Your California Privacy Rights
Last updated: April 2026
CoinKirin does NOT sell your personal information.
We have never sold personal information, and we have no plans to do so. This page exists so California residents can understand their rights under the CCPA/CPRA regardless.
Scope
This notice applies to California residents and describes how we handle your personal information under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). It supplements our general Privacy Policy.
Categories of Information We Collect
We collect the following categories of personal information. For each category, we describe how it is used, how long we keep it, and whether it is shared with service providers.
Identifiers
Examples: Email address, user ID, IP address, browser user-agent string.
Purpose of use: Authentication, account management, rate limiting, fraud prevention, and language/theme personalization.
Retention: Kept while your account is active. IP addresses in access logs are retained for 30 days, then aggregated.
Sharing: Shared with Cloudflare (infrastructure / DDoS protection) and Resend (transactional email delivery) strictly as processors under written agreements. Not sold.
Internet or Network Activity
Examples: Pages visited on coinkirin.com, features used, referring URL, approximate time spent, Core Web Vitals metrics.
Purpose of use: Product analytics (opt-in only), performance monitoring, and identifying broken pages.
Retention: Raw events are retained for up to 90 days, after which data is aggregated and anonymized.
Sharing: Processed only by our own servers. Not shared with advertising networks. Not sold.
Financial Information (You Enter)
Examples: Portfolio holdings and watchlist entries you explicitly save on your account.
Purpose of use: To display your portfolio and watchlist back to you. Never analyzed for marketing or shared for profit.
Retention: Kept until you delete it or close your account. Deletion is immediate and irreversible.
Sharing: Stored only on our servers. Not shared with any third party. Not sold.
Geolocation (Approximate)
Examples: Approximate country and region inferred from your IP address. We do not collect precise GPS location.
Purpose of use: Content localization, regulatory compliance (region-restricted features), and fraud signals.
Retention: Derived on the fly for most requests and not persisted. Present in short-lived access logs (30 days).
Sharing: Inferred by Cloudflare as part of our network layer. Not sold.
Service Providers
We use the following service providers. They process personal information on our behalf under contract and are not permitted to use it for their own purposes:
- Cloudflare — CDN, DDoS protection, and bot management. Processes IP addresses and request metadata.
- Resend — Transactional email delivery (registration, password reset, notifications). Processes email addresses.
These providers are data processors, not recipients of a sale. We do not share personal information with them for any cross-context behavioral advertising purpose.
Your California Rights
As a California resident, you have the following rights:
- Right to know: Request a summary of the personal information we have collected about you, the sources, the purposes of collection, and the categories of third parties with whom we share it.
- Right to delete: Request deletion of your personal information. The fastest way is to delete your account directly from the settings page. Go to account settings.
- Right to correct: Request correction of inaccurate personal information. You can update most profile fields yourself in account settings.
- Right to opt-out of sale or sharing: We do not sell or share your personal information for cross-context behavioral advertising. This right is therefore not applicable, but we document it here so you know it exists.
- Right to non-discrimination: We will not deny service, charge different prices, or provide a different quality of service because you exercised any of these rights.
How to Submit a Request
To exercise any of the rights above, email us using the button below, or contact us via the general contact channel. Please include enough information for us to verify your identity and the scope of your request.
For security, we verify requests by confirming control of the account email. We respond within 45 days; complex requests may require a 45-day extension (we will notify you).
Minors
We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child under 16 has provided us with information, please contact [email protected] and we will delete the data.
Contact
For CCPA/CPRA requests or questions, please email [email protected]. See our full Privacy Policy.