— crypto-bazzarSign in

Legal

Privacy Policy

Last updated: [DATE]

Draft. This is a template, not reviewed by counsel. Bracketed placeholders need to be filled in and this page reviewed by a qualified lawyer before launch, consistent with the regulatory review the README already calls for.

What this policy covers

This policy describes what [COMPANY NAME] ("we", "us") collects when you use crypto-bazzar, and why. crypto-bazzar is a non-custodial platform — we never hold your private keys or your funds, which limits what we ever have to collect in the first place.

Information we collect

Wallet addresses you connect or generate, and signatures used to prove you control them (Sign-In With Ethereum and the equivalent linking flow for Bitcoin/Tron wallets).

Contact information you choose to give us: an email address, if you add and verify one, used only for account notifications you opt into.

Transaction records: on-chain trades, sends, and fiat/cross-chain swap orders you initiate are logged for compliance purposes (see "Why we log activity" below). We do not custody the underlying funds at any point.

Standard technical data (IP address, browser/device information, timestamps) collected automatically for security and fraud-prevention purposes.

Why we log activity

As a business operating in a regulated space, we're required to maintain records of account activity for compliance and audit purposes. Every login, trade, and fiat/swap order is written to an append-only audit trail that is never deleted, matching standard practice for regulated financial platforms.

Third parties we share data with

Our fiat on/off-ramp provider, if you buy or sell crypto with fiat currency — they receive the information necessary to process that order.

Market data and blockchain infrastructure providers (e.g. price feeds, RPC nodes, block explorers) that we query to display balances and prices. These providers typically only see wallet addresses, not your identity.

We do not sell your data to anyone.

Cookies and sessions

We use a single session cookie to keep you signed in after you sign a wallet message, and a short-lived cookie during the sign-in process itself to prevent replay attacks. We don't use third-party advertising or tracking cookies.

Your rights

You can view and update your profile information at any time from Settings, and view your linked wallets and account activity from Security. You may request a copy of, or deletion of, the personal data we hold about you (subject to our regulatory obligation to retain compliance records for a minimum period) by contacting us at [PRIVACY CONTACT EMAIL].

Data retention

Compliance-relevant records (audit trail, transaction logs) are retained for the period required by applicable regulation. Other profile data is retained until you request deletion or close your account.

Contact

Questions about this policy can be sent to [PRIVACY CONTACT EMAIL].