Privacy Policy

1. Information We Collect

A. Information You Provide Directly

• Email address — when you subscribe to our newsletter, contact us, or sign in with Privy.
• Display name & avatar — if you authenticate via Privy or another OAuth provider.
• Wallet addresses — if you use the Airdrop Checker, Portfolio Tracker, or Wallet Tracker. Stored only in your browser's local storage; never sent to our servers.
• Support inquiries — any messages you send us via email or contact form.
• User-generated content — comments, reviews, or feedback you post on the site.

B. Information Collected Automatically

• IP address — anonymized after 24 hours, used for security and rate limiting.
• User-Agent string — browser, OS, and version.
• Referrer URL — which site sent you to us.
• Pages visited, time on page, scroll depth — anonymous usage analytics.
• Device type & screen resolution — for responsive design.
• Locale and language — for serving the right content.

C. Information From Third Parties

• Privy — provides authentication; receives your email/wallet when you sign in. See privy.io/privacy.
• Google Analytics 4 — anonymous usage analytics.
• Ad partners — may set their own cookies for ad serving and frequency capping.

2. How We Use Your Information

• To deliver, maintain, and improve our content, tools, calculators, and services.
• To remember your preferences: theme (dark/light), language, currency, watchlist, portfolio.
• To analyze aggregate, anonymized usage trends and improve user experience.
• To show relevant, non-intrusive advertising via Google AdSense and direct partners.
• To detect, prevent, and respond to fraud, abuse, security incidents, and DDoS attacks.
• To send you newsletters (only if you opt-in; unsubscribe anytime via link in email).
• To respond to your support inquiries and feedback.
• To comply with legal obligations and respond to lawful requests from authorities.

Legal basis (GDPR): consent (analytics, ads, cookies), contract (service delivery), legitimate interest (security, fraud prevention), legal obligation (compliance).

3. Third-Party Services We Use

4. Cookies & Local Storage

We use browser local storage (not just cookies) to remember your preferences. We classify storage into four categories:

Strictly Necessary (always on)

• theme — dark/light preference
• bitcoinurdu-language — UI language
• bitcoinurdu-currency — display currency (USD, PKR, AED, etc.)

Functional (optional, default on)

• bitcoinurdu-watchlist — your saved coins
• bitcoinurdu-portfolio — your holdings (local only, never transmitted)
• bitcoinurdu-ads — ad frequency capping
• bitcoinurdu-announcements — dismissed admin announcements
• bitcoinurdu-airdrop-checks — recent airdrop check history

Analytics (optional, off until consent)

• Google Analytics 4: _ga, _ga_* — anonymous usage analytics

Advertising (optional, off until consent in EU/UK)

• Google AdSense: _gcl_au, IDE — display advertising
• Direct ad partner cookies (if any)

5. Data Storage & Retention

• localStorage data: retained indefinitely in your browser until you clear it. Not sent to our servers.
• Server logs (Cloudflare): IP addresses anonymized after 24h. Full request logs retained 30 days for security/abuse investigation, then purged.
• Analytics (GA4): retained 14 months, then auto-deleted per Google's policy.
• Firebase data (ads, announcements, airdrop checks): retained as long as your account is active. Deletable on request.
• Support emails: retained 2 years for reference, then archived.

6. Data Security

We implement industry-standard security measures including:

• HTTPS/TLS 1.3 encryption for all data in transit.
• Cloudflare DDoS protection, WAF, and rate limiting.
• Firebase security rules preventing unauthorized writes.
• No storage of private keys, seed phrases, or sensitive wallet data in our systems.
• Regular security audits and dependency updates.
• Principle of least privilege for internal access.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. You are responsible for keeping your wallet seed phrases, passwords, and authentication tokens safe.

7. Children's Privacy

BitcoinUrdu is not intended for children under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us data without parental consent, contact us immediately for deletion. We will delete such data within 7 days of verification.

8. Your Rights (GDPR / CCPA / PIPL)

If you are in the EU/EEA/UK, California, China, or any jurisdiction with privacy laws, you have the right to:

• Access — request a copy of personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure ("right to be forgotten") — request deletion of your data
• Restriction of processing — pause processing while we investigate
• Data portability — receive your data in a structured, machine-readable format
• Object to processing — for direct marketing, profiling, or legitimate interest
• Withdraw consent at any time (e.g., unsubscribe from newsletter, disable analytics)
• Lodge a complaint with your local data protection authority

To exercise these rights, email [email protected]. We respond within 30 days.

9. International Data Transfers

BitcoinUrdu is operated from Pakistan with CDN edge nodes globally. By using the site, you consent to your data being processed in countries with different data protection laws. We use Standard Contractual Clauses (SCCs) for transfers from EU/UK to other regions where required. Firebase and Cloudflare are Privacy Shield / GDPR-compliant processors.

10. Do Not Track (DNT)

We honor the DNT browser signal. If DNT is enabled in your browser, we disable Google Analytics tracking and personalized ads for your session.

11. California Residents (CCPA/CPRA)

California residents have additional rights: know what categories of personal information we collect (Section 1), the right to opt out of "sale or sharing" of personal information (we do not sell your data), the right to limit use of sensitive personal information, and the right to non-discrimination for exercising privacy rights.

To exercise, email [email protected].

12. How to Delete Your Data

• localStorage: Open DevTools → Application → Local Storage → right-click BitcoinUrdu.com → Clear. Or use your browser's "Clear site data" option.
• Cookies: Use your browser's cookie manager or follow the steps in our Cookie Policy.
• Firebase data (ads, announcements, airdrop checks): email [email protected] with your account email.
• Newsletter: Click "Unsubscribe" in any newsletter email.
• Account deletion: Email [email protected]. Processed within 7 days.

13. Changes to This Policy

We may update this policy periodically. Material changes (e.g., new data collection, new third-party services, changes to legal basis) will be announced via a banner on the site for at least 30 days. Non-material changes (typos, clarifications) will be noted with an updated "Last updated" date. Continued use after material changes constitutes acceptance. If you do not agree, you may stop using the site and request data deletion.

14. Contact & Data Protection Officer

Data Controller: BitcoinUrdu
Email: [email protected]
Response time: Within 30 days
Postal address: Available on request for formal GDPR requests