CryptoSelf - Privacy Policy

CryptoSelf (“we”, “us”, “our”) is a cryptocurrency wallet address link-tree service operated at cryptoself.com. We allow registered users to publish their cryptocurrency wallet addresses in a single shareable link. This policy explains what personal data we collect, why we collect it, and how you can exercise your rights over it.

Account data: email address, bcrypt-hashed password, a randomly-generated username, a support PIN, and the date and IP address of registration.

Profile data: a display name of your choosing, an optional profile photograph stored as an encrypted binary object, and whether your profile is set to public or private.

Wallet address data: cryptocurrency wallet addresses you add to your profile, optionally accompanied by a QR code image generated from that address. No private keys are collected or requested.

Usage data: when your public or private profile is viewed, we log the viewer’s IP address, user agent string, and timestamp for analytics purposes. This data is not tied to a registered account unless the viewer is also logged in.

Contact form data: if you submit a support request, we collect the email address and message body you provide.

Providing the service: your email address and password are used solely to authenticate you. Your display name and wallet addresses are used to build your shareable profile page.

Security: IP addresses and user-agent strings collected at registration and login are used to detect and respond to fraudulent or abusive activity.

Analytics: profile view data (IP, user agent, timestamp) allows you to see how many times your profile has been viewed. We do not use this data for advertising.

Support: contact form submissions are used only to respond to your enquiry.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Cryptocurrency wallet addresses are public information by design. When you add an address to your CryptoSelf profile and set that profile to public, the address will be visible to anyone who visits your profile URL — including search engine crawlers. If you do not want an address publicly visible, use the “Privatise Account” feature or remove the address from your profile.

We do not verify that any wallet address belongs to you. You are solely responsible for the addresses you publish.

We use a single server-side PHP session cookie to keep you logged in. This cookie contains no personal data — it is a random session identifier. No third-party tracking cookies are set by CryptoSelf. The external libraries we load (UIkit, Cirrus, jQuery, Font Awesome, Google Fonts) may set or read their own browser storage; refer to the respective providers’ privacy policies for details.

Your account data is retained for as long as your account is active. If you deactivate your account, your data is flagged as deactivated but not immediately purged. If you request full account deletion, your personal data is marked for removal. You may request permanent deletion at any time by contacting us at security@cryptoself.com.

Profile view logs are retained for up to 12 months and then purged automatically.

Depending on your jurisdiction you may have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data (e.g. change your display name or email in your account settings).
• Erase your data (“right to be forgotten”) — use the account deletion option in Settings or email security@cryptoself.com.
• Restrict or object to certain processing.
• Data portability — contact us to receive an export of your data.

To exercise any of these rights, email us at security@cryptoself.com with the subject “Data Request — [your registered email]”. We will respond within 30 days.

Passwords are stored as bcrypt hashes — we cannot recover your original password. All connections to CryptoSelf are encrypted via HTTPS. We apply CSRF token validation on all state-changing forms and use parameterised database queries throughout to protect against injection attacks.

No security measure is perfect. If you discover a vulnerability, please disclose it responsibly to security@cryptoself.com before public disclosure.

We may update this policy from time to time. The “Last updated” date at the top of this page reflects when changes were last made. Continued use of CryptoSelf after a policy update constitutes acceptance of the revised policy.

For any privacy-related queries, contact us at security@cryptoself.com or use the Support & Contact page. Formal Terms of Use are available on the Terms of Use page.