Privacy Policy
Last updated: November 7, 2026
This page explains what information BOSS (Bible of Options Strategies System) stores when you use this site, and the choices you have about it. BOSS is a simple, self-hosted reference tool: there is no user account system, no payment processing, and no advertising.
What This Site Stores
BOSS does not require you to create an account or provide any personal information to use it. Browsing itself sets a small set of preference cookies, listed below, which remember choices you make while browsing -- which language, exchange, and currency to show -- so you don't have to re-select them on every page. If you accept cookies, this site also loads Google Analytics to understand aggregate traffic -- see "Third-Party Services" below. Separately, the server counts how many times each kind of page and API endpoint is requested, per day, without your IP address, any cookie or any identifier: only totals, which are not shared. Calls to the API (/api/) are also limited per day by IP address; that count is kept in memory only, for the day, and then discarded.
Cookies
A cookie is a small piece of text a website asks your browser to store. The first four below are set directly by BOSS itself, each remembering a preference you set yourself. The last two are set by Google Analytics, and only once you've accepted cookies -- see "Third-Party Services" below for what Analytics is used for. None of them identify you personally or build an advertising profile:
| Cookie | Purpose | Duration |
|---|---|---|
boss_lang |
Remembers your chosen display language. | 1 year |
boss_exchange |
Remembers your chosen exchange (e.g. Deribit, OKX, Bybit). | 1 year |
boss_currency |
Remembers your chosen base currency (e.g. BTC, ETH). | 1 year |
boss_consent |
Remembers whether you accepted or declined the three cookies above. | 1 year |
_ga |
Set by Google Analytics, only if you accept cookies, to distinguish visitors across pages and visits. | 2 years |
_ga_<container-id> |
Set by Google Analytics, only if you accept cookies, to persist session state. | 2 years |
The first time you visit, BOSS asks for your consent (in the banner shown at the bottom of the page) before setting the language/exchange/ currency cookies above. If you decline, or haven't decided yet, the site still works normally -- your choices from the page's own controls simply won't be remembered on your next visit. The consent cookie itself is always set once you make a choice, since it exists only to remember that choice.
Local Storage (Watchlist)
If you star a strategy to add it to your Watchlist, that choice is saved using your browser's local storage, not a cookie -- it never leaves your device or reaches BOSS's servers, and isn't covered by the cookie banner above, since it isn't a cookie and carries no tracking purpose. You can clear it at any time through your browser's own site data settings, or by removing each starred strategy individually.
Paper trading positions are kept the same way, under a separate local storage entry: what you simulated, at what prices and when. To price one, your browser sends that position's legs to BOSS in the request itself; BOSS computes the answer and keeps nothing.
The Get Started guide remembers, under a boss_onboarding local storage entry, whether you finished it, turned it off, or where you stopped, plus the level and market view you picked. It never leaves your browser. Clearing this site's data brings the invitation back.
If you switch between the light and dark themes, that choice is kept under a boss_theme local storage entry so the next page opens the same way. It never leaves your browser.
Third-Party Services
Each strategy page can optionally load a comments widget from GraphComment, a third-party service, which is only loaded after you accept cookies (or explicitly choose to load comments for that visit). GraphComment operates under its own privacy policy and may set its own cookies -- see graphcomment.com for details.
BOSS also uses Google Analytics (GA4) to understand aggregate traffic -- which pages are visited, roughly how many people visit, which browsers and countries are common -- so the site can be improved. Like GraphComment, it's only loaded once you accept cookies; declining means Google Analytics is never loaded on your visit at all, not just that its cookies aren't set. Google Analytics operates under its own privacy policy -- see policies.google.com/privacy.
Live market data (prices, Greeks) is fetched by BOSS's own backend directly from Deribit, OKX and Bybit's public APIs. This is a one-way, server-to-server request for public data -- your browser never contacts these exchanges directly, and no information about you or your visit is ever sent to them.
Your Choices
You can accept or decline the preference cookies at any time via the cookie banner, and you can clear or block any cookie at any time through your browser's own settings -- doing so simply means BOSS falls back to its defaults (English, the first configured exchange/ currency) the next time you visit.
Data Retention
Preference cookies expire automatically after one year, or immediately if you clear them yourself. BOSS keeps no server-side record of your visits, IP address, or browsing history.
Children's Privacy
BOSS is a general-audience educational reference tool and is not directed at children. It does not knowingly collect information from children.
Changes to This Policy
This policy may be updated from time to time to reflect changes to the site; the date at the top of this page always reflects the most recent version.