Privacy Policy

This Privacy Policy explains how Coinlib ("we", "us", "our") collects, uses, and shares information when you use coinlib.io (the "Service"). By using the Service you agree to the practices described below.

1. Information we collect

We try to collect as little personal information as possible. The categories of data we may collect are:

• Account data. If you create an account, we store your email address, an authentication identifier, and any profile information you choose to provide (such as a display name or avatar).
• Portfolio data. If you use the portfolio tracker, we store the holdings you enter so we can show them back to you. Holdings are private to your account.
• Usage data. Standard server logs (IP address, user agent, pages requested, timestamps) used to operate, secure, and debug the Service.
• Cookies and local storage. Used to keep you signed in, remember your theme preference, and measure aggregate traffic.

2. How we use information

• To provide, maintain, and improve the Service.
• To authenticate you and keep your account secure.
• To diagnose technical issues and prevent abuse.
• To measure aggregate traffic and the performance of features.
• To comply with legal obligations.

We do not sell your personal information.

3. Service providers

We rely on a small number of third parties to operate the Service. These providers process data only on our behalf and under contractual confidentiality:

• Vercel — hosting and content delivery.
• Supabase — authentication and database storage.
• CoinMarketCap and CoinGecko — market-data providers (we send no personal data to them).
• Vercel Speed Insights / analytics — anonymised performance and traffic measurement.

4. Cookies

We use cookies and similar technologies for essential functionality (authentication, theme preference) and for aggregate analytics. Most browsers let you block or delete cookies — note that doing so may break parts of the Service such as login.

5. Data retention

We retain your account and portfolio data for as long as your account is active. Server logs are typically retained for up to 30 days. You can request deletion of your account and associated data at any time (see "Your rights" below).

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.

7. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them.

8. International transfers

Your information may be processed in countries other than the one in which you live. We rely on our service providers' standard contractual safeguards for any such transfers.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

10. Contact

For privacy questions or data requests, please get in touch via the About page.