Privacy Policy for Crypto Diary

Last Updated: 14 Mar 2025

Welcome to Crypto Diary, a free crypto portfolio tracking app. We value your privacy and are committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your data.

1. Information We Collect

We collect the following information when you use Crypto Diary:

• Account Information: Your email address and an encrypted password when you sign up or log in.
• Usage Data: Information about how you interact with the app (e.g., features used), collected automatically to improve our service.
• No Financial Data: We do not collect or store your cryptocurrency wallet addresses, private keys, or financial transaction details.

We do not knowingly collect data from users under 13 years of age.

2. What We Don’t Collect: API Keys and Secret Keys

We designed Crypto Diary to prioritize your privacy when interacting with cryptocurrency exchange APIs (e.g., Binance, Bybit, Coinbase). When you use our app to access exchange data:

• Your API keys and secret keys stay on your device. All requests to exchanges (including preparing arguments, calculating signatures, etc.) are processed entirely in your browser. We never receive, store, or process your secret keys on our servers.
• We only receive non-sensitive data. The app sends us only the request arguments, your public API key, and the signature—none of which can be used to access your exchange account or reveal your secret key.
• No storage of sensitive credentials. Since everything sensitive stays client-side, we don’t store any exchange credentials in our database.

This approach ensures that your sensitive information remains under your control, and we cannot access or misuse it. However, please ensure your device and browser are secure, as we cannot protect against local vulnerabilities (e.g., malware or unsecured networks).

3. How We Use Your Information

We use your data for the following purposes:

• To create and manage your account.
• To authenticate you securely using JSON Web Tokens (JWT).
• To improve the app’s functionality and user experience.
• To respond to your inquiries or support requests.

4. How We Protect Your Information

We take security seriously:

• Encryption: Passwords are stored using strong, industry-standard encryption (e.g., hashing). Data in transit is protected with HTTPS.
• Limited Access: Only authorized personnel (if any) can access your data, and only for operational purposes.
• No Sharing: We do not sell, trade, or share your personal information with third parties, except as required by law (e.g., legal requests).

5. Data Retention

• We keep your email and encrypted password for as long as your account is active.
• If you delete your account, we will remove your personal data within 30 days, unless required to retain it by law.

6. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your data.
• Deletion: Ask us to delete your account and data.
• Correction: Update inaccurate information.
• Objection: Object to how we process your data (if applicable).

To exercise these rights, contact us at crypto.diary.contact@gmail.com.

7. Cookies and Tracking

• We use an essential cookie to store your JSON Web Token (JWT) for authentication purposes. This cookie is necessary for you to log in and use the app securely.
• We do not use cookies or similar technologies for analytics, advertising, or any other non-essential purposes.
• You can disable cookies in your browser settings, but this will prevent you from logging in or using the app.

8. Third Parties

• We use third-party services (e.g., hosting providers) to operate the app. These providers may process your data on our behalf but are bound by strict confidentiality agreements.
• We do not share your data with advertisers or other external parties.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we’ll notify you via email or a notice in the app. Please check this page periodically.

10. Contact Us

If you have questions or concerns about this Privacy Policy, please reach out:

Email: crypto.diary.contact@gmail.com

Website: cryptodiary.app

Disclaimer: Crypto Diary is a tool for tracking cryptocurrency portfolios and does not provide financial advice. We are not responsible for your investment decisions.