The short version
- We use what the service needs to run: your Telegram ID and username, your wallets (including the encrypted keys, because Dagger is custodial), your trades and your settings.
- No ads, no selling data, no tracking cookies. The website's visitor stats come from server logs, with IP addresses anonymised in the report.
- Blockchain activity is public and permanent. Nobody can erase it, including us.
- You choose what goes on public boards. You appear on the trader leaderboard only if you list yourself, and chat hides your @username unless you turn it on.
- Want a copy of your data, or want it deleted? Message us on Telegram. Withdraw your funds first.
01Who we are
Dagger is a custodial trading service for Kaspa L1, run through the Telegram bot, the web terminal on daggertrade.com, the Telegram Mini App and related tools. In this policy, "Dagger", "we" and "us" mean the operator of that service.
For anything about your data, contact us on Telegram at t.me/GoonBoyCrypto.
02What we collect
Your account
- Telegram details: your numeric Telegram user ID, and your @username (or your Telegram first name if you don't have a username). Telegram passes these to the bot when you use it.
- Where you are in the bot: for example, which menu step you're on and whether you've accepted the risk notice.
Your wallets & keys
- Wallet addresses and names for each wallet you create or import, and which one is active.
- Private keys or seed phrases, encrypted. Dagger is custodial, so it stores them in order to sign transactions for you. See Security.
- Your PIN, if you set one. We store a salted hash of it, not the PIN itself.
Trading, automation & settings
- Trades: token, buy or sell, amounts, price and transaction ID.
- Transfers: withdrawals and token sends, including the destination address.
- Settings: slippage, buy presets, spend limits, your withdrawal whitelist (addresses and labels), auto-sell and exit settings, and sniper filters.
- Automations: your limit orders, KCA recurring buys, copy-trading follows, wallets you track, price alerts and sniped positions.
- Locks and Gates: details of DagLock and token locks you create, and Gates you own, join or pay for.
Referrals, rewards & public profile
- Your referral code, who referred you, and referral and copy-trading earnings.
- Your points, streaks and competition standings.
- Names you choose: a trader name if you list on the leaderboard, a leaderboard name, whether your name is hidden, and whether chat may show your @username.
- .kas domain names linked to your wallet addresses. These are public data that we look up and cache.
Terminal chat
- Messages you post (the room, the text and the time), and moderation records such as chat bans and the reason for them.
DagSphere
- Your access link: a label with your Telegram user ID and @username, how often and when it was last used, and the network part of your IP address (the first three blocks) for about an hour. We use that network information only to detect access links being shared.
- Names you give wallets. These are private to you. We store them against a scrambled (hashed) form of your access link, not the link itself.
daggertrade.com
- Web server logs: for each request, your IP address, the time, the page or file requested, the response status, the referring page and your browser's user agent.
- Web terminal sign-in: the one-time code and your session, held in the server's memory. After failed sign-in attempts, the address they came from is also held briefly.
- Nothing from forms, because the site has none. There are no accounts, newsletters or contact forms on daggertrade.com.
Logs & backups
- The service writes application logs that can include your Telegram user ID next to actions such as trades, withdrawals and sign-ins.
- The database, including everything above, is backed up to the server every six hours.
03How we use it
- To run the service: hold your wallets, sign and send the transactions you ask for, run your automations and show your balances, history and profit and loss.
- To charge and share fees: work out trade fees, referral discounts, referral earnings and copy-trading earnings.
- To run public features you choose to join: leaderboards, the referral competition and terminal chat.
- To keep things safe: enforce your spend limits and whitelist, block brute-force sign-in attempts, detect shared access links and moderate chat. Large deposits, withdrawals and trades (roughly US$100 or more) also trigger a private alert to the operator for monitoring.
- To fix problems and improve Dagger, using logs and aggregate statistics.
- To talk to you through the bot, about your account, your trades and changes to the service.
We don't use your data for advertising, and we don't build advertising profiles.
04What is public by design
The Kaspa blockchain
Every deposit, trade, withdrawal and lock is a transaction on the Kaspa network. Anyone can see the wallet addresses, amounts, tokens and times involved, permanently. Blockchain explorers and analytics tools, including DagSphere, can link wallets together from that public data.
The trader leaderboard (only if you list yourself)
When you register as a public trader, the public leaderboard on daggertrade.com shows:
- the trader name you picked, your wallet address in shortened form, and an avatar generated from it;
- your number of trades and closed trades, win rate, realised profit and loss in KAS, and trading volume;
- your best and worst trade (token and KAS amount);
- how many people copy you, and how much you earned from copiers in the last 30 days.
Stats are shown for 7 days, 30 days and all time, and only once you pass a minimum activity threshold. The public version doesn't include your Telegram user ID or your full wallet address. You can unlist yourself at any time.
