Privacy notice

Last updated: 2026-11-07

Who is responsible

This website is run by [operator name - set SITE_OPERATOR_NAME] (the "operator"), a private person living in Switzerland. The operator processes your data under the Swiss Federal Act on Data Protection (FADP) and, for visitors in the European Union, the EU General Data Protection Regulation (GDPR). Contact for any privacy question: administrator@cryptokiddo.io.

What we store and why

• Account: email address, nickname, password (stored only as a one-way hash), sign-up and last-login time. Needed to provide your account (GDPR Art. 6(1)(b)). The email is used for the confirmation link, password resets and nothing else; it is never shown to other visitors.
• Your coins and trades: the coins you follow and the trades you log (coin, date, buy/sell, quantity, price, fee, note). Needed to show your portfolio and return (Art. 6(1)(b)).
• Public top traders list: only if you switch it on in your account. If you are among the top 5, your nickname, your return and all your counted trades are shown publicly. Based on your consent (Art. 6(1)(a)); you can switch it off at any time and you disappear from the list immediately.
• Server logs: IP address, time and page requested, kept for security and to fix errors (Art. 6(1)(f), legitimate interest), deleted after at most 30 days. Failed logins are counted per IP address for 15 minutes to block password guessing.

Cookies

Only cookies needed for the site to work: a session cookie while you are logged in and a security (CSRF) cookie for forms. No tracking, analytics or advertising cookies.

Who processes the data

The site runs on Amazon Web Services (AWS) servers in the European Union (Frankfurt), and emails are sent through Amazon SES. AWS acts as a processor under its data processing terms. Switzerland recognises the EU as providing adequate data protection, so the data stays under equivalent protection. Your data is not sold or shared with anyone else.

How long we keep it

Until you delete your account. Deleting it (Account → "Delete my account") removes your account, coins and trades at once; backup copies are overwritten within 14 days. Accounts whose email was never confirmed are deleted after 30 days.

Your rights

You can see and correct your data in your account, download it (Account → "Download my data"), delete it, withdraw your consent to the public list, and object to processing. For anything else, write to administrator@cryptokiddo.io. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch) or, if you live in the EU, to the data protection authority of your country.