Plain-English privacy

What stays on your device

Your saved coins, holding quantities, currency and theme are stored in your browser. They are not placed in the alert, feedback or analytics database. Clearing this site’s browser data removes them.

What we collect

• Account and sign-in: verified email address, optional display name and Google profile-picture URL, sign-in provider and secure session records. Google supplies these details only when you choose its sign-in button. We do not collect or store an account password.
• Heat alerts: your account identifier, selected market or coin reading, chosen alert level, latest heat score and status, confirmation and delivery status, referral source and signup time. If you enable instant notifications, we also store the private browser push endpoint and encryption keys supplied by that device.
• Closed tester list: no new tester-list responses are accepted. If you joined previously, the email address, research answers, consent time and signup source remain covered by this notice.
• Optional feedback: feedback type, message and an email only if you choose to provide one.
• Anonymous usage statistics: page sessions, broad referral source and taps on product features. We do not put IP addresses, email addresses, coin-search text, holding amounts or portfolio values into analytics.

Why we use it

We use account and session information to keep your alert list private and let you manage it without repeatedly entering an email address. We rely on your consent to send requested heat-alert emails and, only when you choose to enable them, instant device notifications. An alert becomes active only after you confirm it, and every alert email includes a link that stops that alert. You can also pause or remove alerts while signed in. We use anonymous statistical information to understand whether the beta is useful and where it needs improvement. You can object to that analytics use below without losing access to the app.

Opting out stops future events from this device. Past anonymous events cannot be linked back to your device and therefore cannot be singled out for deletion.

Sharing and security

We do not sell personal details or share them with advertisers. Hosting, database, Google sign-in, email-delivery and browser push-service suppliers may process information only to provide those services. Public market-data requests are made by our server. Coin logos are loaded from CoinMarketCap without sending your email, holding amounts or portfolio values. Account sessions use a random token held in a secure, HTTP-only cookie; only its irreversible hash is stored in the database. Owner results are separately protected by sign-in and an approved-email allowlist.

Retention

Heat-alert, legacy tester-list and feedback records are reviewed and kept for no longer than 24 months after the last meaningful contact, unless they are needed for a legal obligation. Anonymous aggregate analytics are kept for up to 13 months. You may ask us to remove your identifiable details sooner.

Your choices and rights

You can withdraw email consent, ask what information we hold, request correction or deletion, restrict or object to processing, and complain to the UK Information Commissioner’s Office. These rights are not absolute in every circumstance.

Contact: cryptomarketheat@gmail.com. Put “Privacy request” in the subject line. We may need to verify that the email belongs to you.

Helpful official guidance: ICO right to be informed and ICO analytics and storage exceptions.

International use and age

Some service suppliers may process data outside the UK under their contractual safeguards. This beta is intended for adults aged 18 or over and is not designed to collect children’s information.