Privacy Policy
What the FibScanner Chrome extension and this website collect, how it is handled and stored, and who it is shared with — in full, with a complete list of every server the extension can contact.
Summary
This Privacy Policy explains what data the FibScanner — Fibonacci Setup Scanner Chrome extension (Chrome Web Store item ID ddfjenmgdeckhjllmmgoamhnpljogkhl) and the website fibonacciscanner.com collect, how that data is handled, where it is stored, and who it is shared with. It is published by Trader Extensions ("we", "us").
In plain English: the extension has no user account or login, runs its Fibonacci analysis locally in your browser, and contains no analytics, tracking, or advertising. To do its job it fetches public market data from exchanges and validates your licence; and only if you switch them on it delivers alerts to Telegram or a webhook address you choose. We collect the minimum needed for those functions, and we never sell your data.
This document is organised into the sections the Chrome Web Store requires: what we collect, how we handle it, how and where we store it, and how it is shared — plus a full list of every server the extension can contact, your rights, security, and our Chrome Web Store data-use certifications. No section is omitted.
1. Data we collect
We collect only the categories of data listed below. Each entry states exactly what it is and why it exists.
Extension configuration & watchlist
The markets you choose to scan, timeframes, alert thresholds, sound choices, and interface preferences. You create this inside the extension; it is required for the extension to function. Note that the market symbols on your watchlist are sent to the market-data providers as part of each data request (see "Market data" below) — they are not personal data, but they do leave your device to fetch prices.
Optional Telegram credentials
Only if you enable Telegram alerts: the Telegram bot token and chat ID you enter. These are stored on your device and used solely to deliver your alerts to your own Telegram bot via api.telegram.org. If you never enable Telegram alerts, this data is never collected.
Optional webhook / custom alert destination
On paid tiers you can enter a webhook URL of your choice (for example a Discord or Slack incoming webhook, or your own server) to receive alerts. If you enable this, the extension asks your permission for that specific address and then sends the alert details (such as the market, timeframe, and price levels of the setup) to the URL you provided. It only ever contacts the destination you enter, and only while the feature is switched on. If you never enable it, no webhook data is collected or sent.
Licence & purchase data
If you buy a paid licence, our payment and licensing provider SureCart collects the email address you purchase with and processes your payment. We (and the extension) receive only your licence key, its subscription status, and the associated email address. We do not receive or store your full card number or bank details — those are handled by SureCart and its payment processor. The extension validates your licence by contacting api.surecart.com and our own site www.fibonacciscanner.com.
Market data (public, non-personal)
To find setups, the extension fetches candlestick/price data directly from public exchange and market-data APIs: Binance (data-api.binance.vision spot mirror and fapi.binance.com futures), Kraken, Hyperliquid, and Yahoo Finance. These requests contain only the market symbol and timeframe being scanned. As with any web request, your device's IP address is visible to these providers, who process it under their own privacy policies. No other personal information is attached.
Local/technical state
Transient scan state and cached results are held in your browser's session storage and cleared when you close the browser. Custom alert sounds you add are stored on your device only.
Website data (fibonacciscanner.com)
When you visit the website, our host and our CDN/security provider (Cloudflare) process standard technical data such as IP address and request logs to serve and protect the site, and the store/checkout uses cookies necessary for purchases. The extension itself also contacts www.fibonacciscanner.com for licence and product information (for example licence checks, the pricing page, and update notices). If you email us, we receive the contents of your message and your email address.
Sharing and links you trigger
The extension can open a new browser tab when you choose to — for example a pre-filled post on X (formerly Twitter) if you tap "share", or our website/pricing pages. These open a normal tab containing text you chose to share; the extension does not send your personal data to X and does not read anything from those pages.
Chrome permissions we request (and why)
The extension asks for the minimum permissions needed to work. Each is used only for the purpose below:
| Permission | Why it is needed |
|---|---|
storage | Save your settings, watchlist and (if enabled) Telegram/webhook details on your device. |
alarms | Schedule the periodic background scans. No data leaves your device. |
notifications | Show Chrome desktop alerts when a setup is found (local only). |
sidePanel | Display the scanner in Chrome's side panel (UI only). |
offscreen | Play alert sounds and run background calculations (local only). |
| Host access to exchange/data APIs (Binance, Kraken, Hyperliquid, Yahoo Finance) | Fetch the public market data the scanner analyses. |
Host access to api.surecart.com + www.fibonacciscanner.com | Validate your licence/subscription and fetch product/update information. |
Optional: api.telegram.org | Requested only if you enable Telegram alerts, to deliver them to your bot. |
| Optional: access to a specific site (broad host permission) | Requested on demand for the one webhook address you enter when you turn on webhook alerts, so the extension may POST your alert there. It is never used to read the content of your tabs or browsing. |
Any optional permission is requested only when you switch on the feature that needs it, and is used solely for that feature. The extension does not use any permission to read the content of your other tabs, your browsing history, or the pages you visit.
Every server the extension can contact
For full transparency, this is the complete list of remote servers the extension may connect to and what is sent to each:
| Server | When | What is sent |
|---|---|---|
data-api.binance.vision, fapi.binance.com, api.kraken.com, api.hyperliquid.xyz, query1.finance.yahoo.com | During scanning | The market symbol & timeframe requested; your IP address (inherent to any request). No personal data. |
api.surecart.com | Licence checks & purchase | Licence key / purchase email & subscription status. |
www.fibonacciscanner.com | Licence & product info | Licence/version information; standard request data (IP). |
api.telegram.org | Only if Telegram alerts on | Your bot token, chat ID, and the alert message. |
| A webhook URL you enter | Only if webhook alerts on | The alert details (market, timeframe, levels) to the address you chose. |
x.com | Only if you tap "share" | Opens a tab with the text you chose to post. No personal data is transmitted by the extension. |
What we do not collect
- No browsing history, and no reading of the content of your other tabs or the websites you visit.
