CryptoSpread ("we", "us", "our") operates at cryptospread.pro. This Privacy Policy explains what personal data we collect, why we collect it, and how it is handled. We collect the minimum data necessary to operate the Service.
We do not sell, rent, or share your personal data with third parties for marketing purposes.
| Data | Why we collect it | How long we keep it |
|---|---|---|
| Email address | Account creation, login, and transactional emails (payment confirmation, welcome) | Until account deletion |
| Password (hashed) | Authentication. Passwords are hashed using bcrypt and never stored in plain text. | Until account deletion |
| Subscription plan & status | To provide the correct level of service access | Until account deletion |
| Payment transaction hash | On-chain verification of cryptocurrency payments. No card or bank data is collected. | Kept permanently for audit purposes |
| Telegram Chat ID | Optional. Only collected if you configure Telegram alerts in Settings. | Until you remove it or delete your account |
| Session token (cookie) | Keeps you logged in. Stored as an HTTP-only cookie. | 30 days from login, or until logout |
| IP address & access logs | Server-level logging for security monitoring and abuse prevention. | Rolling 30-day window |
We do not collect your name, phone number, address, date of birth, or any exchange credentials.
We do not use your data for profiling, advertising, or any purpose beyond operating the Service.
We do not sell or share your personal data. The only third-party interactions involving your data are:
Your data is stored in a PostgreSQL database on a dedicated VPS server. The server uses TLS encryption for all connections. Passwords are hashed with bcrypt before storage.
Session tokens are transmitted only over HTTPS. We do not use third-party analytics, tracking scripts, or advertising pixels on the platform.
While we take reasonable measures to protect your data, no system is completely secure. We cannot guarantee absolute security.
You have the right to:
To exercise any of these rights, contact us at [email protected].
CryptoSpread uses a single session cookie to keep you logged in. This cookie is:
We do not use analytics cookies, advertising cookies, or third-party tracking cookies of any kind.
CryptoSpread is not intended for users under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent update. We will notify registered users of significant changes via email.
For privacy questions, data requests, or concerns, contact us at [email protected].