Privacy Policy — Developer API

This privacy addendum applies to the eToro Builders Portal and Public API. It supplements eToro's main Privacy Policy.

1. Data We Collect

When you use the eToro API, we collect:

• API request logs: Timestamps, endpoints accessed, request/response metadata, and HTTP status codes
• Authentication data: API key identifiers (not the keys themselves), user account IDs
• IP addresses: Source IP of API requests for security and rate limiting
• Portal analytics: Page views, click events, and device information via Google Analytics 4 (with cookie consent)

2. How We Use This Data

• Security: Detecting and preventing unauthorized access, abuse, and fraudulent activity
• Rate limiting: Enforcing fair use policies and preventing service degradation
• Monitoring: Maintaining API availability, debugging issues, and measuring performance
• Product improvement: Understanding API usage patterns to prioritize features and documentation

3. Data Retention

API request logs are retained for 90 days for operational purposes. Aggregated, anonymized analytics data may be retained indefinitely. Portal analytics data follows Google Analytics 4 default retention policies (14 months).

4. Your Rights (GDPR / CCPA)

If you are located in the EU/EEA or California, you have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict processing of your data
• Request data portability
• Withdraw consent for analytics tracking at any time

To exercise these rights, contact privacy@etoro.com.

5. Cookies

The Builders Portal uses essential cookies and optional analytics cookies. Analytics cookies (Google Analytics 4) are only loaded after you provide consent via the cookie banner. You can withdraw consent at any time by clearing your browser cookies.