Privacy Policy
01Who we are
gmcrypto.xyz ("gmcrypto", "we", "us", or "our") is an independent crypto market intelligence and education platform. We publish AI-assisted market briefings, technical and fundamental analysis, DeFi tooling, and educational content. This Privacy Policy explains how we handle information when you use our website and services (collectively, the "Service").
We are the data controller for the personal information described in this policy. For any privacy question, contact us at alerts@gmcrypto.xyz.
02Scope of this policy
This policy covers the gmcrypto.xyz website and all features served from it, including the daily briefing, technical analysis, DeFi pages, project research, comparison and portfolio tools, and any newsletter or alert features we offer.
Some features described here are planned but not yet live. Where a feature is not yet available we mark it Planned; features in active use are marked Live. We will not collect the data tied to a planned feature until that feature is released and you choose to use it.
03Information we collect
We have deliberately built the Service to function with as little personal information as possible. Most of what we collect is technical and aggregated rather than identifying.
| Category | What it is | Status |
|---|---|---|
| Usage and analytics data | Pages viewed, approximate region, device and browser type, referring site, and similar non-identifying interaction data collected through Google Analytics 4 to understand how the Service is used. | Live |
| Technical log data | Standard server and hosting logs, including IP address and request metadata, generated automatically by our hosting and infrastructure providers for security and reliability. | Live |
| Feedback data | If you use a "Was this useful?" control on AI-generated content, we record the rating, the page, and a timestamp. This is not linked to your identity. | Live |
| Newsletter email | If you subscribe to our newsletter, we collect your email address with double opt-in confirmation, and process unsubscribe requests on request. | Planned |
| Account email | If we launch accounts, sign-in uses a magic link sent to your email address. We do not use passwords. We would store your email and a display name you choose. | Planned |
| Subscription and billing data | If we launch a paid tier, payments are handled entirely by Stripe. We never see or store your full card number. We retain a Stripe customer identifier and subscription status only. | Planned |
| Public wallet addresses | If you use a wallet-aware feature such as an airdrop eligibility checker, you may paste a public wallet address. We use it only to read public on-chain activity for that check. | Planned |
04Information we do not collect
To remove any ambiguity, we want to be explicit about what we never ask for and never accept:
- Wallet private keys or seed phrases. We never request them, never accept them, and there is no field anywhere in the Service to enter them. Anyone asking for these in our name is not us.
- Custody of funds. We do not hold, move, or transact your crypto assets. The Service is analysis and education only, with no execution capability.
- Full payment card numbers. Card data, if billing launches, is collected and stored by Stripe, not by us.
- Government identity documents. We do not run identity verification.
- Sensitive personal data. We do not seek information about health, race, religion, political views, or similar special categories.
05Data stored on your device
Several features are designed to keep your data with you rather than on our servers. This data lives in your browser's local storage and is not transmitted to us:
- Portfolio holdings. The tokens and allocations you enter into the portfolio assessment tool are stored only in your browser's local storage. We do not receive or retain them.
- Learn progress. Your progress through educational modules is stored locally under an anonymous identifier. If accounts launch and you sign in, you may choose to merge that local progress into your account.
- Interface preferences. Display settings and similar preferences are stored locally for your convenience.
Because this data is local to your device, clearing your browser storage will erase it, and we cannot recover it for you.
06How we use information
We use the limited information we collect to:
- Operate, maintain, and secure the Service.
- Understand aggregate usage so we can improve content, performance, and features.
- Send the newsletter or alerts you have explicitly subscribed to, and honour your unsubscribe choices.
- Authenticate you and manage your subscription, if and when accounts and billing launch.
- Detect, prevent, and respond to fraud, abuse, and technical problems.
- Comply with legal obligations.
We do not sell your personal information. We do not display third-party advertising, and we do not let advertisers pay to influence what the Service shows you.
07Legal bases for processing
Where data protection law such as the GDPR applies, we rely on the following legal bases:
- Legitimate interests for operating, securing, and improving the Service, including aggregate analytics.
- Consent for non-essential cookies and analytics where required, and for newsletter or marketing communications.
- Performance of a contract for account and subscription features, where you have entered into one with us.
- Legal obligation where we are required to retain or disclose information by law.
You can withdraw consent at any time, for example by unsubscribing or adjusting your cookie choices, without affecting processing already carried out.
09Third-party services
The Service relies on reputable third parties to function. Each processes data under its own terms and privacy policy. The main ones are:
| Provider | Purpose |
|---|---|
| Vercel | Website hosting and delivery; processes technical request data. |
| Supabase | Database and, if launched, authentication; stores feedback and any account data. |
| Google Analytics 4 | Aggregate usage analytics. |
| Anthropic (Claude) | Generates AI briefings and analysis from market data; we do not send your personal data into these prompts. |
| Market data providers | CoinGecko, DefiLlama, Binance public market data, and similar sources supply the market data shown. |
| Stripe Planned | Payment processing for any future paid subscription. |
| Email provider Planned | Newsletter and transactional email delivery. |
We embed a TradingView charting widget on some analysis pages. When it loads, TradingView may receive standard technical request data directly from your browser, governed by TradingView's own privacy policy.
11Data retention
We keep information only as long as it serves the purpose for which it was collected, then delete or anonymise it. Aggregate analytics are retained according to our analytics provider's settings. Newsletter and account data, where applicable, are retained until you unsubscribe or close your account, after which we delete or anonymise them within a reasonable period, subject to any legal retention requirement.
12Security
We take reasonable technical and organisational measures to protect information, including encrypted connections, access controls, and reliance on infrastructure providers with strong security practices. If billing launches, payment secrets remain server-side only and are never exposed to your browser.
No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work to protect your information and to respond promptly to any incident.
13Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information, to object to certain processing, to data portability, and to withdraw consent. To exercise any of these, contact alerts@gmcrypto.xyz. We will respond within the timeframe required by applicable law.
Much of the data tied to you can be cleared by you directly: unsubscribe links remove you from the newsletter, browser settings clear cookies and local storage, and local portfolio and progress data never leaves your device in the first place.
14Children
The Service is intended for adults and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it.
15International transfers
We operate online and use providers that may process data in countries other than your own, including the United States. Where personal data is transferred internationally, we rely on appropriate safeguards such as the providers' standard contractual clauses and equivalent mechanisms.
16Changes to this policy
We may update this policy as the Service evolves, particularly as planned features such as accounts, billing, alerts, and the newsletter go live. When we make material changes we will update the "Last updated" date above and, where appropriate, provide a more prominent notice. Continued use of the Service after a change means you accept the updated policy.
17Contact us
For any question about this policy or your information, email alerts@gmcrypto.xyz. To report a data error in our analysis or research, see the methodology page.
Sign in