Privacy Policy

Last updated 19 October 2026

DSite (dsites.app) lets trading communities build and publish branded Deriv trading sites. This page explains what we collect from the creators who use DSite and from the traders who visit the sites they publish, what we do with it, and how to ask us to delete it. Questions go to support@dsites.app.

Creators: what we collect

• Your account: name, email address and password. We store the password only as a one-way hash, so nobody at DSite can read it.
• Your payout details: the payment method you choose (M-Pesa, USDT on Tron, USDC on Solana or DCash) and its number or wallet address.
• Your sites: the names, logos, colours, text and links you enter, the address each site uses, and the Deriv app assigned to it.
• Domain orders: the domain, how you paid, the payment reference and, for M-Pesa, the phone number the payment request went to.
• Earnings: statistics Deriv provides for each site's app: daily markup, trading volume, number of contracts and the number of different traders. These are totals; Deriv does not send us who the traders are.
• Notifications: your email preferences and, if you turn them on, the push subscription your browser gives us.

How we use it

• To run your account, publish and host your sites, and show your earnings.
• To pay you each month and to buy and set up domains you order.
• To send the emails and notifications the service depends on: email verification, password resets, daily summaries and payout notices. You can turn the optional ones off in Settings.
• To keep the service safe: sign-ups pass a Cloudflare Turnstile check so automated accounts can't be created.

We don't sell your data, we don't show ads, and dsites.app doesn't use analytics or advertising trackers.

Who we share it with

Only the services DSite runs on, each for its own part of the job:

• Vercel hosts DSite and the sites you publish, and registers and runs domains.
• Supabase stores the database.
• Resend delivers our emails.
• Cloudflare runs the sign-up check.
• Deriv provides the trading platform and the markup statistics for each site's app.
• Safaricom (M-Pesa) and public Tron and Solana network services, to take and confirm domain payments.
• Your browser's push service (Google, Apple, Mozilla or Microsoft), if you turn on notifications.

We also disclose information when the law requires it.

Traders on DSite-built sites

Sites built with DSite are run by the community that published them; DSite hosts them. Traders sign in with their Deriv account through Deriv's own login page. The login is kept in the trader's browser and is sent only to Deriv. DSite's servers never receive a trader's password, name, email or Deriv account number. Trades are placed with Deriv, whose own privacy policy covers the trader's account and activity.

Cookies and browser storage

dsites.app sets one cookie, which keeps you signed in for up to 30 days. The sign-up check may set Cloudflare's own cookie. The trading apps on published sites keep the trader's Deriv login and settings in browser storage, plus one cookie that records whether the trader is signed in, so the trader stays signed in across the site's apps.

How long we keep it

We keep your data while your account is open. When you ask us to delete your account, we delete it along with your sites, except for payout and payment records we must keep for accounting or legal reasons.

Your choices

You can correct your details in Settings at any time. To get a copy of your data or have your account deleted, email support@dsites.app from the address you signed up with.

Changes

When this policy changes we update the date at the top, and we tell you by email about any change that affects how we use your data. See also our Terms of Service.