Privacy Policy

1. What We Collect

• Account data: username, email address, a hashed password and, if you set them, a hashed secure password or an authenticator app key. Optional profile data you choose to add: name, bio, website, social links, gender, birthday, company and brand names, avatar and banner images.
• Sign-in providers: when you sign in with Google (or Facebook or Apple, where offered), we receive that account's ID, email address and name. Apple may give a private relay address instead of your email. We never receive your password for those accounts.
• Content: posts, replies, media uploads and private messages you create on the platform.
• Phone notifications: if you turn them on, the push address your browser gives us, the device it belongs to and your notification choices.
• Security & fraud data: IP address, approximate country from your IP (via our CDN or an IP lookup service, shown on your profile), device and browser characteristics, and activity timestamps. This is the data that keeps rewarded views, referrals and publisher traffic honest.
• Payment data: cryptocurrency transaction identifiers and wallet addresses used for deposits and withdrawals. We never see or store card numbers.
• Visitor data on this website: standard server logs and, where you arrive through an affiliate link, the referral code, a 30-day cookie that credits the referrer, and a visitor record (IP, country, referrer) used for the referrer's visitor statistics.
• Visitors of partner sites showing our ad units: IP address, country, device, language, page address and device characteristics, used for billing, aggregate campaign and publisher reports, fraud prevention and frequency caps, and deleted after about one day. Our ad units set no cookies.

2. Why We Collect It

• To operate the service: accounts, feeds, messaging, earning, campaigns and payouts.
• To prevent fraud, which protects everyone's earnings and every advertiser's budget.
• To moderate content: unsafe uploads are blocked, and reported or flagged content is reviewed.
• To show creators and advertisers aggregate audience reports (country, language, device and, for large enough groups, age band and gender), never individual profiles.
• To power AI features: the @coinserom assistant answers your messages, and the AI image and video tools render the prompts you submit.
• To communicate: transactional emails (verification codes, security notices), activity emails (new messages, replies, digests) and product emails (tips, insights, offers). Activity and product emails can be turned off in Settings.
• To measure usage: aggregate analytics on the public site and in the app (Google Analytics, with IP anonymization).

3. Who Processes It

We use processors strictly for the purposes above: cryptocurrency payment processors (deposits and withdrawals), an email provider (SendGrid), Cloudflare (CDN, DDoS protection and country detection), Google (Analytics, reCAPTCHA on sign-in pages, Sign in with Google when you choose it, Maps on the campaign targeting map, and YouTube for videos shared in posts, in privacy-enhanced mode) and, where offered, Meta (Sign in with Facebook) and Apple (Sign in with Apple). Phone notifications are sent encrypted through your browser's push service (such as Google, Apple, Mozilla or Microsoft).

Fraud-prevention services may receive technical data such as IP addresses. Prompts you submit to AI image and video tools go to the media provider that renders them, and staff alerts are delivered through Telegram.

An AI service provider (Anthropic) powers the @coinserom assistant, translations you request and other AI features. We do not sell your personal data to anyone.

4. Cookies & Sessions

We use a session cookie (3 days), a remember-me cookie (3 days) and a trusted-device cookie (1 year) for sign-in and security, a notification cookie (1 year) if you turn on phone notifications, plus browser storage for your display preferences. The public site and the app carry Google Analytics cookies, and sign-in pages carry reCAPTCHA.

Affiliate visits set a 30-day cookie so referrers get credited. Our ad units on partner sites set no cookies. We do not run third-party advertising trackers — ads on Coinserom are targeted by campaign settings (geo, device, language and, for post ads, the gender on your profile), not by profiling you across the web. Every cookie is listed in our Cookie Policy.

5. Private Messages

Direct messages are not used for advertising and not shared with advertisers. Staff access them only to investigate abuse, moderate reported content or meet legal requirements. Messages to @coinserom are answered by an AI assistant, and a short preview can be emailed to you when message emails are on. Phone notifications show a short preview of a new message unless you set a Messages PIN.

6. Retention

Account data is retained while your account exists. Fraud and security logs are retained for as long as needed to protect the platform. Affiliate cookies expire after 30 days and affiliate visitor records after about one day. Copies of deleted messages, and earlier versions of edited messages, are kept privately for up to 90 days for safety reviews; uploads refused as adult content are kept privately for up to 30 days for review. If you deactivate your account, it is permanently deleted after 30 days, except records we must keep for legal or anti-fraud purposes and copies already held by our processors.

7. Your Rights

You can edit your profile data and deactivate your account in Settings at any time. To delete your data, deactivate your account: it is permanently deleted after 30 days, together with its link to your Google (or Facebook or Apple) sign-in. Signing in during that time cancels the deletion. You may request a copy of your data by contacting [email protected]. Depending on your jurisdiction (e.g. GDPR regions), you may have additional rights to restriction, objection and portability — we honor these on request.

8. Security

Passwords are hashed with a modern algorithm, balances are tracked in satoshis with audit history, admin surfaces are access-controlled, and traffic to our sites runs over HTTPS. No system is perfectly secure; if we learn of a breach affecting your data we will notify you without undue delay.

9. Children

Coinserom is for adults. We do not knowingly collect data from anyone under 18; such accounts are removed when identified.

10. Changes

We may update this policy; material changes will be announced on the platform and the "last updated" date revised.

11. Contact

Privacy questions and requests: [email protected].