QMax privacy policy

Last updated 20 October 2026.

The short version. QMax has no accounts, sets no cookies and runs no advertising or analytics scripts. It never holds your keys or your funds, and it never signs or sends a transaction for you. It does not sell your data. What it does keep is small, and most of it is already public on the Qubic network. This page says exactly what, and why.

What QMax receives, and why

• Every request to the website, the API and the MCP server. The request itself (for example an asset and a size to quote), your IP address, the time, and your browser or client's name. QMax needs these to answer you, to keep the service running and to limit how often one address can call it. The web server keeps ordinary access logs of them for troubleshooting and abuse. They are not used for anything else and are not shared.
• A wallet address you ask about. Some tools (a wallet's trade ledger, its liquidity positions, a read-only portfolio, who has been selling an asset) take a Qubic address. Addresses and everything on them are public on the Qubic network. QMax reads that wallet's public history from Qubic's public archive (rpc.qubic.org), so the address is sent to that public service too, and QMax may keep what it read for a few hours so repeat requests are quicker.
• Orders sent through QMax. When you trade on the website, with the Discord bot or with an agent using the SDK, the signed order is passed to the Qubic network unchanged. QMax notes the transaction id and the wallet's public address to count how many orders use QMax, and checks each one against the chain first. Both are public on the network anyway. You can turn this off: Settings, Privacy on the website, /privacy count:false in Discord, reportTo: false in the SDK. Your orders then go straight to the network and are not counted. If you arrive through a link that carries a source tag (an assistant's quote links to QMax with ref=mcp, for example), QMax counts that the link was opened: the tag only, nothing about you. If you then trade and have not turned counting off, it also notes the transaction ids that came from the link.
• The Discord bot. Your Discord user id, the wallet you link (its public key), your alert rules and filters, and what the bot needs to run a subscription or alerts you chose to buy. The bot uses them only to work for you.
• Paid features. Max plans, prepaid API keys and Discord alerts are paid for in QU through QPayhub. Those payments are on the chain, where anyone can see them. QMax keeps the wallet that paid, what it paid for and what remains of a prepaid balance.
• In your own browser. The website keeps your settings, the wallet you connected and its connection session in your browser's local storage. That stays on your device and is not sent to QMax.

Using QMax as a connector in Claude or another AI assistant

When an assistant calls QMax's MCP server (https://qmax.exchange/api/mcp), QMax receives that tool call's parameters and nothing else from your conversation: it cannot see your chat, your files or your memory. Every tool is read-only: none signs or sends a transaction, and qmax_build_plan only describes the unsigned steps for a wallet you control. The assistant's own provider handles your conversation and the tool calls under its own privacy policy.

Who else sees it

QMax does not sell or rent data and shows no advertising. It shares data only with the services that make it work: the Qubic network and its public archive (public data), QPayhub (payments), Discord (the bot) and the company that hosts the server.

How long it is kept

The record of orders (a wallet address and a transaction id, both public) is kept for as long as QMax counts usage. A Discord user's data is kept while the bot is in use. Server logs are kept only for the time needed for troubleshooting and abuse. Anything cached from the Qubic archive is held for hours, not longer.

Your choices

You can stop QMax counting your orders (see above), unlink your wallet from the Discord bot, and ask for what QMax holds about you to be deleted: your Discord link and alert rules, and any record tied to your wallet that is not itself on the public chain. Open an issue at github.com/profitphil/qmax/issues saying what you want removed (do not post anything private there; a reply will give you a way to confirm it is you). Data on the Qubic network itself cannot be removed by anyone.

Changes and contact

If this policy changes, this page changes and the date at the top says when. Questions: github.com/profitphil/qmax/issues. The code that does all of this is open to read at github.com/profitphil/qmax.