Privacy Policy
Last updated:
Summary
You can read Bitcoinvestments without an account. Today we collect your email address only if you join our newsletter. The services that run the site (Cloudflare for hosting, Google for fonts and analytics, and the price and news providers your browser contacts) see your IP address. Analytics cookies are set only if you accept them. We do not sell your personal information.
What we collect today
Accounts, payments, portfolio sync and scam-report submissions are switched off at the moment. While that is the case, the personal data we handle is:
- Newsletter sign-ups: your email address, when you signed up and which page you used. Stored in Supabase until you unsubscribe.
- Server and security logs: IP address, browser details and requested pages, processed by Cloudflare.
- Analytics: page views and interactions, through Google Analytics and Plausible, as described below.
- Emails you send us: whatever you include, kept to answer you.
Data you type into calculators and the portfolio tracker stays in your browser (see Browser storage below) and is not sent to us.
Introduction
Bitcoinvestments ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services, and describes the rights you have over your personal data under the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and other applicable privacy laws.
Data Controller
The data controller is [legal entity name and postal address to be added], trading as Bitcoinvestments. For questions about this policy or to exercise your rights, email privacy@bitcoinvestments.net.
Information We Collect
Personal Information You Provide
Once accounts and paid plans open, we will also collect the following when you choose to provide it:
- Email address (when you sign up, subscribe to our newsletter, or contact us)
- Account credentials and profile preferences
- Portfolio and watchlist data you choose to track
- Payment-related information processed by our payment provider (we do not store full card numbers)
- Content you submit, such as scam reports or support requests
Information Collected Automatically
When you visit our website, we (or our processors) may automatically collect:
- Browser type and version, and operating system
- Pages visited, referring URLs, and time spent (analytics)
- IP address (anonymized where possible)
- Device and interaction data via cookies and similar technologies (see Cookies below)
How We Use Your Information and Our Legal Bases
Under the GDPR we must have a lawful basis for each purpose for which we process your personal data. Those bases are set out below:
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Provide and maintain your account and the core service | Performance of a contract |
| Send newsletters and marketing emails | Consent (withdrawable at any time) |
| Analytics and advertising cookies | Consent |
| Improve and secure our website, prevent fraud and abuse | Legitimate interests |
| Comply with legal, tax, and accounting obligations | Legal obligation |
Services that receive your data
These are the outside services involved in running the site, and what each one sees:
| Service | What it receives and why | When |
|---|---|---|
| Cloudflare | Hosts the site and runs our server functions. Processes every request, including your IP address, browser details and the page requested, to deliver and protect the site. | Every visit |
| Google (Google Analytics 4, Google tag) | The Google tag script loads on every page in Consent Mode. Until you accept analytics cookies it sets no cookies, but Google may still receive cookieless pings (page, time, browser details and IP address, which Google says it does not store). After you accept, GA4 sets cookies to measure visits. | Every visit; cookies only with consent |
| Google Fonts | Our pages open a connection to Google's font servers (fonts.googleapis.com, fonts.gstatic.com), which exposes your IP address to Google. | Every visit |
| Plausible Analytics | Privacy-focused, cookieless page-view statistics. The script loads only after you accept analytics. | Only with analytics consent |
| CoinGecko | Price and market data. Most requests go through our own server, so CoinGecko sees our server rather than you, but coin logos load directly from CoinGecko image servers, which see your IP address. | Pages that show prices |
| alternative.me | Your browser fetches the Crypto Fear & Greed Index directly from alternative.me, which sees your IP address. | Home page and dashboard |
| CryptoCompare (CoinDesk Data) | Your browser fetches news headlines directly from CryptoCompare, which sees your IP address. Headline images load from the publishers' servers. | Pages that show headlines |
| Supabase | Database hosting. Stores newsletter sign-ups (email address, sign-up date, the page you signed up on) and, once accounts open, account and portfolio data. | When you subscribe (and, later, use an account) |
| Resend | Sends our emails (welcome and newsletter emails, and account emails once accounts open). Receives your email address and the message content. | When we email you |
| Stripe | Payment processing. Stripe collects your card and billing details directly; we never see full card numbers. | Only when you buy a paid plan (none are on sale yet) |
| Anthropic | Powers AI features such as portfolio analysis. The text and portfolio details you submit are sent to Anthropic to generate a response. | Only when you use an AI feature (not available yet) |
Links to exchanges, wallets and news sites take you to their websites, where their own privacy policies apply. We do not sell your personal information.
Browser storage (localStorage)
Besides cookies, the site saves some information in your browser's local storage. It stays on your device, we can't read it from our servers, and you can clear it at any time in your browser settings.
| Key | Purpose |
|---|---|
| bitcoin_investments_cookie_consent | Remembers your cookie choices. |
| accessibility-settings | Remembers text size, contrast and reduced-motion settings. |
| bitcoin_investments_portfolio | The portfolio you enter in the tracker. It stays in your browser and is not sent to us. |
| bitcoin_investments_affiliate_clicks, bitcoin_investments_session_id | A local record of affiliate links you clicked, with a random session ID. Kept in your browser. |
| bitcoin_investments_influencer_ref | Remembers a referral code if you arrived through a partner link. |
| Other tool keys | Some calculators and tools save your inputs or progress locally so they are there next time. |
International Data Transfers
Some of our service providers (for example Cloudflare, Google, Supabase, Resend, Stripe, CoinGecko and alternative.me) are based in, or store data in, the United States and other countries outside the European Economic Area and the United Kingdom. Where personal data is transferred outside the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum) to ensure your data receives an equivalent level of protection.
Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy:
- Account data (once accounts open) — for the life of your account and up to 12 months after closure
- Newsletter subscriptions — until you unsubscribe, plus a short suppression-list period
- Analytics data — retained in aggregated/pseudonymized form (typically up to 14 months)
- Transaction and billing records — as required by applicable tax and accounting law (typically up to 7 years)
When personal data is no longer needed, we delete or anonymize it.
Data Security
We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
Your Rights (GDPR / UK GDPR)
If you are in the EEA or the UK, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate or incomplete information
- Request erasure of your personal information ("right to be forgotten")
- Restrict or object to certain processing, including direct marketing
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time, without affecting prior lawful processing
To exercise these rights, contact us at privacy@bitcoinvestments.net. We will respond within the timeframes required by law.
Right to complain: You also have the right to lodge a complaint with a data protection supervisory authority. In the UK this is the Information Commissioner's Office (ico.org.uk); in the EEA it is the authority in your country of residence.
California Privacy Rights (CCPA / CPRA)
If you are a California resident, you have the right to:
- Know what categories of personal information we collect, use, and disclose
- Request access to and deletion of your personal information
- Correct inaccurate personal information
- Opt out of the "sale" or "sharing" of personal information
- Not be discriminated against for exercising your privacy rights
Do Not Sell or Share My Personal Information: We do not sell your personal information, and we do not share it for cross-context behavioral advertising in exchange for money. Where you decline marketing cookies via our consent banner, we treat that as an opt-out of any "sharing." We also honor the Global Privacy Control (GPC) browser signal where technically feasible. To make a California privacy request, email privacy@bitcoinvestments.net.
Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date above.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at privacy@bitcoinvestments.net.