By default, IVExplorer does not store
- Deribit API keys or exchange secrets
- Portfolio positions and private scenarios
- Local IV history and user exports
- Raw exchange responses from your browser session
What the service may provide
The service delivers application assets, WASM releases, subscription entitlements, and compact public historical market-data aggregates. The CAX21 reference archive is public market data used for context and model evaluation; it is not a user portfolio database.
Connected exchange mode
Any future Deribit credential flow should use read-only permissions, keep credentials in memory by default, and avoid advertising or behavioral analytics scripts on the credential-enabled page. Users should never grant withdrawal, transfer, or trading permissions for an analytics tool.
Local storage
Browser history and workspace settings are stored locally when enabled. Users should be able to export or delete local data. Local browser storage is not a guarantee against a compromised device or browser extension, so users should choose session-only credential handling when convenience is not required.
Trust boundary: IVExplorer provides software and numerical work. It does not need custody of your exchange keys or portfolio to provide the core analytics.