HAWKEYE TRADING TERMINAL v1.7.1 for Windows Download

Legal

HawkEye Privacy Policy

Effective 2026-10-29. This policy covers the HawkEye app. What this website loads is under This website.

This policy explains what personal data HAWKEYE collects, why, who receives it, and the choices you have. HAWKEYE is operated by Daniel Ardon. For any privacy question or request, email projecthawkeye.cc@gmail.com.

The short version

  • Some of your data stays only on your computer. Some has to be stored on a server so accounts, profiles, chat, and messages work.
  • We collect what those features need, plus what keeps HAWKEYE secure and working, and nothing else. HAWKEYE has no ads, no tracking of what you do in the app, and no analytics beyond the service health totals described below.
  • We never have your private keys, seed phrases, or funds. You never need to give us your email address, legal name, or phone number to use the app. Joining the V2 Beta waitlist on our website asks for an email address; you can ask for an invite in our Discord server instead.
  • We don't sell, rent, or share personal data for advertising.
  • You can get a copy of your data, correct it, or have it deleted.

What we collect, and why

  • Account details. An account ID (for example "discord:" followed by your Discord username, or "google:" followed by a number from Google), your username, how you signed in, when your account was created and last active, and whether it has paid features. We need these to run your account.
  • License key. If you redeem a license key, it's stored with your account, and our server checks it with KeyAuth so paid features follow you to your other devices. It's write-only: the app can never read it back from the server.
  • Device identifier. A hardware ID generated from your computer is sent to KeyAuth, our licensing provider, to tie license keys and accounts to a device and prevent key sharing. A hashed (scrambled) copy also goes with security events, described below. It isn't used for anything else.
  • Discord sign-in. If you sign in with Discord, we request only the "identify" permission, which gives us your Discord user ID, username, and avatar. We can't see your email, servers, friends, or messages on Discord. Our server keeps the refresh token Discord returns for that sign-in, which can only read the same profile, and uses it when you open HawkEye and every few hours after to check that your Discord account still matches your HawkEye account. If your Discord username, display name, or avatar changes, or you remove HawkEye from Discord's Authorized Apps, HawkEye signs you out and asks you to sign in with Discord again. The token is deleted with your account.
  • Google sign-in. If you sign in with Google, we ask only for your basic profile (the "openid profile" permission), which gives us your Google account ID, name, and profile picture. We don't get your email, contacts, or anything else in your Google account, and we don't keep a Google token after you sign in.
  • Profile. The display name, avatar, banner, bio, trading style, favorite chains, and social handles you choose to add, plus badges and achievements your account earns. Other HAWKEYE users can see your profile.
  • Online status. Whether you're online, idle, or busy, and when you were last active. Other users can see it. Hide it by choosing Invisible, or by turning off "Show my online status" in Settings, then Profile.
  • Community chat. Messages you post in global chat are visible to every HAWKEYE user, with your display name and avatar.
  • Direct messages. Direct messages between apps from version 1.4.0 on are end-to-end encrypted: each message is scrambled on the sender's computer and can only be opened on the computers of the two people in the conversation. Our database stores the scrambled message, who it's between, when it was sent, whether it's been read, and the public encryption key of each computer you use HawkEye on (never the private key, which stays on that computer). A message to someone still on an older version of HawkEye isn't encrypted, and the conversation says so; older messages sent before encryption stay as they were. If you report a message, your app sends its text with the report so moderators can read it. Never send passwords, seed phrases, or private keys in any message.
  • Follows and blocks. Who you follow and who you've blocked.
  • Community lessons. If you write lessons for Community Learning, we store them with your account, along with their review status and any note from the moderator who reviewed them. Once a lesson is approved and published, every HAWKEYE user can read it, with your name on it.
  • Leaderboards, the Paper League, and servers. Every paper trade you make on a token in HawkBot's Paper tab also enters the Paper League: our server records the token's pool and chain, when you bought and sold, the prices it fetched from DexScreener, and the result of a standard $1,000 practice entry. Community's leaderboards rank paper P&L, Feathers earned, and achievements unlocked, for the week and for all time, and show other signed-in users your name, badges, rank, and totals. To stay off them, turn off "Appear in Find People and leaderboards" in Settings, then Privacy and Legal; your league trades are still kept for your own record. If you create or join a server (Community's servers grew out of groups), we store its name, description, icon and color, its channels, its members with their roles and the nickname you set there, its invites, invite codes, bans and timeouts, and the messages posted in it with their replies, edits, pins and mentions. A server's messages and member list (with each member's online status and level) are visible to its members, and anyone can join a public server, or a private one with an invite code someone shares.
  • Synced settings. A limited set of preferences (such as theme, ticker speed, price alerts, AI provider name and model, learning progress, and privacy toggles) so they carry across devices. API keys you enter are never synced.
  • Wallet address book. The labels, public addresses, and notes in your wallet address book, synced so it follows your account. Public addresses only: HAWKEYE never asks for or stores private keys or seed phrases.
  • Sign-in security. Each time someone signs in to your account or tries to, we record when, how (Discord, Google, password, or a two-step code), whether it worked, the app version, and your IP address with its last part removed (for example 73.12.45.x). You can see this list in Settings, then Account and Security. We keep it for 90 days. To stop password guessing we also count sign-in attempts and database writes per IP address for up to a day, stored only as a scrambled value (a salted hash) that can't be turned back into the address.
  • Two-step sign-in. If you turn it on, we store the secret your authenticator app uses and scrambled copies (hashes) of your recovery codes. Both are deleted when you turn two-step sign-in off or delete your account.
