Scope Scanner — Privacy Policy

Last updated: 2026-09-23 · Version 8.2

What this policy covers

This policy covers two separate things, and the difference between them is the most important sentence in it.

The App — Scope Scanner on your iPhone. It has no account, no sign-up, and no way to send us anything about you. That is true of every version released to date, and if it ever ceases to be true this policy is revised before that version ships — Section 8 states that commitment and Section 1A lists, item by item, what the App does not contain. An unconditional promise about every future version is one we could only keep by never changing the App.
The website at scopescanner.app. It offers one optional thing: a mailing list you may join by typing your email address into a form, which Section 1B sets out in full. Nothing else on the website asks you for anything.

You can use the App forever without ever giving us an email address, and joining the list gives you nothing extra in the App. The list is a way to hear from us, not a way to unlock anything. Sections 1 through 5 describe the App. Section 1B describes the list.

The short version

The App does not collect your personal information. There are no accounts, no sign-up, no analytics, and no tracking. Everything you create in the App — watchlists, alerts, chart settings — is stored only on your own device and is never transmitted to us.

The website’s mailing list collects an email address only if you type one into the form, and nothing else. If you never do, the mailing list holds nothing about you — writing to support is separate, and Section 9 states how long that correspondence is kept.

1. Information the App collects

None.

There is no account system in the App, so nothing in it identifies you to us. The App does not collect your name, email address, phone number, contacts, photos, location, device identifiers, advertising identifiers, or any usage or behavioural data.

The App contains no analytics, crash-reporting, advertising, or attribution software. It has no third-party tracking SDKs of any kind.

1B. The website’s mailing list

The one place we ask you for anything. It is on the website, never in the App.

The mailing list is open. The form is on the website’s homepage.

What we collect. Your email address, and the date you gave it. Nothing else — no name, no company, no location, no tracking pixel telling us whether you opened a message. Alongside an address that has not been confirmed yet we also keep a one-time confirmation code and a count of how many confirmation messages have been sent to it, so that the form cannot be used to send you the same request over and over. Both are discarded with the address when you confirm or when it expires.

We also note, for up to ten minutes, that a confirmation has just been sent to an inbox — stored as the address with any +tag removed, and only so the form cannot mail the same inbox repeatedly. It is deleted automatically once the ten minutes pass, it is never used to send you anything, and it is the only thing here that briefly outlives a deleted address.

Why. To tell you about material changes to the App, including a new release. That is the entire purpose.

How joining works. You type your address and tick a box that is not ticked for you. We then send one message asking you to confirm. If you do not confirm, the address is deleted and you hear nothing further — an unconfirmed address is never sent anything except that request, and is never kept beyond it. This is deliberate: it means nobody can add your address to our list but you.

If the form is submitted again for an address still waiting to confirm, we re-send the request rather than creating a second entry — but never more than three times in total, and never more than once in ten minutes, counted per inbox rather than per spelling of it. Somebody who does not want our messages cannot be sent a stream of them by a stranger typing their address in repeatedly.

Leaving. Every message carries an unsubscribe link that works in one click, without logging in and without being asked why. Unsubscribing deletes the address rather than flagging it; there is no suppression list holding your details afterwards.

What we never do with it. We do not sell it, rent it, share it for advertising, or use it to build a profile of you. It is not connected to anything you do in the App, because there is no connection between the two to make.

Who else touches it. One party: Porkbun LLC, who host the mailbox that sends the confirmation and unsubscribe messages (porkbun.com/privacy). They see the address only as the recipient of that one message and do not receive anything else about you. Nobody else touches it.

1A. No tracking technologies of any kind

The section above says we collect nothing. This section says how, because "we don’t collect data" is a claim anyone can type and the specifics are what make it checkable.

The App contains none of the following:

analytics or product-measurement SDKs of any kind;
crash or performance reporting services;
advertising, attribution, or marketing SDKs;
tracking pixels, web beacons, or embedded tags;
session-replay or screen-recording tools;
device fingerprinting of any kind;
cookies or any equivalent local identifier used to recognise you;
the advertising identifier (IDFA) or the vendor identifier (IDFV) — AppTrackingTransparency is not used, because there is nothing to ask you for;
push-notification tokens — alerts are local notifications generated on your device;
any social-media, login, or single-sign-on integration;
any first-party server — the App sends nothing to us and fetches nothing from us, because there is no service of ours for it to talk to. Section 8 governs that changing: if a released version ever contacts one, this policy says so before that version ships.

The App has no way to recognise you, distinguish you from another user, or link two sessions together — not as a policy, but because nothing in it assigns, stores, or transmits an identifier.

This list is verified against the App’s declared dependencies and its source before each release, using the procedure recorded in legal/README.md. If any item on it ever ceases to be true, this policy is updated before that version ships.