- No analytics, telemetry, fingerprinting, or advertising identifiers — the extension bundles no analytics or tracking code.
- No account, password, or login inside the extension itself.
- No health, precise-location, contacts, or biometric data.
2. How we handle (use) your data, and our lawful basis
We use each category of data only for the purpose it was collected. Where UK/EU data-protection law applies, our lawful basis is shown in the last column.
| Data | Purpose (how it is handled) | Lawful basis (UK/EU GDPR) |
|---|---|---|
| Configuration & watchlist | Run the scan you asked for and remember your preferences. Processed locally. | Legitimate interest / performance of the service you requested |
| Telegram token & chat ID | Send the Telegram alerts you enabled. | Consent (opt-in; withdraw any time) |
| Webhook URL & alert details | Send alerts to the destination you configured. | Consent (opt-in; withdraw any time) |
| Licence key, status & email | Verify your subscription so paid features unlock, and provide support. | Performance of a contract |
| Market data requests | Compute setups on your device. Not stored beyond the session. | Legitimate interest |
| Website logs & support email | Serve and secure the site; respond to your enquiries. | Legitimate interest |
We do not use your data for profiling, advertising, or any purpose unrelated to running the scanner and your licence.
3. How and where your data is stored (and for how long)
- On your device. Your configuration, watchlist, optional Telegram and webhook details, cached licence status, and alert sounds are stored using Chrome's extension storage (
chrome.storage.localandchrome.storage.session) on your own computer. Session data is cleared when you close the browser; other local data persists until you delete it, clear it in the extension, or uninstall. - With SureCart (licence & payments). Your purchase record, email, and subscription status are stored on SureCart's servers for as long as your licence exists and as required for accounting, tax, and legal obligations.
- Sent, not stored by us. Market symbols go to the exchange/data APIs, and (if you enable them) alerts go to Telegram or your webhook, to be delivered in real time. We do not keep our own copy of your scanning activity.
- Website. Server and CDN request logs are retained only for a short period for security and troubleshooting. Support emails are retained for as long as needed to resolve your enquiry and keep a reasonable record.
We keep personal data only as long as necessary for the purposes above, then delete or anonymise it.
4. How your data is shared
We do not sell your data and we do not share it with advertisers or data brokers. Data is shared only with the parties listed in the "Every server the extension can contact" table above, and only for the stated purposes:
- SureCart — payment processing and licence management (privacy policy).
- Telegram — only if you enable Telegram alerts; delivered through your own bot (privacy policy).
- Your chosen webhook destination — only if you enable webhook alerts; you control where this points (e.g. Discord, Slack, your own server), and their policies apply.
- Public market-data APIs (Binance, Kraken, Hyperliquid, Yahoo Finance) — receive the market symbol/timeframe and your IP, never personal profile data.
- X (x.com) — only when you tap "share"; a normal share link, no personal data sent by the extension.
- Cloudflare — content delivery and security for the website (privacy policy).
We may also disclose data if strictly required by law, or to protect our rights, safety, and the integrity of the service.
5. Chrome Web Store data-use certifications
In line with the Chrome Web Store User Data Privacy policy, we certify that:
- We do not sell or transfer user data to third parties, except in the limited service-provider and user-directed cases described above.
- We do not use or transfer user data for purposes unrelated to the item's single purpose (finding and alerting you to Fibonacci setups).
- We do not use or transfer user data to determine creditworthiness or for lending purposes.
6. Data security
All network requests use HTTPS. The extension runs under a strict content-security policy and requests the minimum Chrome permissions it needs, requesting optional and broad host access only on demand for a feature you turn on. Your settings, Telegram token, and webhook URL are held on your device; the personal data we can access is limited to your licence record. No method of transmission or storage is ever 100% secure, but we take reasonable measures to protect your data.
7. Your rights & choices
- Access, correct, or delete. You can view and edit your settings any time in the extension. To access or delete data held by SureCart (your purchase/licence record), or to ask us about any data, email [email protected].
- Turn off alerts. Disabling Telegram or webhook alerts stops all transmission to those destinations, and you can remove the stored token / chat ID / webhook URL in the extension options (withdrawing consent).
- Uninstall. Uninstalling the extension removes its locally stored data from your device.
- UK/EU (GDPR). You have the right to access, rectify, erase, port, or restrict processing of your personal data, to object to processing, and to withdraw consent at any time. You may also complain to your local data-protection authority (in the UK, the ICO).
- California (CCPA/CPRA). We do not sell or share your personal information, and we will not discriminate against you for exercising your privacy rights. You may request access to or deletion of your information via the contact address above.
8. Children
FibScanner is a tool for adult traders and is not directed to children. We do not knowingly collect data from anyone under 18 (or the age of majority where you live). If you believe a child has provided us data, contact us and we will delete it.
9. International data transfers
We are based in the United Kingdom. If you use the product from another country, your data may be processed in the UK, the EU, or the United States (where some of our service providers operate). Where personal data is transferred outside the UK/EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or the EU Standard Contractual Clauses, or on a provider's own adequacy status. You can request a copy of the relevant safeguard from us.
10. Changes to this policy
We may update this policy as the product or the law evolves. Material changes will be reflected by the "last updated" date below and, where appropriate, announced on the website. Continued use after an update means you accept the revised policy.
11. Contact
Questions, requests, or complaints about this policy or your data: [email protected], Trader Extensions, United Kingdom.