Privacy Policy

1. Summary

Coil is built around a simple privacy principle: the parts that matter most to you never touch our servers. There are two pieces to be clear about, and they are deliberately separate.

• The website, coil.trade, is a marketing site served by a small Cloudflare Worker. It has no user accounts and no passwords. The credentials you give us are a Coil licence key, an email address for a free key, or a wallet signature, and what we keep for each, along with the other records the site keeps (free-use counts, agent payment records by wallet address, assistant sign-in), is listed in section 3 and under The free API key below. It exists to describe the product, and it collects only the data described below — plus, if you choose to use the concierge chat, the questions and answers from that conversation (section 4).
• The Coil software (the Coil Engine, for purchases made before it was withdrawn from sale) is something owners downloaded and run themselves on their own Mac or Windows machine, inside your own AI agent, against your own brokerage account. Your broker and market-data API keys stay on your device. They are never transmitted to Coil, and the operator of Coil has no ability to see your credentials, your trades, your positions, or your capital.

In other words: the owner runs the tool, and the sensitive material — your keys and your money — stays with you. This policy explains what little we do handle, who the third parties are, and how to reach us.

2. Information we do NOT collect

Because the engine runs locally on your device, there is a large category of data we never receive and never want. Specifically, Coil does not collect, store, transmit, or have access to:

• Your brokerage username, password, API keys, tokens, or any other login credentials.
• Your market-data provider keys or credentials.
• Your trades, orders, fills, open positions, or trade history.
• Your account balances, buying power, capital, or portfolio value.
• Any instruction the engine sends to your broker on your behalf.

All of that lives on your machine and flows directly between your device and your broker or data provider. The operator of Coil is not in that path and cannot observe it.

3. Information collected by the website

The coil.trade website is a marketing site served by a small Cloudflare Worker on Cloudflare's content-delivery network. Visiting it involves the small amount of routine technical data that any modern website generates:

