Last updated: February 11, 2026
This policy covers both the OP_FLASH website (opflash.org) and the OP_FLASH Telegram bot (@opflashbot).
This website does not use cookies, analytics, or tracking scripts. We do not collect any personal data from visitors.
The only client-side storage used is localStorage to save your language preference (EN/中文). No data is sent to any server.
The website is hosted on Vercel. Vercel may collect standard server logs (IP addresses, request timestamps) as part of their infrastructure. See Vercel's Privacy Policy for details.
We store your Telegram user ID, encrypted wallet data, trade history, and bot settings. We do not collect your name, phone number, or Telegram messages outside of bot commands.
Wallet mnemonics are encrypted with AES-256-GCM and scrypt key derivation before storage. We never store plaintext private keys. You can export your keys at any time through the bot.
Encryption keys are derived from your Telegram ID and a server-side secret. This is a server-side custody model, the same trust model used by other Telegram trading bots. By using OP_FLASH, you accept this model.
Your data is used solely to operate the bot: executing trades, tracking your portfolio, managing orders, and delivering notifications.
We do not sell, rent, or share your data with third parties. We do not use your data for advertising, analytics, or any purpose beyond bot functionality.
All transactions are broadcast to the public Bitcoin blockchain. Transaction IDs, wallet addresses, and trade amounts are publicly visible on-chain. This is inherent to blockchain technology and outside our control.
Your data is stored in an encrypted PostgreSQL database on secured servers. We implement reasonable security measures to protect against unauthorized access, alteration, or destruction.
No system is perfectly secure. You should not store more funds in the bot than you are willing to lose.
We interact with OP_NET RPC nodes and decentralized exchanges (NativeSwap, MotoSwap) to execute your trades. These are public blockchain protocols, not third-party data processors.
We use CoinGecko's public API for BTC/USD price data. No user data is sent to CoinGecko.
Your trade history, wallet data, and configurations persist until you delete your account through the bot. Upon deletion, all associated data is permanently removed from our servers.
On-chain transaction data is permanent and cannot be deleted from the Bitcoin blockchain.
We may update this Privacy Policy at any time. Changes will be posted on this page with an updated date. Continued use of OP_FLASH after changes constitutes acceptance.
Questions about this Privacy Policy? Reach out via @opflashbot on Telegram or visit opflash.org.