Privacy policy

Controller: Coinstox DAO, [LEGAL ENTITY], [ADDRESS], [EMAIL].

What we process and why

• Server logs and security (Cloudflare): when you open the site, Cloudflare processes technically necessary data (e.g. IP address). Basis: legitimate interest (Art. 6(1)(f) GDPR), operating and protecting the site. Audience measurement (Cloudflare Web Analytics) works without cookies and without profiling.
• Bot protection (Cloudflare Turnstile): on forms we check whether a request comes from a human. Basis: legitimate interest.
• Newsletter: your email address and the time of confirmation (double opt-in). Basis: consent (Art. 6(1)(a)). Unsubscribe any time via the link in every email. Sent via Resend.
• Account and Pro: email address, sign-in links, sessions (one technically necessary cookie), watchlists, alerts, portfolio inputs and reports. Basis: performance of a contract (Art. 6(1)(b)).
• Payment (Lemon Squeezy): Lemon Squeezy is the seller and payment processor (merchant of record) and processes your payment data under its own responsibility. We only receive order and subscription status.
• AI analysis (Anthropic, Claude): for the portfolio check and short summaries we send the holdings you enter (without name and email address) to Anthropic. Do not enter personal data in free-text fields.
• Price data (CoinGecko, Yahoo Finance): requests are made server-side; none of your data is transmitted.
• Affiliate clicks: we count clicks on partner links anonymously, without attribution to individuals.

Retention

Newsletter until you unsubscribe; account until deletion (any time under “Account”); portfolio reports 12 months; order data according to statutory retention periods.

Your rights

Access, rectification, erasure, restriction, data portability, objection and withdrawal of consent. Complaints may be addressed to the Austrian data protection authority (dsb.gv.at). See the legal notice for contact details.