2. Information stored on your device

The App saves the following locally. Most of it uses your device’s standard app storage: it stays on your device, is included in your device backups if you have those enabled, and is deleted when you delete the App. One row is the exception — the trial date, which is normally kept in the keychain. iOS does not clear a keychain item when an app is deleted, so that one survives deleting and reinstalling. On the rare device or App build where the keychain cannot be used, the App keeps that same date in ordinary app storage instead, and it is then removed like everything else when you delete the App. That row says so, and Section 6 says it again where you would go looking for it:

Stored	Why
Your watchlist symbols	so your list persists between sessions
Alert thresholds and armed state	so alerts keep working after a restart
Sniper Scope slots, chart type, timeframe, EMA settings	so your layout persists
Whether alerts are enabled	to honour your preference
Cached market data, contract and market-cap reference data	to reduce network use and respect data-source rate limits
Cached news headlines — title, publisher, timestamp, link	so headlines are present at launch, and to avoid re-requesting them from publishers
Which version of these documents you accepted	so you are re-prompted only when they materially change, rather than every launch
When your 10-day Pro trial started	so the App knows whether it is still running. It is a single number, normally kept in your device’s keychain rather than ordinary app storage so that it survives reinstalling the App — otherwise the trial would restart every time. On the rare device or App build where the keychain cannot be used, the App keeps that same date in ordinary app storage instead, and it is then removed like everything else when you delete the App. It records a date and nothing else
Whether the upgrade screen has been shown	so it appears once and not on every launch
The movers log — which coins ran hot while the App was open, when each run started and ended, and its peak relative volume	so the list survives a restart rather than resetting every session

Cached headlines are kept for up to 90 days and then deleted automatically, and movers-log entries 24 hours after a run ends. Everything else above persists until you delete the App — except cached market data, which is refreshed or discarded as it ages, and the trial date, which normally lives in the keychain and outlasts the deletion (see above for the rare fallback that does not), which is the reason Section 6 tells you how to be rid of it.

We cannot see any of it.

3. Network connections the App makes

To show live market data, the App connects directly from your device to these third parties:

Service	Purpose
Binance.US (`api.binance.us`, `stream.binance.us`)	prices, trading volume, historical candles
CoinGecko (`api.coingecko.com`)	market-capitalization figures, token contract reference data, and asset names used to match headlines to coins
News publishers (`decrypt.co`, `cryptobriefing.com`, `cryptoslate.com`, `coinjournal.net`)	crypto headlines, read as public RSS feeds

Nothing is contacted before you agree. On first launch the App shows this policy, the Terms and the Disclaimers and does not start any part of itself until you accept them — so no request is made to Binance.US, to CoinGecko, or to any publisher, and no third party receives your IP address, until after you have agreed. That is enforced in the App’s code rather than promised here: the screens that make these connections are not created at all until acceptance is recorded.

These requests are made directly by your device to those services — they do not pass through any server we operate, because we do not operate one. As with any internet request, those services will necessarily receive your IP address and standard connection metadata, and their own privacy policies govern what they do with it. We have no control over, and no access to, that.

We do not send them anything identifying you, and we do not receive anything back from them about you.

If you tap a token’s contract link or a news headline, your device opens a third-party block explorer or the publisher’s own website in your browser. That is an ordinary web visit governed by that site’s own policies.

3A. Purchases

If you buy Pro, the purchase is handled entirely by Apple. Payment details are given to Apple, never to us — the App has no payment form, no card fields, and no way to receive money directly. We are told by your device only whether this Apple Account owns Pro. We do not learn who you are, what you paid, or how you paid, and there is no account of yours on our side to attach any of it to.

Whether you own Pro is read from Apple each time the App needs to know, rather than stored by us as a record about you.

4. Notifications

Alerts are generated entirely on your device. The App uses local notifications only — there is no push server, no notification token, and nothing about your alerts is transmitted anywhere. You can revoke notification permission at any time in your device settings.

5. Children

The App is not directed to children, is not designed to appeal to them, and contains nothing aimed at them. It is intended for adults of legal age to enter contracts and to transact in digital assets where they live — the Terms of Use require you to be at least 18, and the App is rated accordingly on the App Store.

We do not knowingly collect information from a child. The App collects information from no one at all — there is no account to create, no form to fill in, and no data path from the App to us. Deleting the App removes everything it ever stored, all of which was on the device — except the single date recording when your Pro trial started, which is normally kept in your device’s keychain and which iOS does not clear when an app is deleted, as Sections 2 and 6 describe (Section 2 also covers the rare case where the keychain cannot be used). It is a date and nothing else, it identifies nobody, and it never leaves your device.

