Privacy Policy

Our Privacy-First Approach

CryptoWatch is built with privacy at its core. We believe your cryptocurrency portfolio data is sensitive and should remain under your control. That's why we've designed our platform to work entirely in your browser, with zero server-side storage of your personal data.

What Data We Collect

Data We DO Collect:

• Anonymous Analytics: We use Ahrefs Web Analytics to understand how visitors use our site (page views, session duration, referral sources). This data is anonymized and does not identify individual users.
• Cryptocurrency Price Data: We fetch real-time price data from CoinGecko API to display current market information. This data is public and not associated with your identity.

Data We DO NOT Collect:

• No email addresses or account information (no registration required)
• No personal identification information (PII)
• No portfolio holdings or transaction data on our servers
• No IP addresses or device fingerprinting beyond basic analytics
• No cookies for tracking purposes (we use minimal functional cookies only)
• No third-party advertising trackers

How Your Portfolio Data is Stored

All portfolio data (your holdings, watchlists, price alerts, and preferences) is stored exclusively in your browser using IndexedDB, a client-side database technology. This means:

• Your data never leaves your device - It is not sent to our servers or any third party
• You have complete control - You can export, delete, or clear your data anytime through browser settings
• Privacy by design - Even we (the site operators) cannot see your portfolio
• No account recovery - If you clear browser data, your portfolio is permanently deleted (this is intentional for privacy)

Third-Party Services

CoinGecko API

We use CoinGecko's public API to fetch cryptocurrency price data. When you view prices on CryptoWatch:

• Our server makes API requests to CoinGecko on your behalf (proxy pattern)
• CoinGecko may log API requests from our server's IP address (not yours)
• No personally identifiable information is sent to CoinGecko
• Review CoinGecko's privacy policy at: coingecko.com/privacy

Ahrefs Web Analytics

We use Ahrefs Web Analytics (a privacy-focused alternative to Google Analytics) to understand site usage:

• Ahrefs does not use cookies or track users across websites
• Data is anonymized and aggregated
• No personal data is collected or stored
• Review Ahrefs' privacy policy at: ahrefs.com/privacy

Browser Permissions

CryptoWatch may request the following browser permissions:

• Notifications: If you enable price alerts, we'll request permission to send browser notifications when alert conditions are met. You can revoke this anytime in browser settings.
• Local Storage: Automatically granted by modern browsers. Used to store preferences and portfolio data locally.

Data Retention

Since all portfolio data is stored in your browser:

• Retention is your choice - Data persists until you manually delete it or clear browser data
• No server-side retention - We don't retain any portfolio data because we never receive it
• Analytics retention - Anonymous analytics data is retained by Ahrefs according to their retention policy (typically 26 months)

Your Rights

Under GDPR, CCPA, and other privacy regulations, you have the right to:

• Access your data: All your data is in your browser's IndexedDB (accessible via DevTools)
• Delete your data: Clear browser data or use browser settings to remove IndexedDB storage for CryptoWatch
• Export your data: Use the CSV export feature in the portfolio section
• Opt-out of analytics: Use browser extensions like uBlock Origin or enable "Do Not Track" in browser settings

Security

We implement security best practices:

• HTTPS encryption for all connections
• No server-side storage of sensitive data (most secure storage is no storage)
• Regular security updates to dependencies
• Content Security Policy (CSP) headers to prevent XSS attacks

Note: While we secure our infrastructure, your portfolio security also depends on your device security. Use strong device passwords, enable device encryption, and keep your browser updated.

Children's Privacy

CryptoWatch is not intended for children under 18. We do not knowingly collect data from children. If you believe a child has used our service, please contact us (though remember, we don't collect personal data anyway).

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

Contact

If you have questions about this privacy policy or our privacy practices, you can contact us through the feedback form on our website.