Privacy Policy
Last updated October 23, 2026
This policy covers the LocusBot web app at app.locusbot.xyz ("Locus", "we"). It explains what we collect when you sign in, why, and what you can ask us to do with it.
What we collect
- If you sign in with Telegram: your Telegram user ID, name, username and profile photo link, as Telegram's login sends them to us.
- If you sign in with Google: your Google account ID, name, email address and profile photo link. We only ask Google for your basic profile and email.
- A sign-in cookie that keeps you signed in for up to 30 days.
- Things you add yourself, such as coins on your watchlist and trades you log.
- The time you first and last signed in.
How we use it
- To sign you in and keep you signed in.
- To decide which version you see: for Telegram sign-ins, we ask Telegram whether your account is a member of a Locus premium group. We re-check this from time to time.
- To show you your own watchlist and trades.
We don't sell your information, we don't use it for advertising, and we don't send you email.
What we never collect
No passwords, no wallet keys or seed phrases, and no payment details. Premium memberships are paid through Whop, which handles that information under its own policy.
Services involved
- Telegram and Google, for signing in.
- Cloudflare, which sits in front of the site for security. It may set its own security cookies.
- DigitalOcean, where the site and its data are hosted.
- Market data shown on the site comes from public sources such as DEX Screener and GeckoTerminal. Using the site doesn't send them anything about you.
Keeping and deleting your data
We keep your sign-in record and your watchlist until you ask us to delete them. To see what we have or to have it deleted, message us on Telegram (below). Signing out ends your session right away.
Changes
If this policy changes, we'll update the date at the top of this page.