The website’s mailing list is the single exception, and it is not aimed at children either. If we learn that an address on the list belongs to someone under 13, we delete it. A parent or guardian who believes a child’s address is on the list can have it removed by using the unsubscribe link in any message, or by writing to us at the address in section 9 — we will delete it without asking for proof of anything.

If you believe a child is using the App, the remedy is on the device — remove it, or restrict it through your device’s own parental controls. There is nothing for us to delete on our side.

6. Your rights and choices

If you have never joined the mailing list and have never written to us, we hold no data about you and there is nothing for us to disclose, correct, export, or delete. You retain full control of everything the App stores:

Delete everything: delete the App. All locally stored data is removed with it, except the one thing the App normally keeps in your device’s keychain, which iOS does not clear when an app is deleted. We state it rather than leave you to discover it. The single date recording when your Pro trial started is normally kept in your device keychain and survives reinstalling the App (Section 2 covers the rare case where the keychain cannot be used and this date lives in ordinary app storage instead, which does not survive) — that is why it is there, so the trial cannot be restarted by deleting and reinstalling. It is a date and nothing else, it identifies nobody, and it never leaves your device. To remove it, write to us and we will tell you how for your iOS version.
Stop notifications: disable them in the App, or revoke permission in device settings.
Stop all network activity: close the App, or disable its network access in device settings.

If you have joined the mailing list, we hold your email address and the date you gave it, and your rights over it are real rather than theoretical:

See it: write to us and we will tell you what we hold, which is that address and that date.
Correct it: unsubscribe and join again with the corrected address.
Delete it: use the unsubscribe link in any message. It deletes the address rather than flagging it, so the deletion is the same act as the unsubscribe and needs no request to us.
Take it with you: the address is one you already have. There is nothing to export that you do not already possess.
Object: unsubscribing is the objection, and it takes one click.

If you have written to us — at the support address, or by following any contact link on the website — we hold that correspondence: your email address, what you sent, and our reply. It is kept only for as long as it is useful for support and as a record of what was asked and answered, and in any case no longer than 24 months, after which it is deleted. Ask us to delete it sooner and we will, unless a law requires us to keep it. Writing to us never adds you to the mailing list — the two are separate, and joining one never joins the other.

Where laws such as the GDPR or the CCPA/CPRA apply, they concern personal information held by a business. Ours is one email address per subscriber, held only with consent given by ticking an unticked box and confirming a message we send.

Stated in the form those laws use:

Categories of personal information collected in the past 12 months: none from the App. From the website, email addresses — from people who wrote to us for support, together with the contents of what they wrote, and from people who typed one into the mailing-list form.
Categories disclosed for a business purpose. Mailing-list addresses are disclosed only to the delivery service named in section 1B, for the sole purpose of delivering the messages you asked for — and section 1B names that provider before a single address is taken, so there is no undisclosed recipient at any point.
Categories sold or shared: none. We do not sell personal information and do not share it for cross-context behavioural advertising. There is no advertising in the App or on the website.
Sensitive personal information collected: none.
Retention: a mailing-list address is kept until you unsubscribe, at which point it is deleted. An address that is never confirmed is deleted rather than kept. Support correspondence is kept for no longer than 24 months and is then deleted. What the App stores stays on your device, and Section 2 says for how long.
Automated decision-making or profiling: none. Every user sees the same rankings computed from the same public data. Nothing is tailored to anyone, and the mailing list is not segmented.

Do Not Track and Global Privacy Control. We honour both by construction: there is no tracking to signal against. No request from the App carries a tracking preference because no request of ours carries anything about you at all.

In respect of the App we are not a data controller or a business, because no personal information about you reaches us through it. In respect of the mailing list, and of any support correspondence you send us, we are the controller; section 1B says what that involves for the list. When your device contacts Binance.US, CoinGecko, or a publisher, that party receives your IP address as the recipient of your own request, and their policy governs what they do with it — a relationship between you and them, in which we are not a party and have no visibility.

7. Security

Data stored by the App is protected by your device’s own operating-system protections, including device encryption where you have it enabled. Because nothing is transmitted to us, there is no account of yours for us to lose. Connections to data sources use encrypted transport (HTTPS/WSS).

7A. Where the App is offered

At launch the App is offered only in the United States. This policy is written for that. If distribution is ever widened, this policy will be revised before that happens — see Section 8 — rather than left to be interpreted against laws it was not written for.

8. Changes to this policy

If the App’s data handling ever changes — for example if an account system or analytics were introduced — this policy will be updated and the version and date above revised before the change ships. Material changes will be brought to your attention in the App.

9. Contact

support@scopescanner.app Scope Labs LLC, 10412 China Spring Rd Ste F PMB 1120, Waco, TX 76708-5685