Referral competition and rewards boards
- The referral competition board (Bloodline) shows each ranked participant's rank, Blades, number of recruits and multiplier. The name shown is your leaderboard name if you set one. If you haven't, it's your Telegram @username, or your Telegram user ID if you have no username.
- The rewards board in the bot shows your leaderboard name, your .kas name or your shortened wallet address. With name privacy on, it shows only the shortened wallet.
Terminal chat
Messages you post can be seen by anyone using the terminal. By default you appear under your leaderboard name, your .kas name or an anonymous handle. Your Telegram @username is shown only if you turn that on.
The volume counter
The live counter on our home page shows only totals: overall volume, number of trades, number of traders and number of tokens. It doesn't identify anyone.
07How long we keep it
| Data | Kept for |
|---|---|
| Website server logs | 14 days. Logs rotate daily and the last 14 are kept. The visitor-stats report is built from those same logs. |
| Account, wallet, trade, settings and rewards data | While your account exists, or until you ask us to delete it (see section 9) |
| Finished limit orders, and completed or cancelled recurring-buy plans | Deleted automatically after 90 days |
| Terminal chat messages | No automatic deletion period is set today. Messages removed by moderators are hidden from view but remain stored. |
| Web terminal sign-in codes and sessions | Codes: 2 minutes, single use. Sessions: the length you pick, up to 24 hours. Both are held in memory only. |
| Mini App sessions | Up to 1 hour |
| DagSphere network information | About 1 hour |
| DagSphere wallet names | Until you delete them or ask us to |
| Application logs | No fixed period. The oldest entries are removed as log storage fills. |
| Database backups | Taken every six hours. They are currently kept until removed manually, so data deleted from the live database can remain in older backups until those are cleared. |
| On-chain transactions | Permanent. They are part of the Kaspa blockchain and can't be erased by anyone. |
08Security
These are the protections in place today:
- Encrypted keys. Wallet keys and seed phrases are encrypted before storage with authenticated encryption. Each user's encryption key is derived from a server-held secret and a random value unique to that user. Because Dagger is custodial, the service can decrypt them to sign your transactions.
- Revealing and importing keys in private only. The bot won't ask for or reveal a key or seed phrase in a group chat. When you reveal your key in a private chat, the message deletes itself after 90 seconds.
- PIN. PINs are stored only as salted hashes. Five wrong attempts lock PIN entry for five minutes.
- Web terminal sign-in. One-time codes from the bot expire after two minutes and work once. Five failed attempts from the same source block it for 15 minutes. Session cookies are secure-only and can't be read by page scripts, and every action that changes something is checked against a security token.
- Mini App. Every session starts from launch data signed by Telegram. That data is checked, expires after an hour, and can't be replayed.
- Public exports such as the leaderboard leave out Telegram user IDs and full wallet addresses.
You also have controls you can turn on:
- Withdrawal address whitelist: sends and withdrawals only go to addresses you've saved.
- Spend limits: per-transaction and daily caps on what your wallet can spend.
- Session PIN: after a bot restart, your wallet stays locked until you enter your PIN.
No system is perfectly secure. Dagger holds your keys, so a serious compromise of the service could put funds at risk. Keep only what you need on the bot, and keep your Telegram account secure.
09Your choices & rights
Things you can do yourself
- Unlist yourself from the trader leaderboard, clear your leaderboard name, or turn on name privacy.
- Hide your @username in terminal chat (it's hidden by default).
- Turn off "Stay signed in", remove wallets, and cancel automations, alerts and follows.
- Clear the browser storage and cookies listed in section 6.
Ask us
Message us on Telegram at t.me/GoonBoyCrypto to:
- get a copy of the off-chain data we hold about you;
- correct something that's wrong;
- delete your off-chain data.
We may ask you to prove the account is yours, for example by messaging us from the same Telegram account.
Before asking for deletion, withdraw your funds and back up any keys you want to keep. Once your keys are deleted, Dagger can no longer reach those wallets. If you haven't saved the key or seed phrase, nobody can recover what's in them.
Some things can't be deleted. Transactions already on the Kaspa blockchain are permanent. Your Telegram data is held by Telegram. We may keep records we need for legal reasons or to deal with fraud or abuse, and data can remain in older backups until they are cleared.
Depending on where you live, applicable law may give you further rights, such as objecting to certain uses of your data or complaining to a data protection authority.
10Children
Dagger is not for anyone under 18. We don't knowingly serve under-18s. If we learn an account belongs to one, we'll close it and give a route to withdraw any funds.
11Changes to this policy
When the service changes, this policy will change with it. The date at the top shows the latest version. For significant changes, we'll try to give notice through the bot or the community channel.
12Contact
- Privacy questions and data requests: t.me/GoonBoyCrypto
- Community and announcements: t.me/DaggerTradeBot
We will never ask for your seed phrase, private key or Telegram login code.