Effective as of October 1, 2026
1. What data we collect
- order data: e-mail, card and wallet details, cardholder name, amounts and exchange directions;
- documents provided for verification (see the AML/KYC policy);
- technical data: IP address, browser and device type, cookies, visit time.
2. Why
- to execute exchange orders and communicate with the Client;
- for AML/KYC screening and fraud prevention;
- to protect the website from attacks and abuse;
- to improve the service and collect anonymised visit statistics.
3. Sharing with third parties
We do not sell or share personal data with third parties, except where needed to execute an exchange (payment systems, AML providers), upon a lawful request from competent authorities, or to protect the Service's rights in case of fraud. AML services receive only wallet addresses and transaction hashes — no names or contacts.
4. Storage and protection
Data is stored on secure servers in Germany (EU) and transmitted over an encrypted connection (HTTPS). Database backups are encrypted before they are sent to backup storage. Access is limited to staff who need it for their work. Order data (details, amounts, the time of creation and of each status change, plus the IP address and browser data at order creation) and verification data are kept for at least 5 years after the order is completed; other technical logs for up to 12 months.
5. Cookies
The website uses cookies for the exchange form, session persistence and anonymised statistics. If you arrived via a partner link (including from an exchanger monitor), a cookie with the partner code is kept for up to 10 years so the partner can be credited for your exchanges. You can disable cookies in your browser settings, but some features may then not work correctly.
Your personal account password is stored only as a hash: it cannot be recovered from the database, and Service staff cannot see it.
6. Your rights
You may request information about the data we hold, its correction or deletion, unless this conflicts with our AML/KYC retention obligations. Requests are accepted at support@cryptodot.org.