Privacy policy.
Draft · Last updated 24 August 2026
Draft, pending counsel review. A lawyer has not read this yet.
Wick collects very little, because it needs very little. This page lists all of it.
Who holds your data
Wick Labs and Studios Limited, a Nigerian company, is the controller of the personal data described here. Nigerian data protection law applies to it.
What we collect
Three things about you to open an account. A little more if you pay, if you connect a broker, or if you joined the waiting list, and all of it is on this page.
Your email is how you sign in and how we reach you about your own account. Your first name is optional and is only used to greet you in the app. Account state is the identifier your rows are filed under, and whether this device is currently signed in.
When you tick the box that accepts these documents, we write down which version of each you accepted, when, and through which door you signed in. That row is the record of a legal act. It is kept for as long as your account exists and it goes with the account when the account is deleted.
If you pay, we also keep the record of that payment: which month it bought, the amount, the network, the deposit address the gateway issued for that invoice, and whether it settled.
If you connect a broker account through cTrader, we hold that account's identifier and login number, the broker's name, the account currency, the balance as it stood the last time we read it, and the read only access tokens cTrader issued, stored sealed under a key that never enters the database. We also keep the risk you chose on the Choose your risk screen, and which entries of the public record your account's copies were matched to, as an entry number and two instants and never as your deal history. Disconnecting deletes the tokens and the connection.
If you joined the waiting list on our website before signing up, we hold what you typed there: a name, an email, a WhatsApp number, and whether you already trade.
We do not count visits to these pages today. A counter from our host is wired in and switched off. If it is ever switched on it will record the page, where the visit came from, the country and the kind of device and browser, it will set no cookie and build no profile, and this page will say so first.
What we never collect
- Your broker password. We never ask for it and there is no field for it.
- Your trading capital. It stays at your broker. We hold none of it and cannot move it.
- Identity documents. No date of birth, no address, no government identification, no photographs.
- Advertising data. No advertising trackers, no advertising profile, no third party pixel, no data sold or rented to anybody, ever.
Our server logs are deliberately thin. A log line records which endpoint was called and whether it worked, and nothing else: no email, no account identifier, no session token, no deposit address, no transaction reference, and no amount. Anything unexpected is logged as the word other rather than as itself.
What the record carries, and what it does not
Wick's public record is permanent by design. Every entry is published before its outcome is known and nobody can edit or delete it afterwards, including us.
Because it is permanent, it is built to carry no personal data at all: it holds trade facts and results, and it is built to never carry your name, your contact details, or your account balance. Nothing you can ask us to delete is in there, because nothing about you was ever put in there.
What is kept on your device
Wick sets nine cookies at most, all of them necessary and none of them for tracking. Two keep you signed in. One carries the single character 1 so the app knows to draw a signed-in screen before it has spoken to the server. Three live for minutes during sign-in itself: a code verifier for the Google door, which screen to return to, and whether you ticked the agreement box. One holds a sign-in for ten minutes while your agreement is being recorded. Two carry a broker connection across the round trip to cTrader, for ten minutes: a random state, and the access grant with your account list, sealed. There is no third party cookie and no advertising cookie.
The app also keeps a few preferences in your browser's own storage: your light or dark choice, your first name for the greeting, whether you have seen the welcome, and a cached copy of the public record so the app opens when your connection does not. Your first name is removed when you sign out. Sign-in tokens are never put anywhere a script can read them.
Who else sees it
Only the companies that run the parts of Wick we do not run ourselves, and each of them sees only what its job needs.
- Our database and sign-in provider holds your email, your password in hashed form, your first name, your agreement record, and, if you connect a broker, the connection described above.
- cTrader, and only if you connect a broker, is asked by you to grant Wick read access to the account you pick, and tells us that account's identifier, login, broker, currency and balance.
- Our hosting provider serves the app and runs its functions.
- Our payment gateway is sent the amount, the currency and a random invoice reference. It is not sent your name, your email, or your account identifier.
- A bot check may run at sign-up, and sees only what it needs to decide whether you are a person.
- Google, and only if you choose to sign in with Google, tells us the email on that account.
We do not sell your data and we do not share it for anyone else's marketing.
Payments and the public chain
A payment in USDT on Solana is a transaction on a public blockchain. Anyone can see that some wallet paid some address, forever, and neither we nor anyone else can remove it. We never publish which wallet is yours, and the deposit address is issued for one invoice rather than tied to your name. Decide what that means for you before you pay.
Where it is held
The companies above run their services on servers outside Nigeria, so your data is stored and processed abroad. Signing up means accepting that.
How long we keep it
Your account data for as long as you have an account. Payment records for as long as the law requires us to keep financial records: before an account is deleted its invoices are exported and kept as accounting records, and the payment audit chain keeps a pseudonymous key. A broker connection until you disconnect it or the account is deleted. Waiting list entries until you ask us to remove them or until the list has served its purpose.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Deletion is by request, through the community channel below, and a person does it by hand. It removes your email, your name, your account state, your agreement record, your broker connection and its tokens, your risk preference, your match rows, and your waiting list entry if you tell us the email you used. What it keeps: the two audit chains keep a pseudonymous key for your account and, for a broker connection, the connected account's identifiers, because those chains cannot be edited by anyone, including us; payment records are kept as the law requires; and nothing can be deleted from the public record or from a blockchain, because nothing about you is in either.
You can also complain to Nigeria's data protection regulator if you think we have handled your data badly.
Children
Wick is not for anyone under 18, and we do not knowingly hold data about a child. If you believe we do, tell us and we will remove it.
Changes to this policy
This is a draft pending counsel review and it will change before anything is sold. When it changes, the date at the top changes with it, and a material change is announced in Wick's channels before it takes effect.
Reaching us
Until a dedicated contact address is published, reach us through the Wick community. An address will be on this page before anything is sold.