  • Moderation records. If a moderator acts on your account (for example a timeout or a ban), we keep a record of the action, who took it, and when, to enforce the Terms of Service and handle appeals.
  • Security and abuse signals. To protect you and the service, HawkEye watches its own program for signs of tampering or abuse and sends a security event when it sees one, for example a debugger attached to HawkEye, HawkEye's own files changed, debugging switched on in a customer build, repeated certificate errors, too many requests in a short time (a rate limit), or a tool made to change other programs' memory or slip code into them running next to HawkEye (for example Cheat Engine). For that last one, HawkEye compares the names of running programs with a short list of such tools on your PC; only a matching tool's name is kept or sent, never the list of your programs. While one runs, rewards (Feathers and achievements) pause. Each event says what happened and includes the app version, your operating system, a hashed device ID, your account ID if you're signed in, and your IP address with its last part removed (for example 73.12.45.x) plus a salted hash of the full address. We never store your full IP address with these events. Apart from the program-name check above, HawkEye only checks itself: it never looks at your other programs or files. Kept for 90 days. If your account is limited because of these signals and you think that's a mistake, email projecthawkeye.cc@gmail.com.
  • Error reports. When HawkEye itself hits an error, it sends the error message (with web addresses, email addresses and long codes removed), where in HawkEye's code it happened and the short list of code steps that led there (names of HawkEye's own code files and line numbers only; our server also takes your computer's user name out of any file path), the app version and operating system, and your account ID if you're signed in. Never what you do, type or browse, and never errors from websites you open inside HawkEye. Kept for 30 days. Turn it off in Settings, then Privacy and Legal, then Send error reports.
  • Service health. Our servers keep running totals, such as how many requests each part of HawkEye handled, how many failed, and how long they took, so we can spot outages and slowdowns. These totals aren't tied to you or your account.
  • Voice input. When you talk to HawkBot with the microphone, the recording goes to HawkBot's AI provider only to turn your speech into text. HawkEye doesn't store the recording or the text on its servers, and doesn't use your voice to identify you. Nothing is sent unless you use voice input.
  • HawkBot usage and license checks. How many HawkBot messages your account sent each day, so daily limits work, how many messages you have left from message packs, and when our server last confirmed your license with KeyAuth, so HawkBot and your paid features work on all your devices. We don't store what you ask HawkBot or its answers on our servers.
  • Feathers. The Feathers your account earns and spends (each with what it was for and when), the rewards you redeem, and your time zone offset, so a day starts at your midnight. If you turn on Feathers for active time, also how many minutes today HawkEye was in use. For that, HawkEye checks on your computer whether its window is in front and whether you used the mouse or keyboard in the last two minutes, and sends only a tick about once a minute: never what you typed or clicked, your screen, or anything about other programs. Turn it off in the Marketplace, under Rewards.
  • Story mode. Once you start the story in The Range, when you started it, which story items you took and collected (and the Feathers each paid), and for each day, your best score in each game and how many rated duels you played, so a story step counts only what you played after taking it. Other HAWKEYE users see only your Standing rank beside your name, from Regular up.
  • Purchases. Payment happens on Stripe's own checkout page. We receive what's needed to deliver and support a purchase (what you bought, the amount, the date, an order reference, and any license key issued) and, for a plan, its status, renewal date and Stripe's customer reference, but never your card or bank details. If you ask to be notified when a plan opens, we record which plan.
  • Connected X account. From HawkEye 1.7.1 you can connect your X (formerly Twitter) account in Settings, then Account and Security, to show an X badge on your profile. X's own sign-in page asks you to approve it, HawkEye's server confirms the account is yours, and we store only your X user ID and @handle. We don't keep the access X gives us after that check, and we never post for you or read your posts, messages, followers, or email. Your X badge and @handle show on your profile and in chat like other badges. Disconnecting in the same place removes the ID, the handle, and the badge.
  • Emoji reactions, stickers and GIFs. From HawkEye 1.7.1, a reaction you add to a message is stored with that message, your account, and the emoji, and anyone who can see the message can see who reacted. A sticker you send is stored as which sticker it is. When you search for GIFs, the words you type go through our server to the GIF search service HawkEye uses (GIPHY or Tenor; the GIF picker shows which), so that service gets your search words but not your account. Results are filtered for a general audience. A GIF you send is stored in the message as a link, and when a GIF shows on your screen your app loads it from that service, which then sees your IP address like any website. We don't keep your GIF searches.
  • Your devices. Each time you sign in, the app tells our server its version and your operating system, and our server keeps one record per device: a scrambled device code (a hash of a hash of the device identifier KeyAuth gets, never the identifier itself), the operating system, the HawkEye version, how you signed in, the country your connection comes from when our network provider already reports it, when the device was first and last seen, and its last few sign-in sessions. We use it so our team can sign out a single device when you ask, block a device that's being misused, and ask very old versions to update. At most 30 devices per account. Deleted with your account, and a device not seen for 12 months is deleted on its own.
  • Automatic moderation. Messages posted in global chat and in servers are checked automatically as they're posted, against rules our team sets (for example blocked words, links, flooding, repeated messages, too many mentions, or limits for new accounts). A message that breaks a rule may be held, flagged for a moderator, or lead to a timeout, and each action is kept in our moderation records. Direct messages are end-to-end encrypted, so for them only who sent a message and when are checked, to slow down spam, never what it says.

