Privacy Policy

PRIVACY POLICY FOR Liquid Flows OÜ

Last Updated: 7th October 2026

1. Data Controller

Liquid Flows OÜ (Estonia Reg. No. 17305695) Harju maakond, Tallinn, Lasnamäe linnaosa, Sepapaja tn 6, 15551. Email: [email protected]

2. Data We Collect

Category - Specific Data - Purpose

Account Data - Email address, hashed password User authentication, account management

Service Data - Trading preferences, watchlists, chart settings - Provide contracted services

Technical Data - IP address, device type, browser info - Security, fraud prevention, system diagnostics

Analytics Data - (Self-hosted Rybbit) - Feature usage, session duration, errors | Platform optimization, troubleshooting

Website Analytics Data - (Google Analytics, on mmt.gg only, with your consent) - Pages viewed, links clicked, referring site or campaign, approximate location, device and browser type - Understand how visitors find and use mmt.gg

Payment Metadata - Transaction status (success/fail), plan type - Billing via Polar.sh *(no card/bank details stored by Liquid Flows OÜ)

3. Legal Basis for Processing

Purpose - Legal Basis (GDPR)

Account creation & service delivery - Contractual necessity

Payment processing - Legal tax/accounting obligations

Security & fraud prevention - Legitimate interests

Analytics (Rybbit) - Legitimate interests

Website analytics (Google Analytics) - Consent, which you can withdraw at any time via Cookie settings

4. Data Sharing

  • Polar.sh: Payment processor. Receives transaction data but never card/bank details.
  • Affiliate Partners: Anonymous tracking via the "Affonso" cookie (e.g., referral conversions).
  • Authorities: Only if legally required under Estonian/EU law.
  • Google (Google Ireland Limited): Provides Google Analytics on mmt.gg as our processor, only if you accept analytics cookies.
  • No sharing with ad networks or data brokers.

5. International Data Transfers

  • Primary Storage: All data hosted on EU-based servers.
  • Limited Exceptions: Payment data transferred to Polar.sh (US-based) under GDPR-compliant safeguards (Standard Contractual Clauses).
  • Google Analytics: Website analytics data may be transferred to Google in the US under the EU-US Data Privacy Framework and Standard Contractual Clauses.

6. Cookies & Tracking

Type - Purpose

Essential - Login security, session management, remembering your cookie choices (mmt_consent, 6 months)

Functional - Payment processing (Polar.sh)

Affiliate - Anonymous referral tracking

Analytics (only with your consent) - Google Analytics (_ga and _ga_5V1H2X4V5D, 2 years) and first-visit source (mmt_ft, 90 days), to understand how visitors find and use mmt.gg

Manage your choices at any time via the "Cookie settings" link at the bottom of every page on mmt.gg. You can also block cookies in your browser settings.

7. Data Retention

Data Type - Retention Period - Reason

Inactive user accounts - 3 years - Reactivation window

Payment records - 5 years - Estonian tax/accounting laws

Analytics (Rybbit) - 3 years - Performance trends

Website analytics (Google Analytics) - 14 months - Traffic trends

Server logs - 3 years - Security/fraud investigations

After retention periods, data is anonymized or deleted.

8. Your Rights (GDPR/EEA)

  • Access/Export: Request all personal data via email.
  • Correction/Deletion: Update via account dashboard or email request.
  • Processing Restriction: Opt out of non-essential processing (e.g., analytics).
  • Response Time: 14 days for all requests.

9. Policy Updates

Material changes notified via email 30 days in advance. Continued use = acceptance.

10. Contact

For data requests or concerns:

Key Features:

  • Product analytics are self-hosted (Rybbit). Google Analytics runs on mmt.gg only with your consent.
  • No storage of payment details.
  • GDPR-compliant data subject rights workflow.
  • Explicit cookie purposes with opt-out guidance.

This policy complies with the EU GDPR and Estonian Data Protection Act.

Terms of Service

Legal Disclaimer

Effective Date: 7th October 2026