Privacy Policy

1. Who We Are

CryptoInvesting is an educational website. We don’t require user accounts.

2. Information We Collect

2.1 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and usage:

• Device Information: Browser type, operating system, device type, and screen resolution
• Usage Data: Pages visited, time spent on pages, click patterns, and referral sources
• Technical Data: IP address, user agent string, and timestamp of visits
• Performance Data: Page load times and website performance metrics

2.2 Analytics and Tracking

We use privacy-focused analytics services to understand how visitors use our website:

• Plausible Analytics: Privacy-friendly analytics that don't use cookies or track personal data
• Aggregated Data: All analytics data is anonymised and aggregated
• No Personal Identification: We cannot identify individual users from this data

2.3 Voluntary Information

Information you choose to provide:

• Contact Information: Details you provide when contacting us
• Feedback: Any feedback or suggestions you submit

3. How We Use Your Information

3.1 Website Improvement

We use collected data to:

• Analyse website performance and user experience
• Identify popular content and improve our educational materials
• Optimise website speed and functionality
• Understand which topics are most valuable to our audience

3.2 Communication

The site has no sign-up form, no account system and no mailing list, so the only way we receive your email address is if you write to us. When you do, we use it to reply to you and for nothing else. We do not send newsletters or marketing email, and we do not add you to any list.

3.3 Legal Compliance

We may use information to:

• Comply with applicable laws and regulations
• Respond to legal requests and prevent fraud
• Protect our rights and the safety of our users
• Enforce our Terms of Use and other policies

4. Information Sharing and Disclosure

4.1 Third-Party Services

Four companies process something on our behalf. They are named here rather than described by category, because a category cannot be checked:

• Plausible Analytics — page-level usage data. Its published data policy states that all visitor data is processed and stored in the EU on infrastructure owned by European companies, that visitor data does not leave the EU, and that it stores no raw IP addresses or user-agent strings.
• Cloudflare, Inc. (United States) — serves and protects every page. It sees every request before we do, including your IP address and user agent, and on a cached page it answers you without the request reaching us at all. It also receives a report from your browser when a network error occurs.
• DigitalOcean — the servers themselves, in its Frankfurt region. Their request logs are covered in section 6.2.
• Proton AG (Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland, CHE-354.686.492) — email. Anything you send us is processed and stored by Proton under its data processing agreement, which forms part of its terms of service and is governed by Swiss law.

4.2 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes, court orders, or government requests
• Protect against fraud, security threats, or illegal activities
• Defend our legal rights and interests
• Protect the safety and security of our users and the public

4.3 Business Transfers

If a merger, acquisition, or sale of assets occurs, user information may be transferred as part of the transaction, subject to appropriate privacy protections.

5. Cookies and Tracking Technologies

5.1 What we actually store

This site sets no tracking cookies. Plausible, our analytics provider, is cookieless by design, which is the reason we chose it — it is also why nothing here asks you to accept analytics tracking. Cloudflare, which serves and protects the site, issues one strictly necessary security cookie (cf_clearance) so it can tell a real browser from automated traffic. It carries no profile of you and we cannot read it.

Two small values are kept in your browser's local storage, not in cookies, and neither leaves your device:

• Consent choice: records that you have dismissed the notice, so it does not reappear on every page
• Terms acknowledgement: records that you have acknowledged the terms notice, for the same reason

Both are flags. Neither contains an identifier, and neither is readable by us — they exist only in the browser that created them.

5.2 Clearing them

Clearing your browser's site data for crypto-investing.page removes both values, after which the notices appear again on your next visit. It also clears the offline cache the site keeps so pages still open without a connection; that rebuilds itself as you browse. Browsers that block cookies usually block local storage with them, because most present the two as a single “cookies and site data” setting — if yours does, both notices will reappear every visit.

For detailed information about our cookie practices, please read our Cookie Policy.

6. Data Security

6.1 Security Measures

We implement appropriate security measures to protect your information:

• Encryption: All data transmission is encrypted using HTTPS
• Access controls: Access to any personal information is limited to a need-to-know basis
• Regular Updates: Keep our systems and software up to date
• Monitoring: Regular security monitoring and vulnerability assessments

6.2 Data Retention

We retain information only as long as necessary:

• Analytics data is aggregated and holds no personal identifiers, so there is nothing in it to tie to you. Server access logs are different and are covered by the next point.
• Server access logs record your IP address, passed to us in a header by the content delivery network, together with your browser's user agent and the time of the request. They are kept for up to 30 days. Until 25 October 2026 a second copy of the same lines, written before we narrowed this, remains in the servers' own system logs and ages out on that date; after it we hold one copy only, inside the 30-day limit.
• Anything you email us is kept in the mailbox, and deleted on request. We do not run a timed deletion, and we would rather say so than name a period nothing enforces.
• Legal compliance may require longer retention

7. Your Privacy Rights

7.1 Access and Control

Under UK and EU data protection law you have the right to access, to rectification, and to erasure of any personal data we hold about you, together with the rights below. Depending on where you live, some may apply differently:

• Access: Request information about data we collect about you
• Correction: Request correction of inaccurate personal information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing of your information
• Restriction: Ask us to pause processing while a dispute about the accuracy or lawfulness of your data is resolved

7.2 How to Exercise Your Rights

To exercise your privacy rights, contact us at [email protected].

We aim to reply within a couple of working days, and will respond substantively within one month, which is the statutory period under UK and EU data protection law. Requests are read and answered by the person who runs the site.

If you are not satisfied with our response, you can complain to a supervisory authority: in the UK that is the Information Commissioner's Office (ico.org.uk), and in the EU it is the data protection authority of the member state where you live.

8. International Data Transfers

Our analytics provider, Plausible, states that all visitor data is processed and stored in the EU on infrastructure owned by European companies, and that visitor data does not leave the EU. It stores no raw IP addresses or user-agent strings.

Cloudflare, which serves and protects the site, is a United States company and sees every request, including your IP address. We are working through what we can state precisely about the legal mechanism covering that transfer, and would rather say so than name an instrument here before we can point you at it. Ask us and we will tell you what is in place.

We do not treat your continued use of the site as consent to any of this. Consent is not the basis we rely on, and your rights under data protection law apply whether or not you keep browsing.

9. Children's Privacy

Our website is not intended for children under 13 years of age. We do not knowingly collect personal information from individuals under the age of 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last updated" date at the top of this policy

Your continued use of our website after any changes constitutes acceptance of the updated policy.

11. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Response time: we aim to reply within a couple of working days
• Language: we respond in English

We are committed to protecting your privacy and handling your data responsibly. This policy reflects our dedication to transparency and user rights.