V2 Beta waitlist, trial and giveaways

  • V2 Beta waitlist and invites. If you join the HawkEye V2 Beta waitlist on our website, we store the email address you enter, when you joined, and a record that you agreed to this policy. If you ask for an invite in our Discord server instead, our Discord bot stores your Discord user ID and username and when you asked. For both, we also keep where the request came from, its status (waiting, invited, approved or declined) and its invite wave. We use this only to let people into the beta in waves, to send your invite, to run the beta giveaways under their official rules, and to contact you about the beta itself: your invite, a giveaway win, and important beta notices. We don't send newsletters or ads unless you separately ask for them, and we never sell or rent the list. You can leave it at any time, as described under Your rights and choices.
  • Beta Pro trial. When your V2 Beta invite is approved, our server records on your account that you got the 14-day Pro trial and when it starts and ends. No payment details are collected for it.
  • Giveaways. If you're in a giveaway, we keep your entry, the drawing record (when it ran and who was picked), how we contacted a winner and their reply, and the prize given. A winner may be asked to confirm their age and where they live and, if the law requires it for a prize's value, to give tax details. We use this to run the giveaway, to show it was fair, and to deliver the prize.

What stays on your computer only

These stay in ~/HawkEye/ on your own machine and are never sent to us:

  • API keys you enter, such as your AI provider or Finnhub key
  • Your full settings file, including preferences that aren't synced
  • Sign-in cookies and site data for the third-party websites you open on the Terminal, Charts, and Intel pages
  • Your list of recently launched tools, if "Save browsing history" is on
  • Your sign-in session, which remembers you for up to 14 days
  • Diagnostic reports you choose to generate in Settings
  • Your paper trading book (practice balance, open positions and closed paper trades), one file per account. Each paper trade on a token also enters the Paper League, which our server keeps, as described above.
  • Your Caller Check history and caller scorecards, one file per account. The text of a call you paste is never kept, only the token it named.
  • Your direct-message encryption keys (on Windows, sealed with Windows' own data protection for your user account)
  • HawkBot memory, if you turn it on: the notes you asked HawkBot to remember. It works out patterns from your Journal for each question instead of storing them.
  • Your Journal (trades, reflections, study notes and the pictures you add) and the HawkBot snapshots saved with it. If you ask HawkBot to review journal entries, the ones you share are sent with your question, as described under HawkBot's AI provider below.

Read aloud and Talon's voice are made by your own computer, using its built-in voices, so no audio leaves your device.

Who receives data

We share personal data only with providers that run parts of HAWKEYE for us, with services you choose to connect, or when the law requires it.

  • HawkEye's team. The operator and the moderators use our admin tools to support users and keep HawkEye safe. Depending on their role, they can see account and profile details, plans, devices, sign-in records, reports, error reports, the waitlist, and moderation records. Nobody on the team can read end-to-end encrypted direct messages.
  • Supabase hosts our database: accounts, profiles, chat, direct messages, reactions, online status, synced settings, wallet address books, achievements, community lessons, Paper League trades, groups, Discord sign-in links, connected X accounts, devices, the V2 Beta waitlist, giveaway records, moderation records, error reports, and security events.
  • Vercel hosts our website and our admin tools, and sees the IP address of anyone who visits them.
  • KeyAuth runs licensing and username/password accounts. It receives your username, your password (to check it), your license key, and your device identifier.