• Server and CDN logs. Our host, Cloudflare, processes basic request data — such as your IP address, browser user-agent, the pages requested, and timestamps — for security, abuse prevention, and performance. This is standard infrastructure logging, handled by Cloudflare under its own terms. When you use Coil through an AI assistant (MCP) or the API, the arguments of each request, such as a ticker or sector name, reach our server and may appear in these request logs; they are not linked to an account, and we do not store them ourselves. The one exception is the optional storefront cart and shopping-preference tools, which keep what you put in a cart or note for one day from your last change, under a one-way hash of the session id your assistant sends.
• Free-use counts. To count how many different callers use the free tools and free-key, licensed and subscriber reads, and which tools they use, we keep, for up to 45 days, a short hash of the requesting IP address and browser or client identifier (SHA-256, cut to 12 characters), with the tool or endpoint used and a daily count, plus aggregate counts of the client names AI assistants report. We never store the IP address itself, but this hash is pseudonymous, not anonymous: no secret is added to it, so anyone who already knows an address and client identifier could recompute it and check for a match. When a call is paid for, or we quote a price for it, the same hash is also kept with that record, as described under Payments by AI agents below, and that record has its own retention.
• Payments by AI agents (x402 and MPP). When an agent pays per request, we keep a record of the paying wallet's public address, the dates it was first and last seen, how many times it paid, the products it bought, its client type (for example a Node or Python agent) and the caller hash described above; this record has no expiry date while the service runs. We also keep a separate record under a one-way hash of the wallet address (made with a fixed application label, not a per-user salt, so the hash is pseudonymous, not anonymous), with the first and last times that wallet used our free tools and paid, and the blockchains it used; it too has no expiry date while the service runs. If a payment attempt fails, we keep for 45 days the first 60 characters of the client's identifier string and the payer address, with the reason. When we serve a price quote, we keep for 45 days the caller hash, client type, the product quoted and, for clients we cannot classify, the first word of the client's identifier. If an agent pays for a Coil Live session over x402, the session token we issue is kept with the paying wallet address for one hour plus a minute. Wallet addresses and payments are public on the blockchain anyway.
• Sign-in from AI assistants. When an AI assistant such as Claude connects to Coil Live through sign-in, we keep the assistant app's registered name and redirect addresses for 24 hours if sign-in does not complete, and for 90 days once it does. While sign-in is in progress, a single-use request and code are kept for ten minutes. When you sign in with your Coil Live key, we keep that key encrypted (AES-GCM, with a secret only our worker holds), together with an identifier derived from it with that secret, for up to 30 days, restarted each time the assistant refreshes its access, so the assistant stays signed in. It is removed when the assistant has not refreshed for 30 days, when your Coil Live licence ends (we check at each refresh), or if a refresh credential is reused; you can also email us to ask for it to be deleted sooner (section 9).
• Abuse limits. To stop abuse we keep short-lived counters keyed by a short one-way hash of your IP address (made with a fixed label, not a secret, so it is pseudonymous, not anonymous): for free-key requests (a day), for sign-in pages and wrong-licence attempts (15 minutes) and for assistant registrations (an hour), plus a daily request count per free key or wallet hash, kept for about a day. Never the address itself.
• Service health counts. Aggregate error and health counts for the MCP server hold the date, the outcome and, on errors only, the tool name, with no caller identifier, for 35 days.
• Cloudflare Web Analytics. A cookieless, aggregate measurement of page visits (page views, load performance, referrer categories) injected by our host at the edge. It sets no cookies and builds no profile.
• Google Analytics. We also run Google Analytics 4 on this website and on the Gumroad checkout pages for Coil products, so we can see which pages people arrive on, which ones lead to a purchase, and whether a visitor is returning. This one does set a cookie — a first-party _ga identifier stored by your browser for up to two years — and it sends your IP address, page URL, referrer, device and browser type, and approximate location to Google, which processes that data under its own privacy policy. Because Google operates across many sites, this is the one measurement on Coil that is not confined to coil.trade. We do not upload customer lists and do not sell visitor data — but we will not describe this as cookieless or tracking-free, because it is neither. How to turn it off: install Google's official opt-out browser add-on, block analytics cookies in your browser settings, or use any content blocker — every part of coil.trade works normally with it blocked.
• Google Ads. We advertise Coil, and we run Google's advertising tag (AW-18333792384) so we can tell which ads actually bring people here. It records when you start a checkout for a Coil product — which product, and its listed price — and reports that to Google as a conversion. It also records, as an event carrying only the page path and how it happened, that you were issued a free API key, copied text containing the Coil connect address on this site, or started a Coil Live checkout; Google Analytics records the same events. The checkout event also carries the name of one of our own links (for example hero-door) when you arrived by it. Separately, when you click one of our tracked links or buttons, Google Analytics records that click with the link’s name, its destination address and the page you were on. Neither ever receives the key, your email address, or anything else you type. It sets an advertising cookie and shares the same connection details Google Analytics does. It is subject to the identical controls: denied until you accept in the EU and the UK, switched off entirely when your browser sends a Global Privacy Control signal, and blocked by any content blocker. We do not upload customer lists to Google, and we do not use it to follow you around other websites. How to turn it off: decline the cookie banner, enable Global Privacy Control, or block it — everything on coil.trade works the same either way.
• Coil Scanner license checks. If you subscribe to Coil Scanner and unlock it at coil.trade/scanner, the license key you paste is sent over HTTPS to our edge worker and forwarded to Gumroad to verify your subscription. Apart from the Coil Live sign-in for AI assistants described above, we never store the key itself on our side: the worker keeps only a one-way (SHA-256) hash of it with an allow/deny verdict, cached for up to one hour to speed up checks, and a count of checks and their outcomes per short hash of the key, kept for 45 days; never the key. For Coil Live licenses the worker also keeps, for two days, a count of how many different devices used one license each day, built from keyed hashes (HMAC) of your network range and browser details, made with a secret only our worker holds, so the stored values cannot be turned back into an address by anyone reading the data and we never store the address itself; this lets us notice a shared key, and it never blocks a request. For Coil Live subscribers we also keep a short one-way hash of the license key with the first and last day it was used, the number of days it was active and which surface was used (Claude sign-in, MCP or API), and a per-day list of which hashed ids were active, for up to 400 days after last use, to understand how the product is used; never the key itself or an email address. Your browser remembers the key in its own localStorage on your device (clear browser data to remove it).
• No account system. There are no user accounts and no passwords on coil.trade. Apart from the records listed in this section, such as payment records by wallet address and the assistant sign-in, we do not keep a profile about you.

4. The concierge chat

The chat window on this site is an AI assistant that answers questions about Coil from our own published documentation. It is optional — if you never open it, it sends nothing.

• What we store. When you send a message, we record your question, the assistant's reply, the page you asked from, the time, and how long the reply took. Separately, a count-only record for trend charts holds the page path, the tab's random label, the turn number, the reply length and the time taken, with no message text, kept up to three months. We read these to learn what people actually want to know and to find questions our site answers badly. There is no automated profiling and no advertising use.
• What we do not store with it. The chat log holds no IP address, no name, no email, and no account — there is no account to attach it to. To tell one conversation apart from another we use a random label your browser generates for that tab; it is not linked to you, is not a cookie, and is not shared with anyone. Your browser forgets it when you close the tab, but our server keeps it with the chat log and with the count-only record described above.
• Where your message goes. Your message and our documentation are sent to Anthropic, which operates the Claude model that writes the reply. Anthropic processes it under its own commercial terms and does not use it to train its models.
• Please do not paste secrets. The assistant is instructed never to ask for credentials, account numbers, or payment details, and to refuse them if offered. Do not send them anyway. For anything about your own account, email support@coil.trade.
• Deletion. Chat records are kept for up to 12 months and then deleted. If you want a conversation removed sooner, email support@coil.trade with the approximate date and page and we will delete it.

