Privacy Policy

This Privacy Policy explains how the operator of Crypto Portfolio Stats (“Crypto Portfolio Stats”, “we”, “us” or “our”) collects, uses, shares and protects personal data when you use the crypto-stats.info website, our mobile applications and any related services (collectively, the “Service”).

We act as the data controller for the personal data described in this Policy. If you have any questions or requests regarding your personal data, contact us at [email protected]. This Policy should be read together with our Terms of Use.

Account information. You sign in through a third-party identity provider (such as Google or Apple). From that provider we receive your name, email address and profile picture. We never receive or store your password for that provider.

Portfolio data you provide. This includes blockchain wallet addresses you add, exchange API keys you connect (which must be read-only), transactions you record manually, and your portfolio names and settings.

Data we retrieve on your behalf. Using the wallet addresses and API keys you provide, we retrieve balances and transaction history from public blockchains and from your exchange accounts, and we combine them with market prices to calculate your holdings and performance.

Payment information. If you purchase a subscription, payments are handled by our payment processors. We receive confirmation of payment and limited billing details (such as plan, amount and payment status); we do not store full card numbers.

Automatically collected data. When you use the Service we collect technical data such as IP address, device and browser type, operating system, language, pages viewed and actions taken, and approximate location derived from your IP address. See also the section on cookies below.

Communications. If you contact us (for example by email), we keep the correspondence and the contact details you provide.

• to provide and operate the Service — synchronizing your wallets and exchanges, calculating balances, profit and loss, and analytics;
• to authenticate you and keep your account secure;
• to process subscription payments and manage your plan;
• to respond to support requests and communicate service-related notices (such as changes to features, terms or prices);
• to monitor, debug and improve the Service, including through aggregated usage analytics;
• to detect, prevent and investigate fraud, abuse and security incidents;
• to comply with legal obligations and enforce our Terms of Use;
• with your consent, to send marketing communications — you can opt out at any time.

Where the GDPR or similar laws apply, we process your personal data on the following legal bases:

• Performance of a contract — providing the Service you signed up for, including portfolio syncing, analytics and billing;
• Legitimate interests — securing and improving the Service, preventing fraud and abuse, and communicating important service information;
• Consent — optional processing such as marketing communications; you may withdraw consent at any time;
• Legal obligation — retaining records and cooperating with authorities where the law requires it.

We do not sell, rent or lease your personal data. We share it only in the following circumstances:

• Service providers. Cloud hosting, database and infrastructure providers that store and process data on our behalf under confidentiality obligations.
• Blockchain and market data providers. To retrieve on-chain history, the wallet addresses you add are sent to third-party blockchain data providers. Wallet addresses and the data recorded on public blockchains are, by their nature, publicly available.
• Payment processors. To handle subscription payments; they process your payment details under their own privacy policies.
• Authorities. Where required by law, court order or to protect the rights, safety or property of us, our users or others.
• Business transfers. In connection with a merger, acquisition or sale of assets, in which case this Policy will continue to apply to your data.

The Service uses a small number of cookies and browser storage entries that are essential for it to work: they keep you signed in, remember your language and interface preferences, and protect your session. We may also use privacy-respecting analytics to understand how the Service is used in aggregate.

We do not use third-party advertising cookies. You can control or delete cookies through your browser settings; disabling essential cookies may prevent parts of the Service from working.

We keep your personal data for as long as your account is active and as long as it is needed for the purposes described in this Policy. If you disconnect an exchange, the associated API key is deleted from our systems. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain certain records to comply with legal, tax or accounting obligations, or to resolve disputes.

We protect your data with technical and organizational measures, including encryption in transit, encrypted storage of sensitive credentials such as exchange API keys, access controls and monitoring. We also require that exchange API keys used with the Service are read-only, so they cannot be used to trade or withdraw funds.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a data breach is likely to result in a risk to your rights and freedoms, we will notify you and the competent supervisory authority without undue delay, and in any case within the timeframes required by applicable law.

Depending on your jurisdiction, you have the right to:

• access the personal data we hold about you and receive a copy of it;
• correct inaccurate or incomplete data;
• request deletion of your data (“right to be forgotten”);
• restrict or object to certain processing;
• receive your data in a portable, machine-readable format;
• withdraw consent at any time, without affecting processing that took place before withdrawal;
• lodge a complaint with your local data-protection supervisory authority.

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law (under the GDPR, generally within one month).

Our service providers may process data in countries other than your own. Where personal data is transferred internationally, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses, and we require recipients to protect the data to a comparable standard.

The Service is not directed at children and may only be used by persons who are at least 18 years old, as set out in our Terms of Use. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at [email protected] and we will delete it.

We may update this Policy from time to time. If a change is material, we will provide reasonable advance notice through the Service or by email. The “Last updated” date at the top of this page indicates the latest revision. Your continued use of the Service after a change takes effect means the updated Policy applies to you.

Questions, concerns or requests regarding this Policy or your personal data can be sent to [email protected].