Privacy Policy
Last Updated: October 12, 2026
At CryptoStrapon, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you subscribe to our newsletter.
What Information We Collect
Newsletter Subscription
When you subscribe to our newsletter, we collect:
- Your email address
- Subscription date and time
- Subscription status (active/inactive)
- GDPR consent timestamp and IP address
- Privacy policy version at time of signup
Contact Form Submissions
When you submit our contact form, we collect:
- Your name
- Your email address
- Your message content
- IP address (for security and fraud prevention)
- Timestamp of submission
- GDPR consent confirmation
Note: Note: Contact submissions are automatically deleted after 30 days for privacy compliance.
Security & Analytics Data
For security, fraud prevention, and service improvement, we collect:
- IP addresses (for rate limiting and bot protection)
- Geolocation data (country, region, city)
- Failed signup attempts (retained for 24 hours)
- Blocked request analytics
- Anonymous usage statistics
Important: Important: IP addresses are considered personal data under GDPR. We use them solely for security purposes and delete them according to our retention schedule.
How We Use Your Information
We use your email address solely for the following purposes:
- Sending you newsletter updates about new crypto scam stories and alerts
- Providing educational content about cryptocurrency security
- Notifying you about emerging scam trends and warnings
We will NEVER sell, rent, or share your email address with third parties for marketing purposes.
Data Storage & Security
Storage Location
Your email address is stored securely in an encrypted database using industry-standard encryption protocols. Our infrastructure is hosted on secure cloud servers with robust security measures.
Security Measures
- End-to-end encryption for data transmission
- Regular security audits and vulnerability assessments
- Restricted access controls - only authorized personnel can access subscriber data
- Automated backup systems to prevent data loss
- SSL/TLS encryption for all data in transit
Data Retention
We retain your data according to the following schedules:
- Active newsletter subscribers: Retained while subscription is active
- Inactive subscribers: Automatically deleted after 6 months of inactivity
- Newsletter signup attempts: Deleted after 24 hours
- Contact form submissions: Deleted after 30 days
- Security logs: Deleted according to security requirements (7-30 days)
This data minimization approach ensures we only retain data necessary for service operation and security.
Your Rights Under GDPR
If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):
Right to Access
You have the right to request a copy of the personal data we hold about you.
Right to Rectification
You can request that we correct any inaccurate or incomplete personal data.
Right to Erasure ("Right to be Forgotten")
You can request that we delete your personal data from our systems. Contact us at the email address below to exercise this right.
Right to Withdraw Consent
You can withdraw your consent to receive our newsletter at any time by clicking theunsubscribe linkin our footer or any newsletter email.
Right to Data Portability
You can request a copy of your data in a machine-readable format.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes.
How to Unsubscribe
You can unsubscribe from our newsletter at any time by:
- Visiting our unsubscribe page
- Clicking the unsubscribe link in any newsletter email
- Contacting us directly (see contact information below)
Once you unsubscribe, you will immediately stop receiving newsletter emails. Your email will be marked as inactive and cannot be used to subscribe again.
Third-Party Services
We use trusted third-party service providers to help us deliver our services:
- Lovable Cloud (Supabase): Database hosting, authentication, and backend infrastructure
- Resend: Email delivery service for sending newsletters and notifications
- IP Geolocation Services: For security and fraud prevention
All third-party providers are carefully selected and required to comply with GDPR and maintain high security standards. We have data processing agreements in place with all processors handling personal data.
Cookies
Our website uses essential cookies for basic functionality and analytics cookies to understand visitor behavior. Both cookie types are enabled by default. You can view more information on our Cookie Settings page.
We do not use advertising or tracking cookies that follow you across websites.
Children's Privacy
Our newsletter service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it immediately.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your GDPR rights, or need to contact us regarding your data:
Visit our Contact page to get in touch.
We will respond to all requests within 30 days as required by GDPR.
Legal Basis for Processing
Under GDPR, we process your personal data based on the following legal grounds:
- Consent: You have explicitly consented to receive our newsletter by subscribing
- Legitimate Interest: We have a legitimate interest in providing educational content about cryptocurrency scams to protect users
We don't chase scammers. We document playbooks.