5. Payments

When you buy Coil, the checkout, billing, and payment processing are handled by Gumroad as the merchant of record. Your purchase is technically a transaction with Gumroad, and Gumroad's own privacy policy and terms apply to the data you enter at checkout.

• What Gumroad handles: your full payment details, including card or other payment-method information, billing address, and any tax information — plus receipts, license keys, and refunds. This data is processed by Gumroad, not by Coil.
• What Coil receives: limited order information needed to deliver and support your license — for example, confirmation that a purchase occurred, the product purchased, and the email address you used so we can send your license or download. We do not receive your full card number or complete payment details.

For details on how your checkout and payment data are handled, please refer to Gumroad's privacy policy, which governs that part of the transaction. You can manage your purchases at any time from your Gumroad Library at app.gumroad.com/library.

6. Email and support

If you email support@coil.trade — for support, billing questions, a refund request, or anything else — we use your message and email address solely to respond to you and to keep a record of the conversation for support and accounting purposes. We do not use support emails for marketing, and we do not sell them.

7. Cookies

Coil keeps its cookie use small and accounts for it here in full. There are three kinds, and no others:

• Strictly necessary. Security and fraud-prevention cookies set by Cloudflare on this site, and by Gumroad during checkout. Without them the site or the payment cannot function.
• Analytics. A first-party _ga cookie set by Google Analytics, described in section 3, which distinguishes a returning visitor from a new one. It is the only non-essential cookie we set, and you can block it without losing any functionality.
• Your own settings. If you unlock Coil Scanner with a license key, your browser stores that key in localStorage on your device. That is not a cookie, is never sent to anyone but our license check, which verifies it with Gumroad, and clearing your browser data removes it.

We run Google Ads conversion measurement (see the third-party list above), so we do set an advertising cookie when you have not declined. We do not sell visitor data, do not upload customer lists, and do not run retargeting that follows you to unrelated sites. We honour Global Privacy Control signals sent by your browser.

Asking first, where the law asks us to. Visitors in the UK and the EU are asked before the analytics cookie is written, and analytics stays switched off until they accept — that is what the small notice at the bottom of the page is for. Elsewhere the cookie is set by default, and this page, the opt-out methods in section 3, and the Global Privacy Control signal are how you turn it off. Either way you can change your mind here:

8. Third parties

Coil relies on a small set of well-established service providers, each handling a narrow, defined role:

• Cloudflare — hosting and delivery of the website and its Worker, plus security and performance.
• Gumroad — merchant of record, handling checkout, payment processing, billing, tax, receipts, license keys, refunds, and delivery.
• Anthropic — operates the Claude model behind the concierge chat, processing the messages you send it as described in section 4.
• Payment facilitators — when an AI agent pays per request, its signed payment, including the payer's wallet address, is sent to a facilitator to verify and settle it: Coinbase (CDP) for Base and Solana payments, Circle as a fallback for Base payments and for payments made through Circle Gateway, and GoPlausible for Algorand payments.
• Google — provides Google Analytics 4, the visitor measurement described in section 3, on this website and on the Gumroad checkout pages for Coil products. Google receives your IP address, the pages you view, your referrer, and device details, and processes them under its own privacy policy. You can opt out at any time using the methods listed in section 3.

Each of these providers processes data under its own privacy policy and terms. We do not sell your personal data to anyone.

9. Data retention and your choices

We keep the limited information we do hold — chiefly order records, support correspondence, and concierge chat records (kept up to 12 months) — only as long as needed to provide and support your license, to meet tax and accounting obligations, and to comply with applicable law. The longer-lived records are these: agent payment and wallet records are kept with no expiry while the service runs; the Coil Live usage record is kept up to 400 days after last use; and free API keys last 90 days from issue. The other records in section 3 carry the shorter periods stated there.

You can email support@coil.trade at any time to ask what data we hold about you, to request a copy, or to ask us to delete information that we are not legally required to retain. Because the Coil engine runs entirely on your own machine, any data the software itself stores locally is under your control and can be removed by you directly on your device.

10. Children

Coil is intended for adults and is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, please contact us so we can address it.

11. Changes to this policy

We may update this Privacy Policy from time to time as the product, our providers, or applicable law evolve. When we make a material change, we will revise the effective date at the top of this page. Your continued use of the website or the software after an update constitutes acceptance of the revised policy.

12. Contact

Questions about this policy, or about privacy and data at Coil generally, can be sent to support@coil.trade. This policy is provided by the operator of Coil and is governed by the law of the jurisdiction in which the operator is established.