  • Discord handles "Sign in with Discord", if you use it. If you add a Discord webhook for alerts on Pro, Discord also receives the alert messages HawkEye sends to it from your computer. If you ask for a V2 Beta invite in our Discord server, our bot gets your Discord user ID and username from Discord, and we may send you a Discord message about your invite or a giveaway.
  • X handles Connect X, if you use it, under X's own privacy policy.
  • The GIF search service HawkEye uses (GIPHY or Tenor) receives your GIF search words from our server and sends the GIFs your app shows, under its own privacy policy.
  • Stripe processes payments and plan billing under its own privacy policy. It receives what you enter on its checkout and billing pages.
  • CoinGecko and Coinbase provide price data. They receive ordinary web requests from your computer, including your IP address, but no account information.
  • DexScreener provides live prices for paper trading, the Safety check, the Token X-ray, Caller Check, and alerts on tokens, and GeckoTerminal (CoinGecko's API for decentralized exchanges) provides launch data for Launch Rewind and Launch Radar, and prices for Caller Check and for alerts on tokens DexScreener doesn't cover. They receive the token or pool addresses HawkEye looks up and ordinary web requests from your computer, including your IP address, but no account information.
  • Finnhub provides stock quotes, only if you add your own Finnhub key.
  • Public blockchain services answer the Wallet page's lookups, only if you turn on live wallet data: Solana's public node, publicnode.com, mempool.space, TronGrid, Sui and toncenter (balances), Blockscout (Ethereum activity) and DexScreener (token prices). They receive the public wallet addresses looked up and ordinary web requests from your computer, including your IP address, but no account information.
  • RugCheck receives the token addresses you check and, on Pro, the address of the token in each trading tab you open (the Token X-ray reads them on its own) and of the new launches Launch Radar lists, to return risk reports. Like any website it also sees ordinary web requests from your computer, including your IP address, but no account information.
  • Google handles "Sign in with Google", if you use it.
  • HawkBot's AI provider runs the AI models behind HawkBot and turns voice input into text. When you ask HawkBot something, your question and the recent conversation go to it through HawkEye's server. If you ask about the page you're viewing in the browser, that page's text goes too; if you turn on See my screen, a picture of the HawkEye browser you're looking at goes with each question (only that browser, never the rest of your screen); if you ask HawkBot to review journal entries, the entries you share go too; if you turn on HawkBot memory, your memory notes and a short summary of your recent Journal trades (results only, never your moods) go with each question; if you use voice input, your recording goes to it to be turned into text; and it may run web searches for your question. Its developer terms apply. Unless HawkEye uses its paid service, it may keep and use these questions, answers, and recordings to improve its products, and people working for it may review them, so never put personal or sensitive information in a question. Nothing goes to it unless you ask HawkBot something or use voice input.
  • cdnjs (a content delivery network run by Cloudflare) serves the code libraries the app loads, and sees your IP address when it does.
  • Third-party websites you open inside HAWKEYE, such as TradingView or DexScreener, receive whatever you do on them, under their own privacy policies. HAWKEYE doesn't see or collect your activity on those sites. If ad blocking is on, HawkEye blocks ads and trackers inside them with Brave's open-source filtering engine and the EasyList and EasyPrivacy lists, and every few days downloads fresh copies of those lists from easylist.to (only the lists; the request carries nothing about you beyond what any download does). For everyone, HawkEye's browser also blocks adult websites, checked on your computer against a public list of adult sites (StevenBlack/hosts), and once a week it downloads a fresh copy of that list from GitHub (again only the list; the check itself runs on your computer, so the sites you visit aren't sent to anyone for it).

