Privacy
Version 1 · updated October 24, 2026
Who is responsible
- Owner
- [Pending: owner's full name]
- Legal name
- [Pending: legal name]
- Tax ID (CUIT)
- [Pending: CUIT]
- Contact email
- [Pending: contact email]
- Address
- [Pending: registered address]
What we process
Your account: your email, your password (stored by our authentication provider as a hash, never in plain text), your display name and language, your favorites and your Trading Demo portfolio (virtual money only). Unconfirmed accounts are deleted after 7 days.
Usage statistics, only if you accept analytics cookies: pages and coins viewed, chart periods, approximate country and city, device and browser, and where the visit came from, through Google Analytics 4. Advertising features and Google signals are off, and the text you type in search is never sent.
Security: to stop abuse we count requests per IP address over a few minutes, keeping a hash of the address, never the address itself. Our authentication provider records sign-ins, with their IP address. Errors are reported without your email or passwords.
Administration: every action of an administrator is recorded with the administrator's email and when it happened, kept for 24 months to protect the site (a legitimate interest). The record is append-only: it is not pseudonymized when that administrator's account is deleted.
Why, and on what legal basis
We use your account data to give you the service you asked for: sign-in, favorites and the Trading Demo.
We use the security data to protect the site and its users, a legitimate interest.
We use the statistics to understand how the site is used, only with your consent, which you can withdraw at any time.
Who processes data for us
These providers process data on our behalf, only for the purposes above:
- Supabase: database and accounts.
- Vercel: hosting of the site.
- Google: Google Analytics 4, only with your consent.
- Sentry: error reports, without your email or passwords.
- Our email provider: account emails (confirmation and password reset).
- Cloudflare: Turnstile, the anti-bot check of the sign-up, sign-in and password forms.
- Fly.io (live price stream): receives your IP address and the page's origin to open the connection; it keeps them only in memory while the connection is open and never logs them.
CoinGecko: coin logos load from CoinGecko's image servers, so your browser sends them your IP address. Market data is requested by our server; your browser sends providers nothing else.
Where every figure comes from: Data Sources.
International transfers
Our database is in the United States (Supabase, us-east-1 region). Vercel, Google, Sentry, Cloudflare, Fly.io and our email provider may process data in other countries.
How long we keep it
| Data | Kept for |
|---|---|
| Account, favorites and Trading Demo portfolio | Until you delete your account |
| Unconfirmed accounts | Deleted after 7 days |
| Sign-in records, with IP address | 30 days |
| Request counters (hash of the IP address) | Until their window ends, a few minutes |
| Administrator actions | 24 months |
| Usage statistics (Google Analytics 4) | 14 months, only with consent |
| Your cookie choice | 12 months |
Your rights
You can ask for access to your data, its correction or deletion, and object to its use, under Argentina's Law 25,326 and the EU GDPR, by writing to the contact email above. You can withdraw your consent to analytics at any time. You can also complain to Argentina's data protection authority, the Agencia de Acceso a la Información Pública (AAIP).
Deleting your account
You can delete your account from My account. Your profile, favorites and Trading Demo portfolio are deleted with it.
Cookies
Necessary, always on: your language, your cookie choice and, while you are signed in, your session. Your theme is saved in your own browser.
Analytics, only if you accept them: the Google Analytics 4 cookies. Declining or withdrawing your consent removes them.