• Privacy-respecting analytics. We use Cloudflare Web Analytics, a cookieless, aggregate measurement of page visits (page views, load performance, referrer categories) injected by our host at the edge. It sets no cookies, uses no cross-site tracking, and builds no advertising profiles — and we do not sell visitor data.
• Coil Scanner license checks. If you subscribe to Coil Scanner and unlock it at coil.trade/scanner, the license key you paste is sent over HTTPS to our edge worker and forwarded to Gumroad to verify your subscription. We never store the key itself on our side: the worker keeps only a one-way (SHA-256) hash of it with an allow/deny verdict, cached for up to six hours to speed up checks, and your browser remembers the key in its own localStorage on your device (clear browser data to remove it).
• No account system. There is no sign-up, login, or user database on coil.trade. We are not storing a profile about you on this site.

4. Payments

When you buy Coil, the checkout, billing, and payment processing are handled by Gumroad as the merchant of record. Your purchase is technically a transaction with Gumroad, and Gumroad's own privacy policy and terms apply to the data you enter at checkout.

• What Gumroad handles: your full payment details, including card or other payment-method information, billing address, and any tax information — plus receipts, license keys, and refunds. This data is processed by Gumroad, not by Coil.
• What Coil receives: limited order information needed to deliver and support your license — for example, confirmation that a purchase occurred, the product purchased, and the email address you used so we can send your license or download. We do not receive your full card number or complete payment details.

For details on how your checkout and payment data are handled, please refer to Gumroad's privacy policy, which governs that part of the transaction. You can manage your purchases at any time from your Gumroad Library at app.gumroad.com/library.

5. Email and support

If you email support@coil.trade — for support, billing questions, a refund request, or anything else — we use your message and email address solely to respond to you and to keep a record of the conversation for support and accounting purposes. We do not use support emails for marketing, and we do not sell them.

6. Cookies

The Coil website uses minimal cookies or none at all beyond what our host or the checkout flow strictly require to function (for example, security and fraud-prevention cookies set by Cloudflare or by Gumroad during checkout). We do not set advertising or cross-site tracking cookies.

7. Third parties

Coil relies on a small set of well-established service providers, each handling a narrow, defined role:

• Cloudflare — hosting and delivery of the static website, plus security and performance.
• Gumroad — merchant of record, handling checkout, payment processing, billing, tax, receipts, license keys, refunds, and delivery.

Each of these providers processes data under its own privacy policy and terms. We do not sell your personal data to anyone.

8. Data retention and your choices

We keep the limited information we do hold — chiefly order records and support correspondence — only as long as needed to provide and support your license, to meet tax and accounting obligations, and to comply with applicable law.

You can email support@coil.trade at any time to ask what data we hold about you, to request a copy, or to ask us to delete information that we are not legally required to retain. Because the Coil engine runs entirely on your own machine, any data the software itself stores locally is under your control and can be removed by you directly on your device.

9. Children

Coil is intended for adults and is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, please contact us so we can address it.

10. Changes to this policy

We may update this Privacy Policy from time to time as the product, our providers, or applicable law evolve. When we make a material change, we will revise the effective date at the top of this page. Your continued use of the website or the software after an update constitutes acceptance of the revised policy.

11. Contact

Questions about this policy, or about privacy and data at Coil generally, can be sent to support@coil.trade. This policy is provided by the operator of Coil and is governed by the law of the jurisdiction in which the operator is established.