Privacy Policy

Coinscal Privacy Policy

Last Updated: January 19, 2026

CoinsCal and its affiliates (hereinafter referred to as the “Company,” “we,” “us,” or “our”) place the highest importance on protecting your personal information and process it in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) for EEA users and the California Consumer Privacy Act (CCPA/CPRA) for California residents.

This Privacy Policy explains the types of personal information we collect through the Coinscal service (the “Service”), how we use, share, and protect it, your rights, and other important information.

The Service is an information provision platform only. We do not require KYC (Know Your Customer) verification or process financial transactions, and therefore we do not collect sensitive financial information such as wallet private keys, passwords, or payment details.

1. Personal Information We Collect

We collect the following types of personal information:

Mandatory Collection

Account Creation: Email address, hashed password, username/nickname
Automatically Collected: IP address, access logs, device information (browser type, operating system, language settings), cookies and similar technologies for usage records (pages viewed, search history, click logs)

Information We Do Not Collect

Wallet addresses (if linked for portfolio tracking, stored locally on your device only; not on our servers)
Financial or payment information
Biometric data (e.g., fingerprints)

2. Purposes of Collection and Use

We use personal information only for the following purposes:

Providing the Service and managing accounts
Analyzing usage statistics and improving the Service
Security, fraud prevention, and detection of illegal activities
Handling user inquiries and feedback

Processing is based on legal grounds such as contract performance, consent (which can be withdrawn), legitimate interests, or legal obligations.

3. Retention of Personal Information

We retain personal information only for as long as necessary to achieve the above purposes. Upon account deletion or when the purpose is fulfilled, data is immediately deleted or anonymized.

In cases required for legal or security reasons (e.g., fraud investigations or regulatory compliance), certain logs may be retained longer.

After the retention period, data is securely deleted or irreversibly anonymized.

4. Sharing and Third-Party Disclosure of Personal Information

We do not sell your personal information. We share it only in limited circumstances:

With your explicit consent
To comply with legal obligations or valid requests from authorities
With service providers (processors) under strict contracts:
- Cloud hosting providers (e.g., AWS, Google Cloud): Server operation and data storage
- Analytics tools (e.g., Google Analytics): Anonymized usage statistics

All processors are bound by agreements that prohibit use beyond our instructions and require appropriate security measures.

5. International Transfers of Personal Information

As a global service, personal information may be transferred to and processed in countries outside your region (including the United States and EU countries).

For such transfers, we implement appropriate safeguards compliant with GDPR and other applicable laws, such as Standard Contractual Clauses (SCCs) or adequacy decisions.

6. Your Privacy Rights

Depending on your location, you may exercise the following rights regarding your personal information:

Access: Request a copy of your data and information about how we process it
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion when no longer necessary (subject to legal retention requirements)
Restriction of processing: Limit processing in certain circumstances
Objection: Object to processing based on legitimate interests or for direct marketing
Withdraw consent: Stop processing where consent is the basis
Data portability: Receive your data in a structured, machine-readable format

How to exercise your rights: Contact us via email at admin@coinscal.com or through the Service’s inquiry channels. We may request minimal verification information (e.g., email) and will respond within 30 days (or as required by law).

EEA users: Full GDPR rights are guaranteed.
California residents: CCPA/CPRA rights (including opt-out of any “sale/sharing” of personal information) are supported. We do not sell personal information.

7. Security Measures

We implement the following technical and organizational measures to protect your data:

Encryption (TLS for transmission, AES-256 for storage)
Access controls (principle of least privilege)
Security monitoring and incident response systems
Regular internal audits

While we strive to maintain strong security, no system is completely infallible. We strongly recommend using strong passwords.

8. Children’s Privacy

The Service is not directed at or intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
If we become aware of such collection, we will promptly delete the data.

9. Changes to This Privacy Policy

We may update this Policy from time to time. The “Last Updated” date at the top indicates when changes were made. We will notify you of material changes via the website, in-app notice, or email (if you have consented). Continued use of the Service after changes constitutes acceptance.

10. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or your personal information, please contact us at:

We prioritize the protection of your privacy and will continue to improve our practices.

Thank you for using Coinscal.