We may also disclose data if the law requires it, to protect users from fraud or abuse, or as part of a sale or transfer of HAWKEYE, in which case this policy continues to apply to it.

What other users can see

Your profile, badges, achievements, online status (unless you hide it), the messages you post in global chat, the community lessons you publish, and your places and totals on the leaderboards (unless you turn off "Appear in Find People and leaderboards") are visible to other HAWKEYE users. Messages you post in a server are visible to its members. Reactions show to everyone who can see the message. Your username, display name, avatar, badges (including the X badge and @handle, if you connect X), the social handles you add, and how you sign in (Discord, Google, or a HAWKEYE password) are public: anyone using HAWKEYE can look them up.

How long we keep it

We keep account data for as long as your account exists, sign-in records and security events for 90 days, and error reports for 30 days. When you delete your account (or ask us to), we delete your account, profile, online status, synced settings, wallet address book, achievements, follows, the blocks you made, your global chat messages, the direct messages you sent, your computers' public encryption keys, your two-step sign-in setup, your sign-in records, your privacy settings, your HawkBot usage counts, your license checks, any HawkBot messages left from message packs, your Feathers, rewards and active-time record, your story progress, your devices, your connected X account and its badge, your reactions, the plans you asked to hear about, the community lessons you published (and any drafts), your server posts, memberships, nicknames, roles, invites and invite codes, and your Paper League trades, all right away, and the sign-in login behind it within 30 days. Today's HawkBot message, screen read and voice typing counts are kept as numbers only, under a scrambled code that doesn't name your account, until the day ends (midnight UTC), so deleting can't reset a daily limit. We keep a note that the sign-in was deleted, so a free trial is offered once per sign-in. A plan you pay for is cancelled with Stripe at the same time, so nothing is charged again, and anything paid after the deletion (a renewal, or a checkout left open) is refunded. A server you run passes to its longest-serving admin (else mod, else member), or is deleted when nobody else is in it. A mention of you in someone else's message then reads "@Deleted account". Your @name stays held for 30 days so nobody can take it to pose as you, then anyone can pick it. Messages other people sent you stay in their history. We may keep moderation records for up to 12 months after that, to stop banned users from rejoining and to handle disputes, and we keep purchase records for as long as tax and accounting law requires. Error reports and security events expire on their own, after 30 and 90 days.

Waitlist entries are kept until invites to the V2 Beta end, then deleted within 90 days. If you made a HawkEye account, the account follows the rules above. Giveaway entries of people who didn't win go with the waitlist; winner records (who won, what, when, and how they were picked) are kept for 3 years, to show a giveaway was run fairly and for tax records. You can ask us to remove your waitlist entry at any time.

Your rights and choices

Depending on where you live (for example the EU, the UK, or California), you may have the right to access, correct, delete, or export your personal data, to object to or restrict some processing, and to withdraw consent. We extend these rights to every user, wherever they live.

