Privacy and site security · Version privacy-notice-v2What happens when you visit
This pre-launch notice describes the account and site-security information used by the current AlienFunded website. The legal operator and applicable jurisdiction have not yet been identified on this site, so this notice is not a substitute for a complete, jurisdiction-specific privacy statement.
Account and sign-in records
When you register or sign in, we store your email address, account status, verification and account timestamps, and hashed authentication-session records in Cloudflare D1. One-time email-code verifiers are stored only as keyed hashes and expire after ten minutes. Browser sessions expire after 30 days and can be revoked when you sign out or when an account is suspended.
Registration profile details
New account registration collects your legal name, country of residence and phone number, in addition to your email. They are stored with your account in Cloudflare D1 and visible to you in your signed-in account and to authorised administrators. The phone number is not verified by SMS. These details are collected for account records and possible future onboarding only; no identity-document collection, KYC provider or financial onboarding process is connected. Do not submit information that is not requested.
Recorded acknowledgements
When an account is created, the site stores the versions and time of your acknowledgement of these website terms, privacy notice and risk notice, together with the IP address observed by the site. This record is restricted to authorised administrator access and is retained as an account audit record. Reading or accepting these notices does not create a financial-service agreement.
Essential security activity
When a page loads, the site records the page path without query strings, IP address, approximate country supplied by Cloudflare, browser user-agent, a session-scoped anonymous identifier, and a limited device signal derived from browser and display settings. If you are signed in, this activity can be associated with your account. Records older than 30 days are removed on site activity or administrator data access; if the site is idle, cleanup occurs at the next such request.
Optional analytics
Optional analytics are off unless you choose “Allow optional analytics.” Choosing “Essential only” keeps them off; until you choose, your preference is recorded as unset. Only opted-in page views are included in analytics totals. Your choice is stored in a first-party cookie for one year and can be changed using Privacy settings on any public page. Essential security logging remains on regardless of that optional analytics choice.
Access, deletion and questions
The site does not currently offer self-service profile editing or account deletion. The support email address that sends sign-in codes is not confirmed for incoming messages, and a verified privacy contact has not yet been published. Do not send passwords, sign-in codes, banking details, or identity documents by email. The operator must publish a working privacy contact, rights-request process and jurisdiction-specific retention schedule before offering financial services.
The site does not currently process deposits, trades, withdrawal requests, identity-verification documents, or financial balances. Visitor security-event data is retained for up to 30 days; account and legal-acknowledgement retention periods have not yet been defined and require review.