  • Get a copy: Settings, then Privacy and Legal, then Export My Data saves what's on this computer and, while you're signed in, what's on our servers. API keys and your license key are left out of the file on purpose.
  • Correct: edit your profile at any time in Settings.
  • Delete: Settings, then Privacy and Legal, then Delete My Account. You can also email projecthawkeye.cc@gmail.com with your HAWKEYE username; we'll ask you to confirm from your signed-in account, so nobody else can delete it.
  • Hide your status: choose Invisible, or turn off "Show my online status" in Settings, then Profile.
  • Stay off the leaderboards: turn off "Appear in Find People and leaderboards" in Settings, then Privacy and Legal.
  • Stop error reports: Settings, then Privacy and Legal, then turn off Send error reports.
  • Stop counting active time: turn off "Earn Feathers for active time" in the Marketplace, under Rewards. Lessons, quizzes and practice still earn Feathers.
  • Stop sharing with HawkBot's AI provider: don't use HawkBot or voice input. Nothing is sent to it unless you use one of them.
  • Leave the waitlist: email projecthawkeye.cc@gmail.com from the address you signed up with, or ask in our Discord server from the account you used, and we delete your entry.
  • Disconnect X: Settings, then Account and Security.
  • Giveaway announcements: a winner can ask us not to announce their name; we then only say that a prize was won.

We respond to requests within 30 days. If you're in the EU or UK and unhappy with how we handle your data, you can complain to your local data protection authority.

Under EU and UK law, we process account, profile, chat, message, reaction, sticker, GIF, group, leaderboard, Paper League, beta trial, and connected X data to provide the service and the features you choose to use; device identifiers and device records, sign-in security records, security and abuse signals, error reports, automatic moderation, and moderation records for our legitimate interests in preventing license abuse, protecting users, accounts, and the service, fixing problems, and keeping the community safe; giveaway records for our legitimate interest in running fair giveaways and to meet legal duties; Feathers to provide the rewards you use; and the waitlist, HawkBot, voice input, and active-time data only with your consent, which you give by joining the waitlist, using those features, or turning active time on, and can withdraw at any time.

Security

We restrict access to our database, encrypt direct messages end to end, limit sign-in attempts, offer two-step sign-in, watch for tampering and abuse, keep the API keys you enter on your own device, and never ask for private keys or seed phrases. No system is perfectly secure, so don't put anything in a message or profile that you couldn't afford to have exposed. If you find a security problem, please email projecthawkeye.cc@gmail.com.

Children and teens

HAWKEYE, the V2 Beta waitlist, and HawkEye giveaways are only for people aged 18 and older. They aren't meant for children or teens. We don't knowingly collect personal data from anyone under 18, and never from a child under 13. If you believe someone under 18 has an account or is on the waitlist, email projecthawkeye.cc@gmail.com and we'll delete it.

International transfers

Our providers may process data in the United States and other countries whose data protection laws may differ from yours. Where the law requires it, we rely on the safeguards those providers offer, such as standard contractual clauses.

Changes to this policy

When we change this policy we update the effective date above. If a change is significant, HAWKEYE will ask you to review and accept it the next time you open the app.

Contact

This website

Everything above covers the HawkEye app. This website itself works like this:

  • No analytics, no ad pixels and no cookies. The site doesn't set or read cookies.
  • The opening animation. The first page you open on this site plays a short animation of the HawkEye hawk. So it doesn't play again on every page, the site keeps one note in your browser's session storage for that tab. The note holds no personal data, is never sent anywhere, and is gone when you close the tab.
  • The V2 Beta waitlist form. It's the site's only form. What you enter goes to our server (Supabase), and what we keep, why and for how long is under V2 Beta waitlist, trial and giveaways above.
  • three.js on the Home page. The Home page loads three.js, a 3D graphics library, from cdnjs, a content delivery network run by Cloudflare. cdnjs sees your IP address when it sends the file.
  • The TradingView chart, only on request. The chart on the Terminal page loads from TradingView only when you press its button. From then on TradingView receives your IP address and whatever its chart collects, under TradingView's own privacy policy.
  • Links out. Download links go to GitHub, the community link goes to Discord, and email links open your mail app. Each of those services has its own privacy policy.
  • The web server. Vercel hosts this website. Like any website host, it sees your IP address and browser details when you visit, under Vercel's own privacy policy.

Questions about this website go to projecthawkeye.cc@gmail.com.